Role Description:

Develops complex applications and systems to provide the required functionality for all IT services, including configuration and adjustment of standard software. Provides application maintenance and support services to users or to service delivery functions and contributes to the operations of a dedicated application or application class.

Key Accountabilities & Responsibilities:

- Analyze and remediate findings from SAST, DAST, software composition analysis, secrets scanning, and penetration testing.
- Implement secure fixes across React, TypeScript, Node.js, NestJS, and AWS-based applications without compromising functional quality or maintainability.
- Use approved AI-assisted engineering tools, including GitHub Copilot and Claude Code where available, for root-cause analysis, secure refactoring, test generation, and code review.
- Validate all AI-generated changes through human review, automated tests, security scans, and established change-control processes.
- Perform threat modeling and security design reviews for new and changed functionality.
- Integrate preventative security controls into CI/CD pipelines and create reusable remediation patterns.
- Collaborate with product teams, security specialists, architects, and platform engineers to prioritize findings by exploitability and business impact.
- Coach development teams on secure coding and document lessons learned to prevent recurrence.

Key Competencies & Skills required

Technical:

- Robust hands-on expertise in React, TypeScript, Node.js, NestJS or ExpressJS, and REST APIs.
- Practical experience with AWS services and cloud-native application patterns.
- GitHub, GitHub Actions, Docker, CI/CD pipelines, automated testing, and code-quality tooling.
- Application security knowledge covering OWASP Top 10, CWE, secure SDLC,



threat modeling, SAST, DAST, dependency risk, and secrets management.
- Ability to assess and safely use AI coding assistants for code comprehension, remediation, test creation, and review.

Nice to have:

- GitHub Advanced Security, SBOM processes, AWS security services, MCP-based integrations, and agentic workflow concepts.
- Insurance-domain or regulated-enterprise experience.
- Relevant security or cloud certifications.
- Knowledge of Angular

Behavioural Skills:

- Strong ownership, analytical thinking, and a proactive approach to identifying risk and presenting options.
- Clear communication across distributed and cross-functional teams.
- Ability to coach peers and translate security findings into actionable engineering work.
- Commitment to responsible AI use, confidentiality, traceability, and human accountability.
- Knowledge about Test Tools (e.g. HP ALM) and BMC Tool Incident Management
- Creation of unit tests, automation tests
- Excellent interpersonal and communication skills for working in a global environment
- Willingness to learn and quickly adapt to changing requirements
- Proactive approach to identifying issues and presenting solutions
- Prioritize business impact and urgency
- Ability to learn new technology and methodology quickly.

Soft Skills:

- Ability to work in a team
- conflict skills
- flexibility
- initiative
- resilience
- Communication and presentation skills

Previous Experience & Qualifications

Education/Qualification:

- A degree in Computer Science or equivalent or a related discipline; or equivalent work experience

Knowledge & Experience:

- 2-4 years of Development background in design, analysis and coding, bug fixing.
- IT technical background & client server programming experience
- Experience process know-how insurance
- Experience in agile Methods

📌 Fullstack Developer_React and Node (Mumbai)
🏢 ERGO Technology u0026 Services
📍 Mumbai