Skip to content

Open nowPosted 23 hours ago

Senior Full Stack TypeScript

Workable (global search)107,284 open roles

Where
Tabuk, Tabuk Province, Saudi Arabia
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Full Stack TypeScriptWorkable (global search) · Tabuk, Tabuk Province, Saudi Arabia
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Workable (global search)'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.5% of postings close within 7 days. Measured by our own scanner across the market. Workable (global search) postings stay open a median of 5 days.

Share of postings closed within
  1. 1.8%1 day
  2. 4.0%3 days
  3. 9.5%7 days
  4. 15.6%14 days
  5. 33.9%30 days
This job: posted 23 hours ago

Workable (global search) median: 5 days open

The posting

About the Role

Kaffu Salla currently recruiting on behalf of one of our merchants for a Senior Full Stack TypeScript Engineer to take ownership of an existing production system, strengthen its security, and improve its functionality without disrupting ongoing business operations.

The merchant is looking for an experienced, hands-on engineer who can understand unfamiliar and undocumented code, investigate existing system architecture, identify security vulnerabilities, and implement reliable improvements without unnecessarily rebuilding the system from scratch.

This role requires strong full-stack development skills, practical application security experience, and the ability to maintain and improve business-critical systems safely.

Key Responsibilities

1. Legacy Code Takeover and Refactoring

  • Take ownership of an existing production system, including code written by previous developers.
  • Read, understand, and reverse-engineer undocumented code and existing system architecture.
  • Identify technical risks and implement incremental improvements without unnecessary rewrites.
  • Maintain system stability and business continuity while fixing bugs and improving existing functionality.

2. Full Stack Development

  • Develop and maintain backend services using TypeScript, Node.js, and NestJS or Express.
  • Develop and maintain frontend applications using React.js or Next.js.
  • Build, maintain, and integrate REST APIs.
  • Work with PostgreSQL and Redis to support reliable application functionality and data management.

3. Application Security and Secrets Management

  • Secure API keys, credentials, environment variables, and application secrets.
  • Review GitHub repositories and Git history to identify exposed secrets and leaked credentials.
  • Revoke and rotate compromised API keys, credentials, and cloud access secrets.
  • Apply secure coding practices and prevent common application vulnerabilities, including SQL injection.
  • Implement secure authentication and server-side authorization.
  • Use secure password hashing mechanisms such as bcrypt or Argon2.
  • Apply appropriate encryption and access controls to protect sensitive information.

4. Sensitive Data Protection and Access Control

  • Protect sensitive employee information, payroll data, identity numbers, and contractual records.
  • Implement granular role-based access control (RBAC).
  • Enforce authorization checks on the backend to prevent users from accessing information outside their permissions.
  • Identify and prevent insecure direct object reference (IDOR) vulnerabilities and unauthorized data exposure.
  • Ensure that data access is properly restricted across users, roles, departments, and tenants where applicable.

5. Database Management and Safe Migrations

  • Design, maintain, and improve PostgreSQL databases and database schemas.
  • Execute database migrations safely without breaking existing production functionality.
  • Plan and implement zero-downtime migrations where required.
  • Protect existing data integrity and minimize service interruptions during database changes.

6. Automated Testing and Production Reliability

  • Write and maintain integration tests and end-to-end (E2E) tests.
  • Establish a testing safety net before refactoring existing functionality.
  • Verify that changes do not introduce regression bugs.
  • Troubleshoot production issues and prioritize system stability, security, and reliability.

Required Qualifications

  • Strong practical experience with TypeScript and Node.js.
  • Hands-on experience with NestJS or Express.
  • Experience developing applications with React.js or Next.js.
  • Strong knowledge of PostgreSQL and relational database design.
  • Practical experience with Redis.
  • Proven experience maintaining and improving existing production systems, including legacy or undocumented codebases.
  • Strong understanding of application security, secure API development, and secrets management.
  • Experience implementing authentication, authorization, and granular RBAC.
  • Knowledge of secure password hashing, data encryption, and SQL injection prevention.
  • Experience writing integration tests and end-to-end tests.
  • Experience with production database migrations, with the ability to minimize downtime and prevent data loss or regressions.
  • Ability to investigate unfamiliar codebases, work independently, and deliver practical solutions while maintaining business continuity.

Requirements

  • Strong practical experience with TypeScript and Node.js.
  • Hands-on experience with NestJS or Express.
  • Experience developing applications with React.js or Next.js.
  • Strong knowledge of PostgreSQL and relational database design.
  • Practical experience with Redis.
  • Proven experience maintaining and improving existing production systems, including legacy or undocumented codebases.
  • Strong understanding of application security, secure API development, and secrets management.
  • Experience implementing authentication, authorization, and granular RBAC.
  • Knowledge of secure password hashing, data encryption, and SQL injection prevention.
  • Experience writing integration tests and end-to-end tests.
  • Experience with production database migrations, with the ability to minimize downtime and prevent data loss or regressions.
  • Ability to investigate unfamiliar codebases, work independently, and deliver practical solutions while maintaining business continuity.

Benefits

  • Accommodation: Provided by the merchant.
  • Iqama Transfer Fees: Covered by the merchant.
  • Medical Insurance: Provided by the merchant.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Workable (global search)'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Workable (global search)'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Workable (global search)'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.