ALIS Software LLC

Compensation

Full Description

Position: Mid-Level Full Stack Engineer .NET + Angular - Platform Location: Remote We're looking for mid-level full stack engineer to join a focused application security initiative. This is hands-on engineering across the full stack. In a given week you might upgrade a .NET authentication library and chase down the breaking changes, remediate an XSS vulnerability in an Angular component, parameterize a SQL query to close an injection risk, and harden a Dockerfile to stop running as root. Roles & Responsibilities • Remediate security findings across the stack - dependency upgrades (NuGet, npm), code-level fixes (authorization, XSS, path traversal, SQL injection, weak cryptography), credential rotation, and container/Kubernetes hardening • Write tests for every fix - unit tests proving the vulnerability is closed, plus functional verification that the feature still works • Own upgrades end to end - when a major version bump breaks the build or changes behavior, you diagnose it and see it through • Document what you learn - because findings repeat, your written analysis of one upgrade saves your teammates from repeating the work • Collaborate across teams - many of these repositories are owned by other teams; you'll need their context and their review • Coordinate credential rotations - some fixes require finding every consumer of a secret and sequencing a safe rollout with DevOps • Raise judgment calls - when a suggested fix is wrong for our architecture, or a finding is a false positive, say so with reasoning • Help make it stick - set up automation so routine dependency updates never pile into a backlog again Mandatory Skills Backend: C# / .NET 10 • ASP.NET Core Web API • REST Frontend: TypeScript • Angular 20 • Node.js • webpack Data: Snowflake • Microsoft SQL Server (T-SQL) Infrastructure: Docker • Azure • AWS • CI/CD pipelines Testing: xUnit • Moq • coverlet • Karma / Jasmine Security tooling: Aikido Security • ESLint We also have smaller Java and Python services in the mix. Exposure is a bonus, not a requirement. Minimum Requirements • 3-5 years of professional software engineering experience • Solid C# / .NET - comfortable in ASP.NET Core web applications • Solid TypeScript and a modern frontend framework - Angular preferred; strong React or Vue experience transfers well • Working SQL knowledge - writing queries, understanding parameterization, using an ORM or data access layer • You write tests as a matter of habit - unit tests, and ideally some integration or end-to-end experience • Git fluency - branching, rebasing, clean commits, useful pull requests • Comfort reading unfamiliar code - much of this work is in codebases you didn't write • Clear written and spoken English - you'll collaborate daily with engineers, Security, and QA • Genuine interest in security - you don't need a security background, but you should want to build one Nice to have • Any prior security remediation, secure code review, or vulnerability triage work • Docker familiarity, especially security configuration • Experience with authentication and authorization - OAuth 2.0, OIDC, JWT • Dependency management experience: lockfiles, transitive dependencies, resolving upgrade conflicts • Exposure to Java, Python Effective use of AI coding tools - Claude Code, Codex, Cursor, Copilot, or similar. We use them and we're glad when candidates do too. What we're interested in is judgment: using AI to move quickly through repetitive work like dependency bumps and test scaffolding, while reviewing every suggestion critically - especially on security-sensitive code, where a plausible-looking fix that doesn't actually close the vulnerability is worse than no fix at all