Job description

.NET Developer (Security-Focused) || Chicago, IL || Job Title: .NET Developer (Security-Focused) Location: Chicago, IL Work Mode: Hybrid (1 Day/Week) Top 5 Skills: • Expertise in .NET technologies (C#, ASP.NET, .NET Core) with a strong focus on secure coding practices. • Proficiency in Identity and Access Management (IAM), including OAuth2.0, OpenID Connect, and Active Directory/ADFS. • Hands-on experience with application security controls such as authentication, authorization, and encryption. • Strong knowledge of OWASP Top 10 vulnerabilities and mitigation strategies. • Familiarity with DevSecOps practices and integration of security tools into CI/CD pipelines. Responsibilities: • Design, develop, and maintain secure .NET applications ensuring compliance with industry security standards. • Implement robust authentication and authorization mechanisms using OAuth2.0, OpenID Connect, and Active Directory. • Conduct secure code reviews, threat modeling, and vulnerability assessments for .NET applications. • Collaborate with DevOps teams to integrate security testing tools (SAST, DAST, SCA) into CI/CD pipelines. • Ensure data protection and encryption for sensitive information in transit and at rest. • Monitor, detect, and remediate potential security vulnerabilities in applications. • Partner with cross-functional teams to drive a security-first culture in software development. Required Qualifications: • Proven experience as a .NET Developer with strong emphasis on application and cloud security. • Proficiency in C#, ASP.NET, .NET Core, and secure coding practices. • Solid understanding of web security standards (OWASP, NIST). • Hands-on experience implementing OAuth2.0, OpenID Connect, SAML, JWT, and Role-Based Access Control (RBAC). • Experience with secure API development (REST/GraphQL) including token-based authentication. • Familiarity with container security (Docker, Kubernetes) and cloud security controls (Azure/AWS). • Knowledge of cryptography standards (TLS, HTTPS, PKI, hashing algorithms). • Strong debugging, problem-solving, and incident response skills with a security-first mindset. • Excellent communication and collaboration skills; ability to explain security risks to non-technical stakeholders. • Experience working in Agile/Scrum development environments.

Requirements