Why Blue Coding?
At Blue Coding, we specialize in hiring excellent developers and amazing people from all over Latin America and other parts of the world. For the past 11 years, we’ve helped cutting-edge companies in the United States and Canada build great development teams and develop great products. Large multinationals, digital agencies, Saas providers, and software consulting firms are just a few of our clients. Our team of over 150 engineers, project managers, QA, UX/UI designers, and many more is distributed in more than 10 countries across the Americas. We are a fully remote company working with a wide array of technologies, and we have expertise in every stage of the software development process.
Our team is highly connected, united, and culturally diverse, and our collaborators are involved in many initiatives around the world, from wildlife preservation to volunteering at local charities. We stand for honesty, fairness, respect, efficiency, hard work, and cooperation.
This position is open to candidates based in Argentina, Brazil, Colombia, Peru, and the Dominican Republic.
What are we looking for?
We are looking for a Software Engineer to join one of our US clients, a life insurance company serving the middle American market, on work focused on security vulnerability remediation. You'll work with senior engineers and application owners to triage findings from Snyk, fix the ones that can be fixed quickly and safely, and escalate the ones that need deeper design work. The codebase spans Ruby, Python, and .NET, and the work covers open source dependencies, first-party code, containers, and infrastructure as code.
This is an entry-level role. It's a good fit if you have a year or two of development experience and want to build real security skills on production systems. If you are fluent in English, careful with details, and comfortable reading code you didn't write, we'd like to hear from you. Our jobs are fully remote, and you will be integrated directly into the client's team.
Here are some of the exciting day-to-day challenges you will face in this role:
Review and triage findings from Snyk Open Source, Snyk Code, Snyk Container, and Snyk IaC, separating real, reachable issues from false positives.
Prioritize findings by severity, exploitability, and exposure against remediation SLAs, and route them to the right team through Jira.
Fix vulnerabilities in Ruby, Python, and .NET applications: dependency upgrades, first-party code fixes, container base image updates, and infrastructure as code corrections.
Test every change to confirm the vulnerability is closed and nothing else broke, and add unit and integration tests where coverage is thin.
Submit clear pull requests that explain what was found, what changed, and how you verified it, and respond to review feedback from senior engineers.
Write risk-accept or ignore recommendations with a clear justification for the owning team lead to approve.
Keep Snyk projects, Jira tickets, and remediation status up to date so progress against SLAs can be reported accurately.
Escalate findings that need breaking upgrades, architectural changes, or cross-team coordination instead of working around them.
Join team ceremonies (stand-ups, sprint planning, reviews, and retros) and document recurring fixes so other engineers can reuse them.
You will shine if you have:
A bachelor's degree in Computer Science, Software Engineering, or a related field, or one to two years of software development experience or equivalent training.
Hands-on experience building applications in at least one of Ruby, Python, or C#/.NET, and willingness to work across all three.
Familiarity with dependency management (Bundler/RubyGems, pip, NuGet) and an understanding of how version upgrades can introduce breaking changes.
Working knowledge of Git and pull request workflows.
Familiarity with relational databases and basic exposure to containers and cloud concepts (Docker, AWS).
Exposure to infrastructure as code tools such as Terraform or CloudFormation.
Experience writing basic unit tests to prove a fix works and nothing regressed.
The ability to work carefully in unfamiliar code and make small, well-tested changes.
Fluent English and strong written communication, especially when writing tickets and pull requests.
Availability to work US time zone hours in a fast-paced, agile team.
It doesn’t hurt if you also:
- Security fundamentals such as CVEs, CVSS scoring, the OWASP Top 10, and secure coding practices.
- Experience with Snyk or similar tools (Dependabot, Mend, Veracode) and exposure to CI/CD pipelines.
- Hands-on use of AI coding tools (Claude, Kiro, GitHub Copilot), with the judgment to review and verify AI-generated changes before submitting them.
What we offer:
Salary in USD
100% Remote
Ready to learn more? Apply below!
