Role OverviewRGP is seeking a senior Software Engineer – Application Security to analyze and fix application-security vulnerabilities across a primarily Microsoft .NET technology estate.
What You Will Do
Embed with engineering teams to remediate vulnerabilities across .NET applications and services, support security fixes in Java, Spring Boot, React, and TypeScript applications as needed.
Why It Might Be a Fit
The emphasis is on hands-on engineering, technical leadership, and the safe delivery of production-ready fixes.
Requirements
- Six or more years of software-engineering experience
- Strong hands-on .NET expertise
- Proficiency in C#, ASP.NET Core, Web API, Entity Framework, REST APIs, and microservices
- Practical experience remediating vulnerabilities using OWASP, CWE, and CVE guidance
- Experience interpreting findings from SAST, DAST, SCA, penetration testing, and code scans
- Knowledge of OAuth, OIDC, JWT, RBAC, encryption, TLS, secrets management, and API security
- Working knowledge of Java, Spring Boot, React, and TypeScript
- Experience with Azure services, including App Services, Functions, API Management, and Key Vault
- Familiarity with CI/CD platforms, Git, Docker, Kubernetes, or OpenShift
- Strong automated-testing, production-support, debugging, and root-cause-analysis skills
- Financial-services experience with the ability to lead, mentor, and communicate across teams
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- Disability insurance
- 401(k) Savings Plan
- Employee Stock Purchase Plan
- Professional Development Program
- Paid Time Off
- Paid Sick Time
- Paid holidays
]]>