Deliverit
Deliverit
1 – 10 Employees
eCommerceLogistics
Deliverit combines eCommerce and logistics to make everyday shopping more convenient. The company sources products from the market customers choose and brings them directly to their doors, with a focus on same-day delivery, no minimum order value, and no added price surcharges. Its contactless service is designed around flexible, efficient fulfillment for customers who want fresh products delivered quickly.

Senior Full-Stack Developer (React/Node.js) – Application Security at Deliverit

Senior full-stack engineer focused on remediating vulnerabilities in Deliverit’s React and Node.js applications. The role covers secure fixes, testing, vulnerability validation, and DevSecOps controls.

Description

  • Assess and validate vulnerabilities across React, TypeScript, JavaScript, and Node.js code
  • Trace source-code issues from Bitbucket through APIs, browser behavior, and deployment settings
  • Implement security fixes in front-end and Node.js applications
  • Apply AI tools to analyze large codebases
  • Maintain security controls for AI agents that interact with enterprise systems
  • Develop unit, integration, end-to-end, and security regression tests
  • Repeat security scans and document closure evidence in Jira, Security Workbench, Archer, or comparable tools
  • Partner with developers, Product, AppSec, QA, DevOps, and Platform Security teams
  • Recognize recurring vulnerability patterns and develop reusable secure-coding guidance or automated fixes
  • Strengthen security controls across pull requests, branch policies, build pipelines, and release gates
  • Investigate false positives and record risk-based decisions
  • Contribute to security reviews, penetration testing, incident remediation, and vulnerability trend tracking

Requirements

  • Substantial experience securing Node.js services, APIs, and Backend-for-Frontend applications
  • Understanding of React components, hooks, context, routing, state management, and applicable SSR patterns
  • Knowledge of protecting user-controlled data in components, forms, URLs, query parameters, and client-side state
  • Ability to examine pull requests, branches, commit history, and repository settings
  • Familiarity with XSS, dangerouslySetInnerHTML, DOM-based XSS, client-side open redirects, browser storage, source maps, CSP, front-end authorization, data exposure, dependencies, and software supply-chain risks
  • Knowledge of securing SQL and NoSQL queries, command execution, file transfers, path and URL parameters, HTTP headers, serialization and deserialization, sessions, tokens, and SSRF
  • Experience using Checkmarx, Veracode, Fortify, SonarQube, Snyk Code, or Semgrep
  • At least five years of front-end or full-stack software engineering experience
  • At least three years working directly with application security, secure coding, or vulnerability remediation in DevSecOps environments
  • Strong command of React, TypeScript, JavaScript, Node.js, HTML, CSS, and HTTP
  • Experience with Git and Bitbucket in enterprise settings
  • Demonstrated ability to track vulnerabilities from discovery through remediation and closure verification
  • Experience building or securing web applications that process sensitive data
  • Ability to collaborate across application, security, QA, DevOps, and infrastructure teams
  • Advanced English proficiency for daily communication; preferred experience includes AI assistant or agent security, code-development agents, agentic platforms, LLM security, GitHub or GitLab, security research, security automation, and AI-assisted vulnerability discovery and remediation.
  • benefitsItems_PLACEHOLDER_DO_NOT_INCLUDE?

Benefits

  • Meal and/or food allowance (VA/VR)
  • Well-being program offering psychological, legal, social, and financial support
  • Health and dental insurance
  • Life insurance
  • Wellhub membership
  • Discount partnerships with Sucesu, Target Trust, Sesc, and Seprorgs
  • Work anniversary bonus
  • Employee referral bonus for successful hires
  • Childcare assistance
  • Relaxed, friendly, collaborative, and diverse workplace culture
  • Enriching environment with innovative projects, connection, and knowledge sharing

Related Jobs

Coralogix

Senior Solutions Engineer at Coralogix - San Francisco Hybrid

Coralogix
201 – 500 Employees
EnterpriseSaaSSecurity

Lead technical discovery, demonstrations, and proof-of-concept work for Coralogix’s observability and security platform. Support customer deployments, integrations, troubleshooting, and technical sales engagements from Coralogix’s San Francisco hybrid office.

Open
Coralogix

Senior Solutions Engineer – San Francisco (Hybrid)

Coralogix
201 – 500 Employees
EnterpriseSaaSSecurity

Senior Solutions Engineer responsible for technical evaluations, customer deployments, and proof-of-concept initiatives for Coralogix’s observability and security platform. Collaborate with sales and customer teams to demonstrate technical value and support successful adoption.

Open
Coralogix

Senior Solutions Engineer at Coralogix - San Francisco Hybrid

Coralogix
201 – 500 Employees
EnterpriseSaaSSecurity

Lead technical sales evaluations, demonstrations, proof-of-concept projects, and deployments for Coralogix’s observability and security platform. Collaborate with customers and sales partners in a hybrid San Francisco role.

Open