Software Engineer, Application Security & AI

Role: Software Engineer, Application Security & AI
Locations: remote 

Length: 6 month contract with potential to extend

1. Senior Backend Engineer at the higher end of the senior level

2. TypeScript + NestJS

3. Strong Azure

4. AWS experience required, but not expert-level

5. Terraform

6. Application security/remediation experience, without needing to have held a dedicated security title

7. Architecture and design experience

8. AI-assisted development/security experience, ideally Claude Code or similar

Senior Software Engineer, Application Security & AI

Position Overview

RVO Health is seeking a highly experienced Senior Software Engineer to support an initiative focused on identifying, remediating, and preventing security vulnerabilities across its applications. The initial focus will be on the Perks application, with the opportunity to support additional applications and codebases over time.

This is a senior-level engineering position sitting at the intersection of backend software development, cloud infrastructure, application security, architecture, and AI. The ideal candidate is a strong backend engineer with deep TypeScript experience, hands-on experience with NestJS, and experience working within both Azure and AWS environments.

This is not a traditional Security Engineer position. We are looking for a software engineer who has encountered and addressed security concerns as part of building and supporting applications. Candidates do not need to have worked exclusively as security SMEs, but they should have hands-on experience understanding vulnerabilities and implementing the necessary code, configuration, or infrastructure changes to resolve them.

The engineer will review findings generated through application, code, and cloud security scanning, determine the appropriate remediation strategy, implement fixes, and validate the results. This person will also contribute to architecture and technical design decisions and leverage AI models and AI-assisted development tools as part of the software engineering and security remediation process.

Responsibilities

• Design, develop, and maintain backend applications and services using TypeScript and NestJS.

• Provide senior-level technical expertise across software development, architecture, cloud infrastructure, and application security.

• Contribute to application architecture and technical design decisions.

• Develop, maintain, and modify cloud infrastructure using Terraform and infrastructure-as-code practices.

• Support applications and infrastructure running across Microsoft Azure and AWS.

• Review vulnerability findings generated through application, code, cloud, and infrastructure security scanning tools.

• Analyze identified vulnerabilities and determine the appropriate technical remediation approach.

• Implement application code, Terraform/infrastructure configuration, and cloud configuration changes needed to remediate security findings.

• Address security vulnerabilities involving:

• Dependencies and third-party packages

• APIs

• Authentication and authorization

• Secrets and credentials

• Cloud infrastructure and configuration

• Application configuration

• Apply patches and other application security fixes based on identified findings.

• Work primarily within backend applications and services while supporting UI-related remediation when necessary.

• Partner with software engineering, infrastructure, and security teams to drive vulnerability remediation.

• Validate that identified vulnerabilities have been successfully remediated.

• Use AI models and AI coding assistants to support software development, vulnerability analysis, and security remediation.

• Help improve secure software development and infrastructure practices across applications and engineering teams.

Required Qualifications

• Strong hands-on software engineering experience with significant focus on backend application development.

• Advanced hands-on development experience with TypeScript.

• Hands-on experience developing backend applications or services using NestJS.

• Strong experience with Microsoft Azure and the ability to quickly contribute within an Azure-based application environment.

• Hands-on experience with AWS. Expert-level AWS knowledge is not required, but candidates should have practical experience developing or supporting applications within AWS.

• Hands-on experience using Terraform for infrastructure as code, including creating or modifying cloud infrastructure.

• Senior-level experience contributing to application architecture and technical design.

• Hands-on experience identifying and remediating application security vulnerabilities as part of a software engineering role.

• Experience addressing security issues involving authentication, authorization, APIs, dependencies/packages, secrets, and application or cloud configurations.

• Experience working from findings generated by code scanning, application security scanning, cloud security, or vulnerability management tools.

• Experience with Wiz or comparable application, cloud, or code security scanning platforms.

• Understanding of how application architecture, cloud infrastructure, infrastructure as code, and security intersect.

• Recent hands-on experience using AI-assisted development tools within the software development lifecycle.

• Experience with Claude Code or comparable AI coding assistants.

• Ability to evaluate an identified vulnerability, determine an appropriate remediation strategy, personally implement the necessary code, infrastructure, or configuration changes, and validate the results.

• Ability to operate independently at a senior level and take ownership of complex technical problems.

Preferred Qualifications

• Experience with Go.

• Broader application security experience beyond vulnerability remediation.

• Experience using AI models or AI-assisted workflows for application security or secure software development.

• Experience with mobile applications.

• Experience performing security remediation across both backend services and user interfaces.

• Experience supporting security remediation across multiple applications or codebases.

• Experience working across software engineering, infrastructure, cloud, and security teams.

Ideal Candidate Profile

The strongest candidate will be a high-end Senior Backend Engineer rather than a traditional Security Engineer. This person should bring strong TypeScript and NestJS development experience, be highly comfortable in Azure, have practical AWS experience, and be hands-on with Terraform.

Security should be a meaningful component of prior engineering responsibilities, but candidates do not need to come from dedicated security positions. The ideal engineer understands the intersection between application code, cloud infrastructure, infrastructure as code, architecture, and security.

Most importantly, this person should be able to receive a vulnerability finding, determine whether the fix belongs in the application code, Terraform/cloud infrastructure, or configuration, implement the necessary changes, and validate that the vulnerability has been resolved.