Backend Engineer后端开发

Backend Engineer
As a Backend Engineer, you will be responsible for automating and improving our tech risk, audit, and compliance processes. You'll design, develop, and implement backend solutions that help automate repetitive tasks, integrate risk management workflows, and ensure compliance with various regulatory frameworks. You will work closely with our security, devx, and operations teams to develop scripts and tools that drive efficiency and support continuous compliance. DevOps skills are a strong plus as we aim to improve our infrastructure and security posture.

Responsibilities:
* Design and implement backend automation tools to support tech risk management, audit, and compliance processes.
* Develop and maintain scripts and systems to automate security compliance checks and auditing tasks.
* Integrate security and compliance monitoring into our CI/CD pipelines to ensure continuous compliance and risk mitigation.
* Design and implement tools to track, manage, and mitigate tech risks across the infrastructure.
* Ensure that the backend systems and scripts adhere to security best practices and compliance standards.
* Work closely with cross-functional teams (security, platform, risk, etc.) to gather requirements and translate them into technical solutions.
* Participate in security and compliance audits, contributing to the creation and maintenance of audit-ready systems.
* Continuously improve backend automation solutions for scalability, efficiency, and security.
* Participate in troubleshooting and remediating any security, audit, or compliance-related issues that arise in production.

Key Requirements:
* Proven experience as a Backend Engineer or in a similar role with a focus on security, compliance, or automation.
* Strong scripting skills in【 Python, Bash, Shell, or similar languages 】for automating tasks related to risk and compliance management.
* Solid experience with microservices architecture and a good understanding of the microservices 【SDLC】 (design, development, testing, deployment, and monitoring) to recognize and mitigate associated risks.
* Expertise with 【Kotlin and Spring Boot】 for building microservices-based backend solutions
* Experience in designing and developing backend systems that support security auditing and compliance monitoring.
* Experience with CI/CD pipelines and integrating security/compliance checks into automated workflows.
* Knowledge of 【cloud platforms (AWS, GCP, Azure) and security features (IAM, encryption, monitoring).】
* Experience working with infrastructure as code tools like【 Terraform, 】CloudFormation, or 【Ansible.】
* Familiarity with audit logs and security monitoring tools (e.g., SIEM, Splunk, ELK stack).
* Solid understanding of risk management principles and how to translate them into technical solutions.
* Strong problem-solving skills and the ability to handle complex compliance challenges.
* Attention to detail, especially when managing sensitive security or compliance data.
* Excellent communication skills and the ability to work collaboratively across teams.

Preferred Qualifications:
* Experience with DevOps practices such as infrastructure automation, CI/CD pipelines, and security monitoring.
* Knowledge of identity and access management (IAM) and role-based access control (RBAC) in cloud environments.
* Familiarity with compliance automation platforms (e.g., CloudHealth, Qualys, or similar tools).
* Exposure to risk assessment tools and platforms for managing security posture and compliance status.
* Previous experience in industries with heavy regulatory requirements, such as finance, healthcare, or enterprise tech.
* Knowledge of penetration testing, vulnerability scanning, and other security practices to identify potential risks.