[Remote] Senior Backend/API Security Developer
Note: The job is a remote job and is open to candidates in USA. UST is a technology company that helps clients create transformative experiences and human-centered solutions. The Senior Backend/API Security Developer will design, develop, and secure enterprise-grade APIs handling sensitive data, while implementing authentication, encryption, compliance, monitoring, and threat protection. The role also provides technical leadership and collaborates with DevOps engineers on CI/CD pipeline development.
Responsibilities
- Design Secure Architectures: Build scalable RESTful and GraphQL APIs using AWS services like Amazon API Gateway, AWS Lambda, and Amazon VPC while applying the principle of least privilege
- Enforce Strict Authentication: Implement robust identity and access management using OAuth 2.0, OpenID Connect (OIDC), AWS IAM, and Amazon Cognito
- Ensure Regulatory Compliance: Maintain data protection standards required by regulations like HIPAA, GDPR, or PCI-DSS through proper data masking, tokenization, and auditing
- Manage Encryption Standards: Ensure all data in transit uses TLS 1.3 and data at rest is encrypted using AWS Key Management Service (KMS) with customer-managed keys
- Conduct Security Audits: Perform automated security scans, static code analysis, and vulnerability assessments using tools like Amazon Inspector and AWS Security Hub
- Implement Rate Limiting and WAF: Protect backend systems from distributed denial-of-service (DDoS) attacks and injection flaws using AWS WAF and API Gateway throttling controls
- Establish Comprehensive Logging: Configure centralized monitoring and threat detection using Amazon CloudWatch, AWS CloudTrail, and Amazon GuardDuty for complete audit trails
- Collaborate with DevOps engineers in designing and developing CI/CD pipeline using Codepipeline
Skills
- UST is searching for a Senior Backend/API Security Developer (B2) with strong expertise in Python, Node.js, or Java and AWS, responsible for designing, developing, and securing enterprise-grade APIs that handle highly sensitive data
- Experience with cloud-native development, OWASP API Security standards, OAuth2/OIDC, and large-scale microservices architectures is required
- Skills: AWS, OAuth 2.0, Node.js, PostgreSQL
Benefits
- Full-time, regular employees accrue a minimum of 10 days of paid vacation per year.
- Full-time, regular employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).
- Full-time, regular employees receive 10 paid holidays.
- Full-time, regular employees are eligible for paid bereavement leave and jury duty.
- Full-time, regular employees are eligible to participate in the Company’s 401(k) Retirement Plan with employer matching.
- Full-time, regular employees and their dependents residing in the US are eligible for medical, dental, and vision insurance.
- Company-paid basic life insurance for full-time, regular employees.
- Company-paid accidental death and disability insurance for full-time, regular employees.
- Company-paid short- and long-term disability benefits for full-time, regular employees.
- Full-time, regular employees may purchase additional voluntary short-term disability benefits.
- Full-time, regular employees may participate in a Health Savings Account (HSA).
- Full-time, regular employees may participate in a Flexible Spending Account (FSA) for healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines.
- Part-time employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).
- Part-time employees are eligible to participate in the Company’s 401(k) Retirement Plan with employer matching.
- Full-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).
- Full-time temporary employees are eligible to participate in the Company’s 401(k) program with employer matching.
- Full-time temporary employees and their dependents residing in the US are eligible for medical, dental, and vision insurance.
- Part-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).
- All US employees who work in a state or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws.
Company Overview