Senior Back-End Security Developer

Requirements

• 5+ years of Back-end development experience, building production systems
• Strong proficiency in Python (FastAPI, Django, or Flask) and/or Go, Rust, C++
• Solid understanding of cryptographic principles, including symmetric and asymmetric encryption, hashing, key derivation and digital signatures
• Experience with RESTful API design and development
• Understanding of authentication and authorization patterns (OAuth 2.0, JWT, and mTLS)
• Upper-Intermediate level of English

WILL BE A PLUS

• Experience with Trusted Execution Environments, such as Intel TDX, NVIDIA Confidential Computing, or Secure VMs
• Experience with Git, CI/CD pipelines, and modern development workflows

Personal Profile

• Ability to adapt and thrive in ambiguous and fast-moving startup environments
• Strong problem-solving skills and the ability to diagnose complex security workflows
• Excellent communication skills and the ability to collaborate with DevOps, AI, and cloudengineering teams
• Detail-oriented mindset to ensure high availability and reliable services

Responsibilities

• Design and build high-performance, secure Back-end services for our vault and key management infrastructure
• Develop cryptographic workflows, including key generation, rotation, and secure storage mechanisms
• Build robust APIs with comprehensive authentication, authorization, and rate limiting
• Write clean, maintainable, and well-tested code with security as a primary consideration
• Implement comprehensive audit logging and monitoring for security-critical operations
• Collaborate with the security team on threat modeling and security reviews
• Participate in code reviews with a focus on security best practices
• Create technical documentation for internal systems and API endpoints
• Integrate with Hardware Security Modules (HSMs) and cloud KMS services
• Implement secure secret management and rotation mechanisms
• Build defense-in-depth security controls across all services
• Conduct security analyses of third-party dependencies
• Participate in security audits and penetration testing remediation