We are looking for a Software Engineer to join one of our US clients, a life insurance company serving the middle American market, on work focused on security vulnerability remediation. You’ll triage findings from Snyk, fix the ones that can be fixed quickly and safely, and escalate the ones that need deeper design work. Most of the applications are built in Ruby, with ongoing work to modernize them into Python, plus some legacy .NET projects. The work covers open source dependencies, first-party code, containers, and infrastructure as code.
You’ll be embedded in the engineering teams that build and support the applications you work on, so you’ll have their support from day one. If you have a few years of development experience, are fluent in English, are careful with details, and are comfortable working in code you didn’t write, we’d like to hear from you. Our jobs are fully remote, and you will be integrated directly into the client’s team.
Here are some of the exciting day-to-day challenges you will face in this role:
- Review and triage findings from Snyk Open Source, Snyk Code, Snyk Container, and Snyk IaC, separating real, reachable issues from false positives.
- Prioritize findings by severity, exploitability, and exposure against remediation SLAs, and route them to the right team through Jira.
- Fix vulnerabilities across Ruby, Python, and .NET applications: dependency upgrades, first-party code fixes, container base image updates, and infrastructure as code corrections.
- Test every change to confirm the vulnerability is closed and nothing else broke, and add unit and integration tests where coverage is thin.
- Submit clear pull requests that explain what was found, what changed, and how you verified it, and respond to review feedback.
- Write risk-accept or ignore recommendations with a clear justification for the owning team lead to approve.
- Keep Snyk projects, Jira tickets, and remediation status up to date so progress against SLAs can be reported accurately.
- Escalate findings that need breaking upgrades, architectural changes, or cross-team coordination instead of working around them.
- Join team ceremonies (stand-ups, sprint planning, reviews, and retros) and document recurring fixes so other engineers can reuse them.
You will shine if you have:
- A bachelor’s degree in Computer Science, Software Engineering, or a related field, or equivalent experience.
- 3+ years of software development experience.
- Solid hands-on experience with Ruby.
- Experience with Python.
- Experience with dependency management (Bundler/RubyGems, pip) and an understanding of how version upgrades can introduce breaking changes.
- Strong knowledge of Git and pull request workflows.
- Experience with relational databases.
- Experience writing unit and integration tests.
- The ability to work carefully in unfamiliar code in established systems and make small, well-tested changes.
- Fluent English and strong written communication, especially when writing tickets and pull requests.
- Availability to work US time zone hours in a fast-paced, agile team.
It doesn’t hurt if you also:
- Have some experience with C#/.NET, as you may occasionally touch legacy .NET projects.
- Know security fundamentals such as CVEs, CVSS scoring, the OWASP Top 10, and secure coding practices.
- Have used Snyk or similar tools (Dependabot, Mend, Veracode, SonarQube).
- Have worked with Docker, AWS, or infrastructure as code tools such as Terraform or CloudFormation.
- Have experience with CI/CD pipelines.
- Use AI coding tools (Claude, Kiro, GitHub Copilot) hands-on, and know how to review and verify AI-generated changes before submitting them.
What we offer:
- Salary in USD
- 100% Remote
Skills Required
- Bachelor’s degree in Computer Science, Software Engineering, or a related field, or one to two years of software development experience or equivalent training
- Hands-on experience with Ruby, Python, or C#/.NET, with willingness to work across all three
- Familiarity with dependency management using Bundler/RubyGems, pip, or NuGet
- Working knowledge of Git and pull request workflows
- Familiarity with relational databases and basic exposure to containers and cloud concepts such as Docker and AWS
- Exposure to infrastructure as code tools such as Terraform or CloudFormation
- Experience writing basic unit tests
- Ability to work carefully in unfamiliar code and make small, well-tested changes
- Fluent English and strong written communication
- Availability to work US time zone hours in a fast-paced agile team
- Security fundamentals including CVEs, CVSS scoring, OWASP Top 10, and secure coding practices
- Experience with Snyk or similar tools such as Dependabot, Mend, or Veracode
- Exposure to CI/CD pipelines
- Hands-on use of AI coding tools such as Claude, Kiro, or GitHub Copilot, with ability to review and verify generated changes
What We Do
Blue Coding is on a mission to connect companies with the best software development talent available, specializing in hiring top nearshore talent across Latin America. They provide custom software development and IT staff augmentation services for various industries, including fintech, real estate, eCommerce, and GIS, leveraging a rigorous vetting process to build high-performing outsourced engineering teams for their clients.
