• Assess technical vulnerabilities and propose solutions to improve the security of our platform, working in our stack (Ruby, Go, and PHP) and developing security fixes on AWS/Lambda. • Quickly assess development queue demands, reducing the AppSec bottleneck and unblocking Engineering deliveries. • Actively propose and implement fixes in code, going beyond merely reporting findings. • Conduct threat modeling and apply secure-by-design principles to product initiatives. • Create guardrails, tooling, and automations that make the secure path the default for Engineering teams. • Integrate and tune security tools in the CI/CD pipeline (SAST, SCA, and secret scanning), keeping noise and false positives low.

• Support the end-to-end IT and security risk management lifecycle, including risk identification, assessment, treatment tracking, and reporting • Maintain and continuously improve the enterprise IT/security risk register, ensuring risks are accurately documented, rated, and assigned to appropriate owners • Perform risk assessments across technology domains (cloud infra, access management, application security) and third-party assessments using the appropriate methodology for each • Partner with control owners and business stakeholders to evaluate the effectiveness of risk mitigation controls and identify gaps • Integrate vendor and technology risk findings into the risk register to facilitate tracking and remediation across both IT/Security and Third-Party Risk Management. • Contribute to the development and maintenance of risk policies, standards, and procedures • Assist in preparing risk reporting and dashboards for senior leadership and committee-level audiences • Monitor the threat and vulnerability landscape and help translate emerging risks into actionable insights for the business • Support security and compliance initiatives, including PCI DSS, SOC 2, and NIST, from a risk lens, ensuring risk findings are integrated into broader compliance activities • Participate in risk-related work streams tied to new product launches, infrastructure changes, and strategic initiatives

Role Description - Develop and maintain secure applications using Angular and C#. - Support front-end and back-end development activities. - Work with SQL Server databases to support application functionality. - Develop and maintain solutions within Microsoft Azure environments. - Collaborate with engineering teams to implement secure and scalable software solutions. Qualifications - Mid-level professional experience. - Experience with Angular for front-end development. - Experience with C# for back-end development. - Experience working with SQL Server. - Experience with Microsoft Azure cloud services. - Advanced English. Benefits - Great Place To Work certification. - A company with more than 15 years of experience. - Work with world-class clients and long-term projects. - English scholarships for an external institute. - English classes with company teachers. - State-of-the-art tools and resources. - Certifications for your professional growth. - Recreation and leisure activities. - Compliance with the regulations and labor rights of your region. Company Description AssureSoft is a multinational software development and information technology company providing strategic consulting, technology services, and outsourcing business processes. We work to innovate and create quality software with motivated, passionate, and qualified teams that develop in an environment of professional, stable growth and continuous learning. Inclusive Opportunities for Every Talent. At AssureSoft, we believe that true innovation is born from diversity—of ideas, experiences, and perspectives. That’s why our hiring practices are inclusive and reflect a firm commitment to equity and equal opportunity. Here, every person—regardless of origin, gender, orientation, or beliefs—finds a space to grow, contribute, and be valued not only for their talent, but also for who they are.

• Work directly with federal and national-security customers to understand mission workflows, pain points, data environments, and operational constraints. • Build and deploy AI-enabled applications, agents, integrations, and workflow automation in secure customer environments. • Translate customer needs into technical requirements, implementation plans, and product feedback for the core engineering team. • Own delivery from prototype through production, including architecture, backend services, APIs, integrations, observability, testing, deployment, and customer acceptance. • Integrate with customer systems, data sources, identity providers, and cloud or on-prem infrastructure. • Partner with product, engineering, security, and customer teams to ensure solutions are secure, reliable, auditable, and operationally useful. • Debug issues in deployed environments and drive fast resolution across application, infrastructure, data, and integration layers. • Contribute reusable patterns, platform improvements, and documentation back to the broader engineering organization. • Operate with strong judgment in environments involving sensitive data, government stakeholders, and mission-critical workflows.