Note: The job is a remote job and is open to candidates in USA. UST is seeking a Senior Backend/API Security Developer to design, develop, and secure enterprise-grade APIs that handle highly sensitive data. The role leads API security standards, implements secure architecture patterns, and helps build a world-class API engineering practice.
Responsibilities
- Design Secure Architectures: Build scalable RESTful and GraphQL APIs using AWS services like Amazon API Gateway, AWS Lambda, and Amazon VPC while applying the principle of least privilege
- Enforce Strict Authentication: Implement robust identity and access management using OAuth 2.0, OpenID Connect (OIDC), AWS IAM, and Amazon Cognito
- Ensure Regulatory Compliance: Maintain data protection standards required by regulations like HIPAA, GDPR, or PCI-DSS through proper data masking, tokenization, and auditing
- Manage Encryption Standards: Ensure all data in transit uses TLS 1.3 and data at rest is encrypted using AWS Key Management Service (KMS) with customer-managed keys
- Conduct Security Audits: Perform automated security scans, static code analysis, and vulnerability assessments using tools like Amazon Inspector and AWS Security Hub
- Implement Rate Limiting and WAF: Protect backend systems from distributed denial-of-service (DDoS) attacks and injection flaws using AWS WAF and API Gateway throttling controls
- Establish Comprehensive Logging: Configure centralized monitoring and threat detection using Amazon CloudWatch, AWS CloudTrail, and Amazon GuardDuty for complete audit trails
- Collaborate with DevOps engineers in designing and developing CI/CD pipeline using Codepipeline
- The ideal candidate will drive API security standards, implement secure architecture patterns, and serve as a key technical leader in building a world-class API engineering practice
Skills
- Strong expertise in Python, Node.js, or Java and AWS
- Experience with cloud-native development, OWASP API Security standards, OAuth2/OIDC, and large-scale microservices architectures
- AWS
- OAuth 2.0
- Node.js
- PostgreSQL
Benefits
- Full-time, regular employees accrue a minimum of 10 days of paid vacation per year.
- Full-time, regular employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).
- Full-time, regular employees receive 10 paid holidays and are eligible for paid bereavement leave and jury duty.
- Full-time, regular employees are eligible to participate in the Company’s 401(k) Retirement Plan with employer matching.
- Full-time, regular employees and their dependents residing in the US are eligible for medical, dental, and vision insurance.
- Full-time, regular employees receive Company-paid Employee Only basic life insurance, accidental death and disability insurance, and short- and long-term disability benefits.
- Regular employees may purchase additional voluntary short-term disability benefits.
- Regular employees may participate in a Health Savings Account (HSA) and a Flexible Spending Account (FSA) for healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines.
- Benefits offerings vary in Puerto Rico.
- Part-time employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company’s 401(k) Retirement Plan with employer matching.
- Full-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company’s 401(k) program with employer matching.
- Full-time temporary employees and their dependents residing in the US are eligible for medical, dental, and vision insurance.
- Part-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).
- All US employees who work in a state or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws.
Company Overview
Company H1B Sponsorship