Software Engineer, Security Focus

🔥 42 minutes ago

🌵 Arizona – Remote

🌵 Arizona – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

eVisit

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2013

🏥 Healthcare

⚕️ Healthcare Insurance

☁️ SaaS

Healthcare • Healthcare Insurance • SaaS

eVisit is a company that provides telemedicine solutions to healthcare organizations, enabling them to offer virtual visits to patients. Their platform integrates seamlessly into existing workflows and is designed to improve the accessibility and efficiency of healthcare delivery.

📋 Description

• Own end-to-end remediation of vulnerabilities surfaced by penetration tests and other security assessments, from triage through verified fix • Examine front-end/back-end session traffic using browser-based code inspection tools and identify excessive or sensitive information exposure • Translate security findings into concrete, testable requirements in Technical Requirements Documents (TRDs) • Review and harden session management practices across the application stack • Implement fixes across Ruby on Rails, React, AWS, Fargate, and containerized services • Assess and secure real-time and API-driven features, including Pusher, AnyCable, and RESTful APIs • Document vulnerabilities, root causes, remediation steps, and verification results • Contribute security context and vocabulary to FedRAMP-related discussions and requirements • Design, build, and ship features across the Ruby on Rails back end and React front end • Apply secure-by-design practices to new development • Participate in code reviews, testing, and technical design discussions

🎯 Requirements

• 5+ years of hands-on software engineering experience, with broad full-stack work across multiple applications and technology layers • Working proficiency in Ruby on Rails and React • Experience with containerized environments, AWS, and Fargate • Solid API experience, including RESTful API design and security considerations • Hands-on experience with Pusher and AnyCable, or comparable real-time messaging technologies • Knowledge of Ruby data models and how schema and query design affect performance and scalability • 5+ years of experience in a security engineering or closely related role • Proven experience remediating vulnerabilities identified through penetration testing • AWS Security certification(s) (e.g., AWS Certified Security – Specialty) • General familiarity with FedRAMP • Comfortable using browser developer/code inspection tools to inspect network and session traffic • Able to identify excessive information exposure between backend and frontend and explain the risk clearly • Able to translate security findings into actionable design requirements for the TRD • Solid understanding of session management principles and common pitfalls • Strong written communication skills, with the ability to document vulnerabilities, remediations, and technical requirements clearly for engineering and non-engineering audiences • Experience with Pulumi for infrastructure as code (nice to have) • Python experience (nice to have) • SQL skills (nice to have) • Active or eligible for security clearance (nice to have)