[Hiring] Software Engineer @eVisit

Role Description

We are looking for a hands-on full-stack Software Engineer who will focus primarily on security remediation. Your first priority will be owning the remediation of vulnerabilities identified through penetration testing: not just reporting findings, but digging into the codebase, session traffic, and infrastructure to fix the underlying issues and prevent them from recurring. You will work closely with engineering and design teams to translate real-world security findings into concrete, testable requirements in our Technical Requirements Documents (TRDs), and you will personally implement or oversee the fixes.

This is an engineering role first. As the security backlog comes under control, you will have the flexibility to contribute to application development across our Ruby on Rails and React platform, bringing a security-minded perspective to the features you build.

Qualifications

• 5+ years of hands-on software engineering experience, with broad full-stack work across multiple applications and technology layers.
• Working proficiency in Ruby on Rails and React.
• Experience with containerized environments, AWS, and Fargate.
• Solid API experience, including RESTful API design and security considerations.
• Hands-on experience with Pusher and AnyCable, or comparable real-time messaging technologies.
• Knowledge of Ruby data models and how schema and query design affect performance and scalability.

Requirements

• 5+ years of experience in a security engineering or closely related role.
• Proven experience remediating vulnerabilities identified through penetration testing.
• AWS Security certification(s) (e.g., AWS Certified Security – Specialty).
• General familiarity with FedRAMP: enough understanding of the vocabulary and framework to contribute meaningfully to a FedRAMP-related project.
• Comfortable using browser developer/code inspection tools to inspect network and session traffic.
• Able to identify when too much information is being exposed between backend and frontend, and to explain the risk clearly to engineering and design stakeholders.
• Able to translate security findings into actionable design requirements that feed directly into the TRD.

Benefits

• Feature Development: Design, build, and ship features across the Ruby on Rails back end and React front end alongside the broader engineering team.
• Secure by Design: Apply what you learn from remediation work to new development, helping the team avoid reintroducing known classes of vulnerabilities.
• Code Quality: Participate in code reviews, testing, and technical design discussions, with an eye toward both security and maintainability.

Documentation

• Strong written communication skills, with the ability to document vulnerabilities, remediations, and technical requirements clearly for both engineering and non-engineering audiences.

Nice to Have

• Experience with Pulumi for infrastructure as code.
• Python experience.
• SQL skills.
• Active or eligible for security clearance.