What you'll do

• Remediate security findings across the stack — dependency upgrades (NuGet, npm), code-level fixes (authorization, XSS, path traversal, SQL injection, weak cryptography), credential rotation, and container/Kubernetes hardening.

• Write tests for every fix — unit tests proving the vulnerability is closed, plus functional verification that the feature still works.

• Own upgrades end to end — diagnose build or behavior issues when major version bumps occur and see them through.

• Document what you learn — produce written analysis of upgrades to prevent team repetition.

• Collaborate across teams — partner with owning teams for context and reviews across multiple repositories.

• Coordinate credential rotations — sequence safe rollouts with DevOps across all secret consumers.

• Raise judgment calls — identify and reason through false positives or unsuitable fixes for the architecture.

• Help make it stick — implement automation to keep routine dependency updates out of the backlog.

What you bring (must-haves)

• 3–5 years of professional software engineering experience.

• Solid C# / .NET background, comfortable working in ASP.NET Core web applications.

• Solid TypeScript experience with modern frontend frameworks (Angular preferred; React or Vue transfers well).

• Working SQL knowledge (writing queries, understanding parameterization, using ORMs/data access layers).

• Habitual test-writing practice (unit tests and integration/E2E experience).

• Git fluency (branching, rebasing, clean commits, useful pull requests).

• Comfort reading and navigating unfamiliar codebases.

• Clear written and spoken English for daily cross-team collaboration.

• Genuine interest in application security.

Bonus points for (nice-to-haves)

• Prior security remediation, secure code review, or vulnerability triage work.

• Docker familiarity, especially regarding security configuration.

• Experience with authentication and authorization (OAuth 2.0, OIDC, JWT).

• Dependency management experience (lockfiles, transitive dependencies, resolving upgrade conflicts).

• Exposure to Java or Python.

• Effective use of AI coding tools (Claude Code, Codex, Cursor, Copilot) with critical judgment on security-sensitive code.

Perks & benefits

💻 Equipment provided — none of that "bring your own device" stuff here

🛡️ Full back-office support — Legal, Accounting, HR Business Partner, and Delivery team

🧭 Career and cultural mentoring — how to show up, stand out, and navigate US work culture

🗣️ Free English lessons with a native speaker

🤝 Referral bonus — recommend Ubi to your tech friends and get paid for it

🏖️ Florianópolis HQ always open — 100% remote, but the office is there whenever you want it.

How the process works

1. Interview with our Tech Recruiter (+ quick AI assessment, if needed)

2. Client interview process (varies by company)

3. Offer 🎉

4. Onboarding with full Ubiminds support

Why Ubiminds?

With 9 years in the market and GPTW-certified, Ubiminds connects Latin American tech professionals with software companies in the US and Canada. Hundreds of professionals in data, design, product, and engineering are already growing in North American teams with our support. We're with you throughout the entire journey — Recruitment, Legal, Accounting, PeopleOps, and career guidance — so you can thrive internationally with confidence.

Ready to go global? Apply now — it takes less than 5 minutes.