Entry-level software engineer focused on security vulnerability remediation across Ruby, Python, and .NET applications. Responsibilities include triaging Snyk findings, prioritizing remediation, upgrading dependencies, fixing code, updating containers and infrastructure as code, testing changes, submitting pull requests, documenting decisions, and escalating complex issues. The role requires careful code review, strong English communication, Git proficiency, and collaboration with senior engineers and application owners in a remote agile environment.
Why Blue Coding?
At Blue Coding, we specialize in hiring excellent developers and amazing people from all over Latin America and other parts of the world. For the past 11 years, we’ve helped cutting-edge companies in the United States and Canada build great development teams and develop great products. Large multinationals, digital agencies, Saas providers, and software consulting firms are just a few of our clients. Our team of over 150 engineers, project managers, QA, UX/UI designers, and many more is distributed in more than 10 countries across the Americas. We are a fully remote company working with a wide array of technologies, and we have expertise in every stage of the software development process.
Our team is highly connected, united, and culturally diverse, and our collaborators are involved in many initiatives around the world, from wildlife preservation to volunteering at local charities. We stand for honesty, fairness, respect, efficiency, hard work, and cooperation.
This position is open to candidates based in Argentina, Brazil, Colombia, Peru, and the Dominican Republic.What are we looking for?
We are looking for a Software Engineer to join one of our US clients, a life insurance company serving the middle American market, on work focused on security vulnerability remediation. You’ll triage findings from Snyk, fix the ones that can be fixed quickly and safely, and escalate the ones that need deeper design work. Most of the applications are built in Ruby, with ongoing work to modernize them into Python, plus some legacy .NET projects. The work covers open source dependencies, first-party code, containers, and infrastructure as code.
You’ll be embedded in the engineering teams that build and support the applications you work on, so you’ll have their support from day one. If you have a few years of development experience, are fluent in English, are careful with details, and are comfortable working in code you didn’t write, we’d like to hear from you. Our jobs are fully remote, and you will be integrated directly into the client’s team.
Here are some of the exciting day-to-day challenges you will face in this role:
- Review and triage findings from Snyk Open Source, Snyk Code, Snyk Container, and Snyk IaC, separating real, reachable issues from false positives.
- Prioritize findings by severity, exploitability, and exposure against remediation SLAs, and route them to the right team through Jira.
- Fix vulnerabilities across Ruby, Python, and .NET applications: dependency upgrades, first-party code fixes, container base image updates, and infrastructure as code corrections.
- Test every change to confirm the vulnerability is closed and nothing else broke, and add unit and integration tests where coverage is thin.
- Submit clear pull requests that explain what was found, what changed, and how you verified it, and respond to review feedback.
- Write risk-accept or ignore recommendations with a clear justification for the owning team lead to approve.
- Keep Snyk projects, Jira tickets, and remediation status up to date so progress against SLAs can be reported accurately.
- Escalate findings that need breaking upgrades, architectural changes, or cross-team coordination instead of working around them.
- Join team ceremonies (stand-ups, sprint planning, reviews, and retros) and document recurring fixes so other engineers can reuse them.
You will shine if you have:
- A bachelor’s degree in Computer Science, Software Engineering, or a related field, or equivalent experience.
- 3+ years of software development experience.
- Solid hands-on experience with Ruby.
- Experience with Python.
- Experience with dependency management (Bundler/RubyGems, pip) and an understanding of how version upgrades can introduce breaking changes.
- Strong knowledge of Git and pull request workflows.
- Experience with relational databases.
- Experience writing unit and integration tests.
- The ability to work carefully in unfamiliar code in established systems and make small, well-tested changes.
- Fluent English and strong written communication, especially when writing tickets and pull requests.
- Availability to work US time zone hours in a fast-paced, agile team.
It doesn’t hurt if you also:
- Have some experience with C#/.NET, as you may occasionally touch legacy .NET projects.
- Know security fundamentals such as CVEs, CVSS scoring, the OWASP Top 10, and secure coding practices.
- Have used Snyk or similar tools (Dependabot, Mend, Veracode, SonarQube).
- Have worked with Docker, AWS, or infrastructure as code tools such as Terraform or CloudFormation.
- Have experience with CI/CD pipelines.
- Use AI coding tools (Claude, Kiro, GitHub Copilot) hands-on, and know how to review and verify AI-generated changes before submitting them.
What we offer:
- Salary in USD
- 100% Remote
Ready to learn more? Apply below!
Similar Jobs
Aerospace • Defense • Manufacturing
Lead cybersecurity architecture and implementation for embedded flight software, unmanned aircraft systems, and mission-critical defense platforms. Design secure boot, cryptographic, authentication, integrity, and communications protections; conduct threat modeling, vulnerability assessments, penetration testing coordination, and security verification. Define requirements and technical acceptance criteria, integrate security across multidisciplinary engineering teams, support DoD cybersecurity assessments, develop security documentation, and mentor engineers on secure architecture and coding.
Top Skills:
ArmArtifactoryAuthenticationCC++Ci/CdCmmcCryptographic Key ManagementCryptographyDockerEmbedded LinuxGithub ActionsGithub EnterpriseMil-Std-882Nist Sp 800-160Nist Sp 800-171Nist Sp 800-53PythonReal-Time Operating SystemsRmfSbomsSecure BootSecure CommunicationsSecure StorageSoftware SigningVxworks
Biotech
Own verification and validation strategy for regulated diagnostic software, including NGS bioinformatics pipelines, lab automation, LIMS/LIS tools, and laboratory instruments. Design and execute IEC 62304-aligned tests, maintain traceability, review test results, approve reports, and ensure ISO 13485 design-control compliance. Collaborate with bioinformatics, software, quality, and clinical laboratory teams while managing testing priorities across programs and supporting periodic Boulder laboratory activities.
Top Skills:
AWSBioinformatics PipelinesCap/CliaGCPIec 62304Iso 13485LimsLisNextflowNgs
Aerospace • Defense • Manufacturing
Lead architecture and implementation of software for autonomous UAS systems; mentor engineers; ensure compliance with aerospace standards; optimize CI/CD pipelines.
Top Skills:
.NetAWSBashC#C/C++Ci/CdGitGitMatlab/SimulinkPowershellPythonVisual Studio
What you need to know about the San Francisco Tech Scene
San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
