About Truelogic

At Truelogic we are a leading provider of nearshore staff augmentation services headquartered in New York. For over two decades, we’ve been delivering top-tier technology solutions to companies of all sizes, from innovative startups to industry leaders, helping them achieve their digital transformation goals.

Our team of 600+ highly skilled tech professionals, based in Latin America, drives digital disruption by partnering with U.S. companies on their most impactful projects. Whether collaborating with Fortune 500 giants or scaling startups, we deliver results that make a difference.

By applying for this position, you’re taking the first step in joining a dynamic team that values your expertise and aspirations. We aim to align your skills with opportunities that foster exceptional career growth and success while contributing to transformative projects that shape the future.

Our Client

A cloud-based software platform specifically designed to help public sector organizations and agencies manage the entire employee lifecycle.

The platform enables Human Resources teams to centralize and streamline processes such as recruitment, onboarding, employee development, and workforce management, while also supporting diversity initiatives and automating various HR processes.

These solutions provide a centralized platform that enables public sector organizations to manage their talent processes and employee experience more efficiently.

Job Summary

We're looking for mid-level full stack engineer to join a focused application security initiative.

This is hands-on engineering across the full stack. In a given week you might upgrade a .NET authentication library and chase down the breaking changes, remediate an XSS vulnerability in an Angular component, parameterize a SQL query to close an injection risk, and harden a Dockerfile to stop running as root.

Responsibilities

• Remediate security vulnerabilities across the stack: dependency upgrades (NuGet, npm), code-level fixes (authorization, XSS, path traversal, SQL injection, weak cryptography), credential rotation, and container/Kubernetes hardening.

• Write tests for every fix: unit tests that prove the vulnerability has been addressed, along with functional verification to ensure the feature continues to work correctly.

• Own upgrades end to end: when a major version upgrade breaks the build or changes application behavior, diagnose the issue and drive the resolution through completion.

• Document what you learn: since certain findings tend to repeat, document the analysis and solution from each upgrade to prevent teammates from having to repeat the same work.

• Collaborate across teams: many of these repositories are owned by other teams, so you'll need to gather context, coordinate with them, and work through their reviews.

• Coordinate credential rotations: some fixes require identifying every service or application consuming a secret and coordinating a safe, sequenced rollout with DevOps.

• Make sound technical judgments: when a suggested fix is not appropriate for the architecture, or when a finding is a false positive, raise the concern and provide the technical reasoning behind it.

• Help prevent issues from accumulating: set up automation so routine dependency updates are handled continuously instead of piling up in the backlog.

Qualifications and Job Requirements

• 3–5 years of professional software engineering experience.

• Strong C# / .NET skills, with solid experience working with ASP.NET Core web applications.

• Strong TypeScript skills and experience with a modern frontend framework. Angular is preferred; strong React or Vue experience is highly transferable.

• Working knowledge of SQL, including writing queries, understanding parameterization, and using an ORM or data access layer.

• Testing is part of your regular development practice: unit testing, ideally with some integration or end-to-end testing experience.

• Strong Git skills, including branching, rebasing, clean commits, and useful pull requests.

• Comfortable reading and understanding unfamiliar code, as much of the work will involve codebases you did not original