Overview

Application Security API Software Development

Responsibilities

• Design, develop, and maintain scalable, reliable, and secure backend applications and services.
• Build production-grade backend systems with a strong focus on performance, reliability, maintainability, and security.
• Design appropriate application architecture, database structures, business logic, and service layers.
• Develop reusable, modular, and well-documented backend components.
• Identify and resolve performance, scalability, reliability, and security issues.
• Participate in technical design and architecture discussions and contribute to engineering best practices.
• API Development & Integration
• Design and develop secure RESTful APIs and other API-based integrations.
• Have strong practical understanding of API authentication, authorization, validation, rate limiting, session management, and error handling.
• Implement secure API communication between applications, services, and third-party systems.
• Work extensively with API integrations and understand API lifecycle management.
• Implement appropriate controls for protecting APIs against common attacks such as unauthorized access, injection, abuse, replay attacks, and data leakage.
• Ensure APIs are properly documented, versioned, tested, monitored, and secured.
• Application Security
• Design and develop applications following Secure by Design and Secure by Default principles.
• Identify security vulnerabilities during design, development, testing, and deployment.
• Implement secure coding practices across backend applications and APIs.
• Understand and apply OWASP Top 10 and OWASP API Security Top 10 principles.
• Implement appropriate controls for:
• Authentication and authorization
• Role-Based Access Control (RBAC)
• Input validation and output encoding
• Secure session management
• Encryption and secure key management
• Protection of sensitive data
• API security
• Secrets management
• Logging and audit trails
• Secure error handling
• Rate limiting and abuse prevention

Qualifications

• Employment Type: Full-time
• Role: Senior Software Developer - Backend, API & Security
• About the Role
• We are looking for an experienced Senior Backend Developer with 5+ years of hands-on experience in software development, backend architecture, API development, and application security.
• The ideal candidate will have a strong track record of building and securing production-grade backend platforms and APIs, with a deep understanding of secure software development practices, DevOps, Git-based development workflows, and security standards.
• This is not a role for someone whose experience is limited to writing backend code. We are looking for a developer who understands how secure platforms are designed, developed, deployed, monitored, and maintained.
• The candidate should be comfortable taking ownership of backend services and APIs while ensuring that security is embedded throughout the software development lifecycle.
• 5+ years of professional software development experience
• Strong backend development experience
• Extensive hands-on experience building and consuming APIs
• Strong understanding of REST APIs, HTTP/HTTPS, authentication, authorization, tokens, OAuth/OAuth2 and API security
• Strong knowledge of application security and secure coding
• Hands-on experience implementing security controls in production applications
• Strong Git/GitHub/GitLab/Bitbucket experience
• Strong understanding of CI/CD and DevSecOps
• Strong knowledge of OWASP Top 10 and OWASP API Security Top 10
• Strong understanding of databases and database security
• Understanding of encryption, hashing, certificates, secrets, keys, and secure communication
• Ability to understand security requirements and translate them into working technical solutions
• Good verbal and written communication skills.
• Good to Have
• Cloud security experience across AWS/GCP/Azure
• Is a strong hands-on developer, not purely a security or management professional.
• Has actually built and deployed backend applications and APIs in production.
• Has significant practical experience implementing security controls rather than simply knowing security terminology.
• Thinks about security during architecture and development, rather than only after development is completed.
• Understands the complete journey from code Git CI/CD deployment production monitoring vulnerability remediation.
• Can independently identify security weaknesses in applications and recommend practical solutions.
• Is comfortable challenging insecure technical approaches and proposing better alternatives.
• Has strong attention to detail and takes ownership of the security and quality of the code they develop.

Education

• Bachelors/Masters degree in Computer Science, Information Technology, Engineering, Cybersecurity, or a related field preferred.
• Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.