Why Blue Coding?
At Blue Coding, we specialize in hiring excellent developers and amazing people from all over Latin America and other parts of the world. For the past 11 years, we’ve helped cutting-edge companies in the United States and Canada build great development teams and develop great products. Large multinationals, digital agencies, Saas providers, and software consulting firms are just a few of our clients. Our team of over 150 engineers, project managers, QA, UX/UI designers, and many more is distributed in more than 10 countries across the Americas. We are a fully remote company working with a wide array of technologies, and we have expertise in every stage of the software development process.
Our team is highly connected, united, and culturally diverse, and our collaborators are involved in many initiatives around the world, from wildlife preservation to volunteering at local charities. We stand for honesty, fairness, respect, efficiency, hard work, and cooperation.
This position is open to candidates based in Argentina, Brazil, Colombia, Peru, and the Dominican Republic.
What are we looking for?
We are looking for a Software Engineer to join one of our US clients, a life insurance company serving the middle American market, on work focused on security vulnerability remediation. You’ll triage findings from Snyk, fix the ones that can be fixed quickly and safely, and escalate the ones that need deeper design work. Most of the applications are built in Ruby, with ongoing work to modernize them into Python, plus some legacy .NET projects. The work covers open source dependencies, first-party code, containers, and infrastructure as code.
You’ll be embedded in the engineering teams that build and support the applications you work on, so you’ll have their support from day one. If you have a few years of development experience, are fluent in English, are careful with details, and are comfortable working in code you didn’t write, we’d like to hear from you. Our jobs are fully remote, and you will be integrated directly into the client’s team.
Here are some of the exciting day-to-day challenges you will face in this role:
Review and triage findings from Snyk Open Source, Snyk Code, Snyk Container, and Snyk IaC, separating real, reachable issues from false positives.
Prioritize findings by severity, exploitability, and exposure against remediation SLAs, and route them to the right team through Jira.
Fix vulnerabilities across Ruby, Python, and .NET applications: dependency upgrades, first-party code fixes, container base image updates, and infrastructure as code corrections.
Test every change to confirm the vulnerability is closed and nothing else broke, and add unit and integration tests where coverage is thin.
Submit clear pull requests that explain what was found, what changed, and how you verified it, and respond to review feedback.
Write risk-accept or ignore recommendations with a clear justification for the owning team lead to approve.
Keep Snyk projects, Jira tickets, and remediation status up to date so progress against SLAs can be reported accurately.
Escalate findings that need breaking upgrades, architectural changes, or cross-team coordination instead of working around them.
Join team ceremonies (stand-ups, sprint planning, reviews, and retros) and document recurring fixes so other engineers can reuse them.
You will shine if you have:
A bachelor’s degree in Computer Science, Software Engineering, or a related field, or equivalent experience.
3+ years of software development experience.
Solid hands-on experience with Ruby.
Experience with Python.
Experience with dependency management (Bundler/RubyGems, pip) and an understanding of how version upgrades can introduce breaking changes.
Strong knowledge of Git and pull request workflows.
Experience with relational databases.
Experience writing unit and integration tests.
The ability to work carefully in unfamiliar code in established systems and make small, well-tested changes.
Fluent English and strong written communication, especially when writing tickets and pull requests.
Availability to work US time zone hours in a fast-paced, agile team.
It doesn’t hurt if you also:
Have some experience with C#/.NET, as you may occasionally touch legacy .NET projects.
Know security fundamentals such as CVEs, CVSS scoring, the OWASP Top 10, and secure coding practices.
Have used Snyk or similar tools (Dependabot, Mend, Veracode, SonarQube).
Have worked with Docker, AWS, or infrastructure as code tools such as Terraform or CloudFormation.
Have experience with CI/CD pipelines.
Use AI coding tools (Claude, Kiro, GitHub Copilot) hands-on, and know how to review and verify AI-generated changes before submitting them.
What we offer:
Salary in USD
100% Remote
Ready to learn more? Apply below!