This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Mid-Level Full Stack Engineer .NET + Angular based in Brazil.
This is an opportunity to work on full-stack applications where software engineering and application security come together. You will work directly with production codebases to remediate vulnerabilities, strengthen application security, and protect system integrity. The role spans backend and frontend development, dependency management, testing, authentication, authorization, and infrastructure hardening. You’ll take ownership of security fixes from investigation and implementation through testing, deployment, and documentation. The environment is collaborative and international, requiring close communication with distributed engineering and DevOps teams. You’ll also have the opportunity to improve engineering processes through automation and responsible use of AI coding tools. This is a strong fit for a developer who enjoys solving complex problems and wants security to be an integral part of their engineering practice.
Accountabilities:
- Identify and remediate security vulnerabilities across full-stack applications, including dependency upgrades, code-level vulnerabilities, credential management, and container or Kubernetes hardening.
- Implement fixes for issues such as authorization weaknesses, cross-site scripting (XSS), path traversal, SQL injection, weak cryptography, and other application security findings.
- Upgrade NuGet, npm, and other application dependencies, diagnosing build, compatibility, and behavioral issues associated with major version changes.
- Write comprehensive tests for every security remediation, including unit tests that demonstrate vulnerabilities have been addressed and functional tests confirming that existing features continue to work correctly.
- Own upgrades and security improvements end to end, from investigation and implementation through validation and production readiness.
- Document technical findings, upgrade decisions, security analysis, and lessons learned to help prevent recurring issues and improve team knowledge.
- Collaborate with teams responsible for different applications and repositories, gathering context, participating in code reviews, and aligning remediation strategies with existing architectures.
- Coordinate credential and secret rotations with DevOps teams, ensuring changes are sequenced safely across all systems and services that consume the affected credentials.
- Evaluate security findings critically, identifying false positives, inappropriate remediation approaches, or fixes that may conflict with the underlying architecture.
- Develop automation and processes that help keep routine dependency updates and security maintenance from accumulating in the engineering backlog.
- Contribute to secure coding practices and help strengthen application security awareness across development teams.
Requirements
- 3–5 years of professional software engineering experience, with solid hands-on experience developing production applications.
- Strong C# and .NET experience, including practical development with ASP.NET Core web applications.
- Solid TypeScript experience with modern frontend frameworks, preferably Angular; experience with React or Vue is also transferable.
- Working knowledge of SQL, including writing queries, understanding parameterization, and working with ORMs or other data-access layers.
- Consistent experience writing automated tests, including unit testing and exposure to integration and/or end-to-end testing.
- Strong Git skills, including branching strategies, rebasing, clean commits, and creating useful, reviewable Pull Requests.
- Ability to quickly understand, navigate, and contribute to unfamiliar or complex codebases.
- Clear written and spoken English for daily collaboration with distributed and international teams.
- Genuine interest in application security and secure software development practices.
- Previous experience with security remediation, secure code reviews, vulnerability triage, or application security is a strong advantage.
- Familiarity with Docker, particularly security-related configuration and container hardening, is desirable.
- Knowledge of authentication and authorization technologies such as OAuth 2.0, OpenID Connect (OIDC), and JWT is a plus.
- Experience managing application dependencies, including lockfiles, transitive dependencies, and resolving upgrade conflicts, is advantageous.
- Exposure to Java or Python is considered a plus.
- Experience using AI-assisted coding tools such as Claude Code, Codex, Cursor, or Copilot, combined with strong critical judgment when working with security-sensitive code, is desirable.
- Strong analytical and problem-solving skills, ownership, attention to detail, and the ability to make sound technical judgments in complex situations.
Benefits
- Equipment provided: Company-provided work equipment, so you do not need to supply your own device.
- Remote work: 100% remote work from Brazil, with access to a physical headquarters in Florianópolis whenever you want to work from an office.
- Full professional support: Dedicated Legal, Accounting, HR Business Partner, and Delivery support throughout your engagement.
- Career mentoring: Guidance on professional development, communication, and navigating international and US work culture.
- English development: Free English lessons with a native speaker.
- Referral program: Referral bonuses for recommending qualified technology professionals.
- International exposure: Opportunity to work with software teams and projects serving the North American market.
- Career growth: Ongoing support throughout recruitment, onboarding, professional development, and international career progression.
- Collaborative environment: Work alongside distributed engineering teams and gain exposure to modern software development, cloud, security, and DevOps practices.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
