Senior Platform Security Engineer – Ruby, API Security, Authentication

🕒 March 11

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ORAEX CLOUD CONSULTING

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2012

🏢 Enterprise

🤖 Artificial Intelligence

Consulting • Enterprise • Artificial Intelligence

ORAEX CLOUD CONSULTING is a consulting services company in Information Technology, founded in 2012. It specializes in delivering technological solutions to optimize the business results of its clients. ORAEX focuses on innovation and utilizes high-tech knowledge to propose tailored solutions that meet customer needs. The company aims to develop innovative technological solutions while maintaining a commitment to quality, efficiency, and customer satisfaction. With a simple structure and competitive rates, ORAEX fosters long-lasting relationships based on trust and excellence in service delivery.

📋 Description

• Serve as a technical security lead for platform security, focusing on internal APIs and authentication solutions. • Develop, maintain, and evolve tools, libraries, and APIs in Ruby to integrate security controls directly into platform services. • Design and implement robust API security mechanisms, ensuring proper application of OAuth 2.0, OpenID Connect (OIDC), JWT, and least-privilege practices. • Define and implement API security controls, including authentication, authorization, rate limiting, input validation, and protection of data in transit and at rest. • Integrate SAST, DAST, and SCA practices and tools into the CI/CD pipeline, ensuring code and artifacts meet security standards. • Conduct security code reviews, especially for Ruby services, and actively participate in defining secure architectures. • Support the incident response team in investigating and remediating application and platform vulnerabilities. • Act as a technical partner to Platform and Product teams, providing security best-practice guidance and enabling developers. • Create and maintain technical documentation, playbooks, and security engineering standards for internal and external consumption.

🎯 Requirements

• Strong hands-on experience as a software engineer, preferably focused on APIs or platform services. • Proficiency in Ruby and its ecosystem, with experience building scalable applications. • Deep knowledge of API security, including authentication, authorization, rate limiting, input validation, and data protection. • Practical experience with OAuth 2.0, OpenID Connect (OIDC), and JWT. • Experience with Infrastructure as Code (IaC), microservices architectures, and container security (Docker/Kubernetes). • Familiarity with security and services from at least one major cloud provider (AWS, GCP, or Azure). • Experience with SAST, DAST, and SCA tools and integrating them into the development lifecycle. • Ability to work hands-on while also providing technical guidance to less experienced colleagues. • Experience with security-by-design practices and secure architecture and code review.