> Markdown version of [/jobs/ext/2735224-senior-full-stack-developer-platform-audit-multi-tenant-hardening-pt-worldwide](https://www.wearedevelopers.com/jobs/ext/2735224-senior-full-stack-developer-platform-audit-multi-tenant-hardening-pt-worldwide). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Full-Stack Developer (Platform Audit & Multi-Tenant Hardening) - PT - Worldwide

- **Company:** Arc Full-time
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Temporary contract
- **Skills:** Code Coverage, Information Leak Prevention, PostgreSQL, Node.Js, Next.js, ReactJS
- **Published:** September 5, 2026
- **Apply:** https://arc.dev/signup?userType=developer&publicRandomKey=phi8hgbtzm&to=https%3A%2F%2Farc.dev%2Fdashboard%2Fd%2Fverified-jobs%2Fphi8hgbtzm%2Fapplication

## About the Role

* Senior full-stack engineer, comfortable owning an audit independently with minimal hand-holding
 * Strong hands-on experience with Supabase/PostgreSQL, specifically Row Level Security and multi-tenant data isolation - this is not a "read the docs as you go" engagement
 * Production experience with React + Node.js on Vercel
 * Can communicate findings clearly to founder - plain-language risk summaries, not just ticket dumps
 * Efficient: this is a capped-hours engagement, so time management and prioritization matter as much as technical depth
 * Reliable: consistent availability and communication for the duration of the engagement

## Description

* Verify multi-tenant isolation is correctly enforced - no cross-tenant data leakage across planners/weddings, guest links, RLS policies, and any Supabase-level access control
 * Identify and prioritize gaps: correctness bugs, race conditions, auth/session issues, RLS misconfigurations
 * Testing: assess current test coverage, add/strengthen tests where it matters most given the hour budget
 * Deliver a clear, prioritized findings report (not just a fix-everything pass) - client needs guidance, not just a diff


## Related Videos

- [Watch Tests Go Brrrr! : Getting Started with Cypress in ReactJS](https://www.wearedevelopers.com/videos/282-watch-tests-go-brrrr-getting-started-with-cypress-in-reactjs)
- [GraphQL + Apollo + Next.js: A Lovely Trio](https://www.wearedevelopers.com/videos/311-graphql-apollo-next-js-a-lovely-trio)
- [Stop using Node.js like in 2020! What changed and what you can do today with Node.js](https://www.wearedevelopers.com/videos/100011-stop-using-node-js-like-in-2020-what-changed-and-what-you-can-do-today-with-node-js)
- [Build and Deploy a Fullstack App with Open Source Tooling](https://www.wearedevelopers.com/videos/775-build-and-deploy-a-fullstack-app-with-open-source-tooling)
- [Build Your Own Subscription-based Course Platform](https://www.wearedevelopers.com/videos/321-build-your-own-subscription-based-course-platform)
- [From Zero to Hero: NextJS 13 and Tailwind CSS for Beginners](https://www.wearedevelopers.com/videos/766-from-zero-to-hero-nextjs-13-and-tailwind-css-for-beginners)

## Related Articles

- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025)