Backend Engineer

About the Project

We are building an AI-powered healthcare platform where security, privacy, and data protection are important parts of the product.

We are looking for a Backend .NET Developer to join the engineering team and work on backend development with a strong focus on application security. You’ll work with an existing .NET codebase, implement security improvements, strengthen application architecture, and contribute to secure development practices across the product. This is a hands-on engineering role where you’ll implement solutions directly in the codebase, not just identify security issues.

Requirements:

• 3.5 + years of commercial experience with C# and .NET Core.
• Strong knowledge of .NET Core, backend architecture, and authorization.
• Experience working with authorization policies, handlers, and resource-based authorization.
• Experience with Azure services, including Azure AD B2C and Key Vault.
• Understanding of application security principles, secrets management, encryption, and secure coding practices.
• Experience working with CI/CD pipelines and implementing security or quality controls.
• Experience working with large existing codebases.
• Upper-Intermediate level of English.

Nice to Have:

• Experience identifying and fixing authorization or multi-tenant data isolation issues.
• Experience with static analysis, dependency scanning, or vulnerability management.
• Experience with key rotation and encryption at rest.
• Experience with penetration testing or security audit remediation.
• Experience securing Angular or other SPA applications.
• Familiarity with SOC 2, HIPAA, or similar compliance frameworks.

Responsibilities

• Develop and maintain backend functionality using C# and .NET Core.
• Design and implement secure authorization architecture, including authorization policies, handlers, and resource-based authorization.
• Implement application security improvements across the existing codebase.
• Strengthen secrets management, encryption, and protection of sensitive application data.
• Improve security monitoring, logging, and proactive alerting.
• Introduce static analysis, dependency scanning, and security controls into the CI/CD pipeline.
• Improve application security across Azure AD B2C, Key Vault, and related services.
• Collaborate with the engineering team on threat modeling, security reviews, and secure feature development.

📍Lviv, Ukraine (hybrid)

Відгукнутись на вакансію