Backend Security Engineer – Cloud Services

About the role

We are looking for a security‑focused Backend Security Engineer to design, develop, and protect cloud‑based backend systems. You will embed security principles into APIs, microservices, authentication mechanisms and data processing components, ensuring resilience against emerging threats.

Key responsibilities

• Review backend code, architecture, APIs and configurations to identify security weaknesses.
• Implement secure coding practices, input validation, encryption, access controls and rate limiting.
• Support vulnerability management, remediation, and validation of security fixes.
• Participate in security reviews, penetration testing, threat modeling and application security assessments.
• Secure databases, message queues and other data stores through encryption, access controls and secrets management.
• Integrate security checks into CI/CD pipelines, including SAST, DAST, dependency scanning and container security.
• Monitor backend services for suspicious activity, authentication failures and other security events.

Required profile

• Strong technical background in backend development and cloud environments.
• Experience working with cross‑functional teams such as DevOps, QA and product stakeholders.
• Ability to analyze security findings, prioritize remediation and validate fixes.

Required skills

• OAuth 2.0, OpenID Connect, JWT
• Role‑Based Access Control (RBAC), Multi‑Factor Authentication (MFA), identity management
• RESTful APIs, GraphQL, microservices architecture
• Databases, message queues, encryption, secure session management
• Input validation, rate limiting, logging, monitoring
• SAST, DAST, dependency scanning, container security, secrets detection
• CI/CD pipelines, DevSecOps practices