[Remote] Senior Backend/API Security Developer

Note: The job is a remote job and is open to candidates in USA. UST is a technology company that creates transformative experiences and human-centered solutions through innovation and agility. UST is seeking a Senior Backend/API Security Developer to design, develop, and secure enterprise-grade APIs handling sensitive data, while leading secure architecture, authentication, compliance, encryption, monitoring, and CI/CD practices.

Responsibilities

• Design Secure Architectures: Build scalable RESTful and GraphQL APIs using AWS services like Amazon API Gateway, AWS Lambda, and Amazon VPC while applying the principle of least privilege
• Enforce Strict Authentication: Implement robust identity and access management using OAuth 2.0, OpenID Connect (OIDC), AWS IAM, and Amazon Cognito
• Ensure Regulatory Compliance: Maintain data protection standards required by regulations like HIPAA, GDPR, or PCI-DSS through proper data masking, tokenization, and auditing
• Manage Encryption Standards: Ensure all data in transit uses TLS 1.3 and data at rest is encrypted using AWS Key Management Service (KMS) with customer-managed keys
• Conduct Security Audits: Perform automated security scans, static code analysis, and vulnerability assessments using tools like Amazon Inspector and AWS Security Hub
• Implement Rate Limiting and WAF: Protect backend systems from distributed denial-of-service (DDoS) attacks and injection flaws using AWS WAF and API Gateway throttling controls
• Establish Comprehensive Logging: Configure centralized monitoring and threat detection using Amazon CloudWatch, AWS CloudTrail, and Amazon GuardDuty for complete audit trails
• Collaborate with DevOps engineers in designing and developing CI/CD pipeline using Codepipeline

Skills

• UST is searching for a Senior Backend/API Security Developer (B2) with strong expertise in Python, Node.js, or Java and AWS, responsible for designing, developing, and securing enterprise-grade APIs that handle highly sensitive data
• Experience with cloud-native development, OWASP API Security standards, OAuth2/OIDC, and large-scale microservices architectures is required
• Skills: AWS, OAuth 2.0, Node.js, PostgreSQL

Benefits

• Full-time, regular employees accrue a minimum of 10 days of paid vacation per year.
• Full-time, regular employees receive 6 days of paid sick leave each year, pro-rated for new hires throughout the year.
• Full-time, regular employees receive 10 paid holidays.
• Full-time, regular employees are eligible for paid bereavement leave and jury duty.
• Full-time, regular employees are eligible to participate in the Company’s 401(k) Retirement Plan with employer matching.
• Full-time, regular employees and their dependents residing in the US are eligible for medical, dental, and vision insurance.
• Company-paid basic life insurance for full-time, regular employees.
• Company-paid accidental death and disability insurance for full-time, regular employees.
• Company-paid short- and long-term disability benefits for full-time, regular employees.
• Regular employees may purchase additional voluntary short-term disability benefits.
• Regular employees may participate in a Health Savings Account (HSA).
• Regular employees may participate in a Flexible Spending Account (FSA) for healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines.
• Part-time employees receive 6 days of paid sick leave each year, pro-rated for new hires throughout the year.
• Part-time employees are eligible to participate in the Company’s 401(k) Retirement Plan with employer matching.
• Full-time temporary employees receive 6 days of paid sick leave each year, pro-rated for new hires throughout the year.
• Full-time temporary employees are eligible to participate in the Company’s 401(k) program with employer matching.
• Full-time temporary employees and their dependents residing in the US are eligible for medical, dental, and vision insurance.
• Part-time temporary employees receive 6 days of paid sick leave each year.
• All US employees who work in a state or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws.

Company Overview

Company H1B Sponsorship