C# Code Review Engineer

Evocabank

- develop secure, scalable, and maintainable applications using C# and the .NET Core/.NET 6+ framework - conduct security code reviews to identify vulnerabilities such as SQL Injection, XSS, and insecure deserialization, and recommend remediation strategies - implement and enforce secure coding standards across the development team to ensure consistent and safe practices - collaborate with Application Security (AppSec) teams and participate in threat modeling and security design reviews integrate static analysis tools (e.g., SonarQube, Fortify, Snyk) into CI/CD pipelines and analyze the results for actionable insights - Lead by example by writing clean, secure, and testable code that aligns with industry best practices - mentor team members on secure development practices and participate actively in peer code reviews to maintain code quality - stay up to date with application security trends, including OWASP Top 10, CWE/SANS, and emerging threats

- higher education - at least 5 years of work experience in C# / .NET software development - strong knowledge of .NET security features, including authentication - hands-on experience conducting manual and automated code reviews for security vulnerabilities - familiarity with secure coding guidelines, such as those from OWASP, Microsoft SDL, or NIST - experience with static and dynamic analysis tools (e.g., Fortify, Checkmarx, Veracode, SonarQube) - solid understanding of common attack vectors and mitigations (e.g., input validation, output encoding, proper logging - familiarity with secure API development (e.g., rate limiting, JWT handling, HTTPS enforcement) - ability to work in a team - excellent knowledge of English and Russian

Interested applicants should send their CVs to: cv@evoca.am indicating "Teller (evening shift)" in the subject line of the e-mail. Only short-listed candidates will be interviewed. Please mention in your application that you have learned about this position from MyJob.am