Stack Engineer Cybersecurity Job Piscataway Township New Jersey USA,Software Development

Stack Engineer Cybersecurity

Undergraduate degree or equivalent experience
5+ years of development and testing experience in C# / .Net
5+ years of development experience on Microsoft SQL Server (preferred) or Oracle Database
5+ years Database Design/Programming (Stored Procedures/Functions)
5+ years of SDLC or Dev Ops/Agile experience
5+ years with Angular
5+ years working experience with API REST web services
5+ years experience with version management tools and implementing CI/CD pipelines (Git, Azure Dev Ops , SVN, etc.)
3+ years of hands‑on experience remediating application security vulnerabilities, including upgrading vulnerable dependencies and resolving findings from SAST, DAST, or SCA tooling
2+ years Hands‑on experience using AI‑assisted development tools (Git Hub Copilot, Claude, or similar) for code generation, code comprehension, refactoring, or test creation, with the judgment to validate and correct their output
Excellent verbal and written communication

Desired

Skills:

Designs, codes, tests and debugs applications and components that meet all technical specifications, business requirements, and secure coding standards per assigned work items
Remediates application security vulnerabilities identified through static (SAST), dynamic (DAST), and software composition analysis (SCA) scanning, prioritizing work by severity, exploitability, and remediation service level targets
Analyzes scan findings to determine root cause, separate true positives from false positives, and recommend the appropriate code fix, configuration change, compensating control, or risk acceptance path
Upgrades and patches vulnerable third‑party libraries, frameworks, and end‑of‑life runtimes (.Net, Angular, database and reporting components), resolving the breaking changes and dependency conflicts those upgrades introduce
Applies secure coding practices to eliminate common vulnerability classes, including injection, broken authentication and access control, insecure deserialization, weak cryptography, hard‑coded secrets, and the remainder of the OWASP Top 10
Uses AI‑assisted development tools (Git Hub Copilot and other enterprise‑approved AI coding assistants) to accelerate comprehension of legacy code, generate candidate remediations, refactor safely, and produce unit and regression tests
Reviews, tests, and takes full ownership of AI‑generated code, confirming it is correct, secure, performant, and compliant with enterprise standards, so that closing one finding never introduces a new one
Builds and strengthens automated test coverage so security fixes can be delivered quickly and confidently with minimal regression risk
Integrates security, dependency, and secrets scanning into CI/CD pipelines so vulnerabilities are surfaced and resolved early in the development lifecycle
Work closely with lead engineers to develop the best technical design and approach for new product development and for remediation of systemic security findings
Collaborates closely with Business Analysts, Information Security, and application owners on developing requirements and assists with estimating remediation effort
Instill best practices for secure software development and documentation, assure designs meet requirements, and deliver high-quality work on budget and on‑time.
Translate business requirements into technical solutions, recommend alternative technical and business approaches, and lead engineering efforts to meet timelines with optimal solutions
Ability to take on a complex technical problem that is not well‑defined, decompose into manageable tasks, provide proper estimates, and lead/coordinate other team members to collectively deliver the end solution
Excellent organizational skills and focus on accuracy and attention to detail.
Excellent analytical, problem solving and troubleshooting abilities
Work with team to achieve timely resolution of all security findings, meeting or exceeding Service Level Agreements
Reports remediation progress, backlog burn-down, and residual risk clearly to engineering and business stakeholders
Ability to prioritize tasks and work concurrently on multiple tasks