Software Engineer (Node.js) - Platform Security

Create system architectures and coding standards for cloud-native solutions.

Write high-quality Node.js code, enhance system security and reliability, and solve complex software integration problems.

Develop platform security controls for web applications, APIs, and cloud services, covering authentication, authorization, session management, secrets management, encryption, and audit logging.

Identify and address security risks through threat modeling, secure code reviews, automated security testing, dependency scanning, and investigation of security-related issues.

Manage the testing, deployment, and documentation of integrated systems.

Guide junior engineers, collaborate with cross-functional teams, and ensure solutions align with business needs and international standards.

Actively participate in Agile software development phases, including creating user stories and sprint planning.

Collaborate with multinational organizations, and be flexible to occasionally adapt to US and EU time zones.

Minimum of 6 years of professional experience in Software Engineering.

Minimum of 3 years of dedicated experience in Node.js.

Strong expertise in Node.js and deep understanding of its technologies.

Hands-on experience implementing secure authentication and authorization for web applications and APIs using OAuth 2.0, OpenID Connect, SAML, JWT, and role-based access control.

Knowledge of secure application design and common web and API risks, including the OWASP Top 10, input validation, session security, CORS and CSRF protection, secrets management, and encryption in transit and at rest.

Experience embedding security into the software development lifecycle through threat modeling, secure code reviews, dependency management, SAST and DAST, vulnerability scanning, and remediation.

Expertise with Relational and NoSQL databases, specifically utilizing MongoDB for performance, scalability, and query optimization.

Proven experience in building scalable RESTful/Microservices architectures.

Hands-on experience with AWS services, including S3, EC2, ASG, SQS, VPC, Security Groups, IAM, KMS, Secrets Manager, CloudTrail, and WAF, and with designing secure cloud-native solutions. Experience using Redis and ElastiCache to improve system throughput.

Ability to design and maintain CI/CD pipelines with automated security checks.

Experience in Unit/Integration testing (Mocha, Chai, or Jest) and TDD practice.

Expertise with Linux, capable of handling complex system-level updates.

Bachelor's or Master's degree in Computer Science, Engineering, or a closely related field.

Strong problem-solving abilities for complex software development and integration issues.

Exceptional communication skills for effective cross-cultural and cross-time zone collaboration. Experience in mentoring less experienced engineers.

Professional working proficiency in English.

Experience in Agile/Scrum methodologies.

Ability to work with colleagues in different time zones as needed.

Experience with cloud security monitoring, incident response, or SIEM tools such as AWS GuardDuty, Security Hub, or CloudWatch.

Experience in MLOps, ML infrastructure, and model training.

Experience using AI-assisted tools (e.g., GitHub Copilot, Claude) to understand systems, reason about code, and accelerate skill growth.

Knowledge in or interest in learning life science.

Attractive salary package.

Generous vacation allowance, including flexible holidays.

Comprehensive health insurance and full support as per local labor laws.

Opportunities for professional development.

Provided lunches and access to coffee, tea, and snacks.

Additional benefits as per labor laws, ensuring support for your growth and well-being.

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666