Protect the NOWAITN platform: the central sign-in, the credential vault, API scopes, webhook signing and the separation of each organization's data.
This role is with NOWAITN (nowaitn.com).
Nice to have:
Experience with secret storage and key rotation.
Experience with software that handles health records.
Responsibilities
Review each new app and API route for authentication, scope checks and queries that are limited to the owning organization.
Maintain the checks for signed inbound webhooks and short-lived service credentials.
Review how each app stores secrets and how the encrypted backups and their keys are handled and rotated.
Test the sign-in flows, session handling and magic links for weaknesses and file clear findings.
Write the security review notes that each release needs and follow each finding to its fix.
Requirements
Experience in application security for PHP or Laravel web applications.
Experience reviewing authentication, authorization and session handling.
Understanding of common web vulnerabilities and how to test for them.
Clear technical writing in English.
Apply to this job
Applications to this job go to Questah Staffing. Create a contractor account with Questah Staffing, or sign in, and you come back to this page to apply.