{"schemaVersion":"jobsearcher.job.v1","id":"2cc75c2210299afff10f29e2","url":"https://jobsearcher.com/jobs/2cc75c2210299afff10f29e2","canonicalUrl":"https://jobsearcher.com/jobs/2cc75c2210299afff10f29e2","title":"Sr. Software Engineer - .NET","description":"About the RoleWe are seeking a Senior Software Engineer (.NET) to join our Never-Ending Support (NES) team. This role focuses on our “NES for .NET” product line, where you will produce critical security patches for CVEs affecting end-of-life versions of .NET and other NuGet packages, as well as build the tooling and automation that makes that work scale.Key ResponsibilitiesAnalyze CVEs and upstream security fixes in .NET Runtime, ASP.NET Core, SDK, and related packages, and apply them to end-of-life .NET versionsBuild, test, and reproduce end-of-life .NET versions on modern and legacy toolchains, including resurrecting build environments and pinning dependencies that no longer resolveBuild and utilize AI-assisted automation for triage, patch analysis, backport drafting, and regression verification, to scale the product securing process.Build and maintain test harnesses that validate CVE patch correctness and backwards compatibilityProvide support to customers' engineering teams on compatibility issues, and upgrade pathsRequired QualificationsDeep expertise in C#, and the .NET ecosystem. Low-level experience with the .NET Runtime, .NET SDK and other .NET ecosystem projectsDemonstrated ability to read and reason about unfamiliar low-level code: understanding a security patch well enough to reimplement it against a different code baselineExperience building and debugging complex software from source, including toolchain and build-system archaeologyExperience building software for multiple platforms (Windows, macOS, Linux distributions including RHEL, etc.)Strong ownership of correctness and quality – rigorous testing, regression coverage, and an instinct for what a patch might breakPractical experience using LLMs to automate real engineering work, with judgment about where automation helps and where it can't be trustedComfortable in a small, high-autonomy team where you help shape the process, as much as follow itAbility to communicate with customers in early product iterations, or in tier-3 support capacitiesPreferred QualificationsContributions to .NET open source projects – dotnet/runtime, dotnet/aspnetcore, or widely used NuGet packagesStrong grasp of security fundamentals – CVEs, CVSS, common vulnerability classes (deserialization, path traversal, cryptographic misuse, DoS via resource exhaustion), and how to assess exploitabilityFamiliarity with container image hardening, SBOMs, artifact signing, and supply chain securityExperience building and deploying services built on .NET in Microsoft AzureExperience as either a technical lead or team leadExperience running production services on Azure, AWS and KubernetesBackground in security research, vulnerability triage, or product security","company":"Herodevs","rawCompany":"herodevs","city":"Denver","state":"CO","isRemote":false,"isActive":false,"createdAt":"2026-10-06T12:01:26.869Z","occupations":[{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Sr. Software Engineer - .NET","description":"About the RoleWe are seeking a Senior Software Engineer (.NET) to join our Never-Ending Support (NES) team. This role focuses on our “NES for .NET” product line, where you will produce critical security patches for CVEs affecting end-of-life versions of .NET and other NuGet packages, as well as build the tooling and automation that makes that work scale.Key ResponsibilitiesAnalyze CVEs and upstream security fixes in .NET Runtime, ASP.NET Core, SDK, and related packages, and apply them to end-of-life .NET versionsBuild, test, and reproduce end-of-life .NET versions on modern and legacy toolchains, including resurrecting build environments and pinning dependencies that no longer resolveBuild and utilize AI-assisted automation for triage, patch analysis, backport drafting, and regression verification, to scale the product securing process.Build and maintain test harnesses that validate CVE patch correctness and backwards compatibilityProvide support to customers' engineering teams on compatibility issues, and upgrade pathsRequired QualificationsDeep expertise in C#, and the .NET ecosystem. Low-level experience with the .NET Runtime, .NET SDK and other .NET ecosystem projectsDemonstrated ability to read and reason about unfamiliar low-level code: understanding a security patch well enough to reimplement it against a different code baselineExperience building and debugging complex software from source, including toolchain and build-system archaeologyExperience building software for multiple platforms (Windows, macOS, Linux distributions including RHEL, etc.)Strong ownership of correctness and quality – rigorous testing, regression coverage, and an instinct for what a patch might breakPractical experience using LLMs to automate real engineering work, with judgment about where automation helps and where it can't be trustedComfortable in a small, high-autonomy team where you help shape the process, as much as follow itAbility to communicate with customers in early product iterations, or in tier-3 support capacitiesPreferred QualificationsContributions to .NET open source projects – dotnet/runtime, dotnet/aspnetcore, or widely used NuGet packagesStrong grasp of security fundamentals – CVEs, CVSS, common vulnerability classes (deserialization, path traversal, cryptographic misuse, DoS via resource exhaustion), and how to assess exploitabilityFamiliarity with container image hardening, SBOMs, artifact signing, and supply chain securityExperience building and deploying services built on .NET in Microsoft AzureExperience as either a technical lead or team leadExperience running production services on Azure, AWS and KubernetesBackground in security research, vulnerability triage, or product security","datePosted":"2026-10-06T12:01:26.869Z","dateModified":"2026-10-06T12:01:26.869Z","hiringOrganization":{"@type":"Organization","name":"Herodevs","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Denver","addressRegion":"CO","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"2cc75c2210299afff10f29e2"},"url":"https://jobsearcher.com/jobs/2cc75c2210299afff10f29e2"}}