Application Security Engineer
Core
Secure NestJS applications and identity integrations (IdP/RP) for a fintech platform serving millions of savers and businesses.
Role type
Mid-level IC application security engineer (Node.js/TypeScript)
Builds
Secure-by-default NestJS applications and OIDC/OAuth identity capabilities
Domain
Fintech + Application Security + Identity
Required skills
NestJS, TypeScript, OAuth 2.0, OpenID Connect, RBAC, OWASP Top 10, API security, JWT validation, SAST/DAST, threat modeling
Preferred skills
Auth0/Okta/Keycloak, SAML, API gateways, containers, IaC, security tooling (Burp Suite, Semgrep, Snyk)
Technologies
NestJS, TypeScript, Node.js, OIDC, OAuth 2.0, JWT, Burp Suite, Semgrep, CodeQL, Snyk
Responsibilities
Analyze NestJS apps for auth/authorization/vulnerabilities; refine secure development patterns (guards, interceptors, middleware); review OIDC/OAuth flows; implement RBAC/claims-based access control; participate in threat modeling and secure code reviews; support SAST/DAST and remediation; monitor security signals and incident response.
Seniority
Mid-level, hands-on IC