Application Developer (Security) / Software Engineer (Security)

PR: $60/hr on w2 and $70/hr on c2c

Job Title: Application Developer (Security) / Software Engineer (Security)

Client: Telecommunication

Duration: 6-12 month (extension based on budget and need)
Work Model: Onsite 5 days/week at Telecommunication HQ in Factoria, Bellevue, WA – No exceptions allowed

Job Summary

Telecommunication is looking for a highly hands-on Application Security Developer to help remediate security vulnerabilities identified across its application codebase.

The environment generates a significant volume of security findings, potentially 100–200 tickets, and the person in this role will take ownership of reviewing those findings, identifying the vulnerable code, and making the necessary code-level fixes.

The ideal candidate is a strong software engineer who understands application security and can independently navigate an existing codebase, diagnose vulnerabilities, modify the code, test the remediation, and drive security tickets toward closure.

Key Responsibilities

• Review and triage application security vulnerability tickets.
• Investigate security findings and trace them back to the relevant application code.
• Perform hands-on code remediation to address identified vulnerabilities.
• Troubleshoot and fix issues involving Java, Node.js, React, and SQL-based applications.
• Remediate vulnerabilities such as SQL injection and other insecure coding patterns.
• Analyze existing code to determine the root cause of security findings.
• Validate fixes and ensure remediation does not introduce application regressions.
• Work through a high volume of vulnerability/security tickets and prioritize remediation based on severity and application impact.
• Partner with development and security teams to move vulnerabilities from identification through remediation and closure.
• Participate in code reviews with an emphasis on secure coding practices.
• Help reduce recurring vulnerabilities by identifying insecure coding patterns and recommending better development practices.

Required Qualifications

• Strong professional software development / coding background.
• Hands-on development experience with:
  • Java
  • Node.js
  • React
  • SQL
• Experience identifying and fixing application-level security vulnerabilities.
• Strong understanding of SQL Injection and secure database/application coding practices.
• Ability to navigate unfamiliar or existing production codebases and determine where security vulnerabilities need to be remediated.
• Experience debugging, modifying, testing, and delivering production-quality application code.
• Solid understanding of secure coding principles and application security.
• Experience working with vulnerability findings, security defects, bugs, or remediation tickets.
• Strong troubleshooting and root-cause-analysis skills.

Preferred Qualifications

• Experience with SAST / static code analysis and interpreting findings from application-security tools.
• Familiarity with security analysis platforms such as SonarQube, Semgrep, or CodeQL. These tools are examples from internal application-security guidance rather than confirmed requirements from Jack's team.
• Understanding of common web-application vulnerabilities including injection flaws, cross-site scripting, insecure dependencies, and credential/secret exposure.
• Experience working within CI/CD-driven software-development environments.
• Familiarity with OWASP secure coding principles.