Senior Backend/API Security Developer

About the Role

UST is searching for a Senior Backend/API Security Developer (B2) with strong expertise in Python, Node.js, or Java and AWS, responsible for designing, developing, and securing enterprise-grade APIs that handle highly sensitive data.

What You'll Do

• Build scalable RESTful and GraphQL APIs using AWS services like Amazon API Gateway, AWS Lambda, and Amazon VPC while applying the principle of least privilege.
• Implement robust identity and access management using OAuth 2.0, OpenID Connect (OIDC), AWS IAM, and Amazon Cognito.
• Maintain data protection standards required by regulations like HIPAA, GDPR, or PCI-DSS through proper data masking, tokenization, and auditing.
• Ensure all data in transit uses TLS 1.3 and data at rest is encrypted using AWS Key Management Service (KMS) with customer-managed keys.
• Perform automated security scans, static code analysis, and vulnerability assessments using tools like Amazon Inspector and AWS Security Hub.
• Protect backend systems from distributed denial-of-service (DDoS) attacks and injection flaws using AWS WAF and API Gateway throttling controls.
• Configure centralized monitoring and threat detection using Amazon CloudWatch, AWS CloudTrail, and Amazon GuardDuty for complete audit trails.
• Collaborate with DevOps engineers in designing and developing CI/CD pipeline using Codepipeline.

What You Need

• Drive API security standards, implement secure architecture patterns, and serve as a key technical leader in building a world-class API engineering practice.
• Experience with cloud-native development, OWASP API Security standards, OAuth2/OIDC, and large-scale microservices architectures is required.
• Skills: AWS, OAuth 2.0, Node.js, PostgreSQL.

Pay

Role Location: Remote-US. Compensation Range: $82,000-$123,000.

Benefits

• Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year), 10 paid holidays, and are eligible for paid bereavement leave and jury duty.
• Eligible to participate in the Company's 401(k) Retirement Plan with employer matching.
• Eligible for medical, dental, and vision insurance for themselves and their dependents residing in the US.
• Company-paid Employee Only benefits: basic life insurance, accidental death and disability insurance, and short- and long-term disability benefits.
• May purchase additional voluntary short-term disability benefits, and participate in a Health Savings Account (HSA) as well as a Flexible Spending Account (FSA) for healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines.
• Part-time employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) Retirement Plan with employer matching.
• Full-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) program with employer matching, plus medical, dental, and vision insurance for themselves and their dependents residing in the US.
• Part-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).