Senior Backend Developer – Application Security & DevSecOps

We need a senior‑level backend engineer who can design, build and secure production‑grade services and APIs, ensuring security is woven into every stage from architecture to deployment. The role demands hands‑on coding plus deep expertise in application security, DevSecOps and Git‑based workflows. What You'll Do Design and build scalable, secure backend services and databases. Develop and document robust RESTful APIs with authentication and rate‑limiting. Embed security controls following Secure‑by‑Design and OWASP standards. Integrate automated security testing into CI/CD pipelines. Conduct code and architecture reviews focusing on vulnerability mitigation. Monitor production services, logging, and alerts to detect and respond to security incidents. Optimize database queries and indexing for performance while maintaining encryption at rest. What You Need 5+ years backend development with production‑grade services. Deep experience creating and securing REST APIs (OAuth2, tokens, RBAC). Strong command of Git workflows, branch protection, and code reviews. Hands‑on implementation of CI/CD and DevSecOps security gates. Proven ability to apply OWASP Top 10 and API security best practices. Experience securing database access, encryption, and managing secrets in production. Ability to translate security standards into concrete code and architecture decisions. Good to Have Experience with SAST/DAST tools such as SonarQube, OWASP ZAP. Container security expertise in Docker/Kubernetes environments. Cloud security knowledge across AWS, GCP, or Azure. The Opportunity You’ll shape the security posture of critical backend platforms while collaborating across engineering, DevOps, and security teams.