Mid-Level Full Stack Engineer .NET + Angular - Platform
Mid-Level Full Stack Engineer .NET + Angular – Platform Location: RemoteWe're looking for mid-level full stack engineer to join a focused application security initiative. This is hands-on engineering across the full stack. In a given week you might upgrade a. NET authentication library and chase down the breaking changes, remediate an XSS vulnerability in an Angular component, parameterize a SQL query to close an injection risk, and harden a Dockerfile to stop running as root.
What You'll Do:
Remediate security findings across the stack — dependency upgrades (NuGet, npm), code-level fixes (authorization, XSS, path traversal, SQL injection, weak cryptography), credential rotation, and container/Kubernetes hardening Write tests for every fix — unit tests proving the vulnerability is closed, plus functional verification that the feature still works Own upgrades end to end — when a major version bump breaks the build or changes behavior, you diagnose it and see it through Document what you learn — because findings repeat, your written analysis of one upgrade saves your teammates from repeating the work Collaborate across teams — many of these repositories are owned by other teams; you'll need their context and their review Coordinate credential rotations — some fixes require finding every consumer of a secret and sequencing a safe rollout with DevOpsRaise judgment calls — when a suggested fix is wrong for our architecture, or a finding is a false positive, say so with reasoning Help make it stick — set up automation so routine dependency updates never pile into a backlog again Our Tech Stack Backend: C# /.NET 10
- ASP.NET Core Web API
- RESTFrontend: TypeScript
- Angular 20
- Node.js
- webpack Data: Snowflake
- Microsoft SQL Server (T-SQL) Infrastructure: Docker
- Azure
- AWS
- CI/CD pipelines Testing: xUnit
- Moq
- coverlet
- Karma / Jasmine Security tooling: Aikido Security
- ESLint We also have smaller Java and Python services in the mix. Exposure is a bonus, not a requirement.