.NET Developer (Security-Focused) || Chicago, IL

.NET Developer (Security-Focused) || Chicago, IL ||

Job Title: .NET Developer (Security-Focused)
Location: Chicago, IL
Work Mode: Hybrid (1 Day/Week)

Top 5 Skills:

• Expertise in .NET technologies (C#, ASP.NET, .NET Core) with a strong focus on secure coding practices.
• Proficiency in Identity and Access Management (IAM), including OAuth2.0, OpenID Connect, and Active Directory/ADFS.
• Hands-on experience with application security controls such as authentication, authorization, and encryption.
• Strong knowledge of OWASP Top 10 vulnerabilities and mitigation strategies.
• Familiarity with DevSecOps practices and integration of security tools into CI/CD pipelines.

Responsibilities:

• Design, develop, and maintain secure .NET applications ensuring compliance with industry security standards.
• Implement robust authentication and authorization mechanisms using OAuth2.0, OpenID Connect, and Active Directory.
• Conduct secure code reviews, threat modeling, and vulnerability assessments for .NET applications.
• Collaborate with DevOps teams to integrate security testing tools (SAST, DAST, SCA) into CI/CD pipelines.
• Ensure data protection and encryption for sensitive information in transit and at rest.
• Monitor, detect, and remediate potential security vulnerabilities in applications.
• Partner with cross-functional teams to drive a security-first culture in software development.

Required Qualifications:

• Proven experience as a .NET Developer with strong emphasis on application and cloud security.
• Proficiency in C#, ASP.NET, .NET Core, and secure coding practices.
• Solid understanding of web security standards (OWASP, NIST).
• Hands-on experience implementing OAuth2.0, OpenID Connect, SAML, JWT, and Role-Based Access Control (RBAC).
• Experience with secure API development (REST/GraphQL) including token-based authentication.
• Familiarity with container security (Docker, Kubernetes) and cloud security controls (Azure/AWS).
• Knowledge of cryptography standards (TLS, HTTPS, PKI, hashing algorithms).
• Strong debugging, problem-solving, and incident response skills with a security-first mindset.
• Excellent communication and collaboration skills; ability to explain security risks to non-technical stakeholders.
• Experience working in Agile/Scrum development environments.