SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
eVisit is seeking a hands-on full-stack Software Engineer with a primary focus on security remediation. This is an engineering role first: you will own end-to-end remediation of vulnerabilities identified through penetration testing and security assessments, working across the codebase, session traffic, and infrastructure to fix underlying issues and prevent recurrence.
You will work closely with engineering and design teams to translate real-world security findings into concrete, testable requirements in Technical Requirements Documents (TRDs), and personally implement or oversee fixes. Key responsibilities include triaging and remediating vulnerabilities, analyzing browser-based session traffic to identify excessive or sensitive information exposure, hardening session management practices, and securing real-time and API-driven features built on Pusher, AnyCable, and RESTful APIs. You will also document vulnerabilities, root causes, remediation steps, and verification results, and contribute security context to FedRAMP-related discussions.
As the security backlog comes under control, you will have flexibility to contribute to application development across the Ruby on Rails and React platform, bringing a security-minded perspective to new features. You will participate in code reviews, technical design discussions, and help the team avoid reintroducing known vulnerability classes.
The role operates within a containerized AWS/Fargate environment and requires strong full-stack capabilities, analytical skills to inspect network traffic and identify information exposure risks, and the ability to translate security findings into actionable design requirements for both engineering and non-technical stakeholders.
**Requirements:**
**Engineering Experience:**
- 5+ years of hands-on software engineering experience with broad full-stack work across multiple applications and technology layers
- Working proficiency in Ruby on Rails and React
- Experience with containerized environments, AWS, and Fargate
- Solid API experience, including RESTful API design and security considerations
- Hands-on experience with Pusher and AnyCable, or comparable real-time messaging technologies
- Knowledge of Ruby data models and how schema and query design affect performance and scalability
**Security Experience:**
- 5+ years of experience in a security engineering or closely related role
- Proven experience remediating vulnerabilities identified through penetration testing
- AWS Security certification(s) (e.g., AWS Certified Security – Specialty)
- General familiarity with FedRAMP: enough understanding of vocabulary and framework to contribute meaningfully to a FedRAMP-related project
**Analytical Skills:**
- Comfortable using browser developer/code inspection tools to inspect network and session traffic
- Able to identify when too much information is being exposed between backend and frontend, and explain the risk clearly to engineering and design stakeholders
- Able to translate security findings into actionable design requirements that feed into the TRD
**Communication:**
- Strong written communication skills, with ability to document vulnerabilities, remediations, and technical requirements clearly for both engineering and non-engineering audiences
**Nice to Have:**
- Experience with Pulumi for infrastructure as code
- Python experience
- SQL skills
- Active or eligible for security clearance
