Build automated validation for Key Security Indicators across 26+ KSI families (CNA, IAM, SVC, MLA, etc.) with hybrid automated + AI-driven scoring
Develop and maintain integrations with FedRAMP-authorized services
Enhance and productionize OWASP ZAP integration for dynamic application security testing of customer SaaS applications
Implement multi-model workflows combining OpenAI (GPT-4o), Anthropic (Claude), Google (Gemini), and Groq for compliance reasoning
Extend Prisma schema for new features; optimize complex queries across 35+ models
Implement Redis caching for frequently accessed compliance data and KSI results
Build SQS-based job queues for long-running compliance evaluations and bulk imports
Instrument code with CloudWatch metrics, structured logging, and distributed tracing
Write comprehensive unit and integration tests (Jest); achieve >80% code coverage on critical paths
Maintain up-to-date API documentation (OpenAPI), architecture decision records (ADRs), and runbooks

5+ years backend development with TypeScript/Node.js; deep understanding of async patterns, streams, and event loops
NestJS or similar frameworks with dependency injection and modular architecture
PostgreSQL expertise: Complex joins, CTEs, window functions, indexing strategies, query optimization
Prisma ORM or similar with migrations and schema management
RESTful API design: Pagination, filtering, sorting, error handling, versioning, rate limiting
AWS services: S3, Lambda, SQS, DynamoDB, OpenSearch, Secrets Manager, IAM policies
AI/ML APIs: Hands-on experience integrating OpenAI, Anthropic, Google Gemini, or similar
Third-party API integration: OAuth2, SAML, webhooks, retry logic, API versioning, SDK usage
Infrastructure-as-code familiarity: Ability to parse Terraform/CloudFormation and understand resource configurations
Security testing tools: Experience with OWASP ZAP, Burp Suite, or similar DAST/SAST tools
Message queues: SQS, RabbitMQ, Kafka, or similar for async job processing
Ownership mentality: End-to-end ownership of features from design → implementation → deployment → monitoring
Problem solver: Thrives on debugging complex issues across distributed systems and third-party integrations
Detail-oriented: Compliance work requires precision—small errors can have big consequences
Collaborative: Works closely with frontend engineer, engineering manager, and CTO

Senior Backend Engineer

Key skills