Senior Full-Stack Developer (Platform Audit & Multi-Tenant Hardening) - PT - Worldwide

Arc Full-time
United States
1 day ago
Apply on arc.dev
Prepare application

Role details

Contract type
Temporary contract
Employment type
Part-time (≤ 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours
Job source

Tech stack

Code Coverage Information Leak Prevention PostgreSQL Node.Js Next.js ReactJS

Job description

  • Verify multi-tenant isolation is correctly enforced - no cross-tenant data leakage across planners/weddings, guest links, RLS policies, and any Supabase-level access control
  • Identify and prioritize gaps: correctness bugs, race conditions, auth/session issues, RLS misconfigurations
  • Testing: assess current test coverage, add/strengthen tests where it matters most given the hour budget
  • Deliver a clear, prioritized findings report (not just a fix-everything pass) - client needs guidance, not just a diff

Requirements

  • Senior full-stack engineer, comfortable owning an audit independently with minimal hand-holding
  • Strong hands-on experience with Supabase/PostgreSQL, specifically Row Level Security and multi-tenant data isolation - this is not a “read the docs as you go” engagement
  • Production experience with React + Node.js on Vercel
  • Can communicate findings clearly to founder - plain-language risk summaries, not just ticket dumps
  • Efficient: this is a capped-hours engagement, so time management and prioritization matter as much as technical depth
  • Reliable: consistent availability and communication for the duration of the engagement

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on arc.dev
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:01 min

Reviewing supplementary platform features and secured enterprise environments

45 sec

Working securely with Node.js path application programming interfaces

Sonya Moisset · World Congress 2023

4:30 min

Scaffolding pages and routing single-page applications with Next.js

Josh Goldberg · JS Congress

1:21 min

Exploring the target application for front end tests

Anna Mcdougall · JS Congress

1:20 min

Identifying multi-disciplinary talent for developer experience engineering roles

Hazal Mestci +1 · Coffee With Developers

3:55 min

Identifying underlying Node.js runtime vulnerabilities using fuzzing tools

Sonya Moisset · World Congress 2023

Videos

See all

Related articles

See all