.Net Developer

About the role

RGP is seeking a senior Software Engineer – Application Security. This is a hands-on engineering role embedded with application-development teams at a highly regulated global financial institution. The role will focus on analyzing and fixing application-security vulnerabilities across a primarily Microsoft .NET technology estate, with additional support for Java and React applications. The successful candidate will personally deliver complex code remediation while providing technical direction, code‑review support, and day‑to‑day supervision to engineers working through the vulnerability backlog. This is not a traditional people‑management position; the emphasis is on hands‑on engineering, technical leadership, and the safe delivery of production‑ready fixes. The engagement is a 12‑month W2 contract based in New York, NY.

Responsibilities

• Embed with engineering teams to remediate vulnerabilities across .NET applications and services.
• Support security fixes in Java, Spring Boot, React, and TypeScript applications as needed.
• Validate security findings, determine root causes, and prioritize remediation based on risk.
• Resolve issues involving access control, injection, secrets, encryption, APIs, and insecure configurations.
• Upgrade vulnerable or unsupported frameworks, libraries, packages, and dependencies.
• Develop automated tests to confirm fixes and prevent functional regressions.
• Integrate security scanning and controls into CI/CD pipelines.
• Address vulnerabilities affecting Azure services, containers, Kubernetes, and OpenShift environments.
• Coordinate remediation, release validation, evidence, and issue closure with security and risk teams.
• Review code, mentor engineers, supervise remediation work, and identify recurring vulnerability patterns.

Requirements

• Six or more years of software‑engineering experience with strong hands‑on .NET expertise.
• Proficiency in C#, ASP.NET Core, Web API, Entity Framework, REST APIs, and microservices.
• Practical experience remediating vulnerabilities using OWASP, CWE, and CVE guidance.
• Experience interpreting findings from SAST, DAST, SCA, penetration testing, and code scans.
• Knowledge of OAuth, OIDC, JWT, RBAC, encryption, TLS, secrets management, and API security.
• Working knowledge of Java, Spring Boot, React, and TypeScript.
• Experience with Azure services, including App Services, Functions, API Management, and Key Vault.
• Familiarity with CI/CD platforms, Git, Docker, Kubernetes, or OpenShift.
• Strong automated‑testing, production‑support, debugging, and root‑cause‑analysis skills.
• Financial‑services experience with the ability to lead, mentor, and communicate across teams.

Benefits

• Medical
• Dental
• Vision
• Life Insurance
• Disability Insurance
• 401(k) Savings Plan