JavaScript Full-Stack Developer

We are seeking a JavaScript Full-Stack Developer to contribute to feature and maintenance work across the explorer platform and live events product within the Exploration Pod.
In this role, you will support API security hardening, dependency vulnerability remediation, and feature delivery across two products that share a common Next.js + NestJS + CMS architecture, working under the guidance of senior engineers.
The ideal candidate is a capable TypeScript engineer who is comfortable working across multiple products and understands the importance of security and reliability alongside feature delivery.
Responsibilities
Deliver feature work and bug fixes across the explorer platform and live events product
Support the maintenance and extension of NestJS API services, including data access layers and external service integrations
Contribute to CMS schema work and content model maintenance shared across both products
Help implement rate limiting on the live events API to address identified DDoS risk
Assist with hardening webhook endpoints using HMAC authentication across both products
Participate in triaging and remediating the 1000+ dependency vulnerabilities identified in the live events product
Apply dead-letter queue and retry patterns to Lambda workers and async processors with guidance from senior engineers
Write and maintain unit, integration, and E2E tests to meet coverage gate targets
Participate in code reviews and follow engineering standards within the pod
Collaborate with the Integration Engineer on fan-out write patterns and Kafka consumer reliability
Work with the Business Analyst to clarify stories before sprint planning
Requirements
2+ years of experience as a JavaScript Full-Stack Developer
Solid working knowledge of TypeScript, Next.js (App Router + Pages Router), and NestJS
Hands-on experience with Sanity Studio v5, Algolia, and Cloudinary
Practical experience with AWS ECS, Lambda, and SQS
Working knowledge of Confluent Kafka, PostgreSQL, and Terraform
Understanding of API security measures such as rate limiting and HMAC authentication for webhook endpoints
Exposure to dependency vulnerability triage and remediation
Basic understanding of dead-letter queue and retry patterns for async processors and Lambda workers
Experience writing unit, integration, and E2E tests to meet coverage targets
Ability to work across multiple products in a shared architecture
Experience using AI coding assistants for day-to-day feature development, security fix implementation, and dependency vulnerability triage
Willingness to use AI tools to help with large-scale dependency remediation through automated upgrade scripts, breaking change analysis, and regression identification
English proficiency at an Intermediate level (B1) or higher
Nice to have
Interest in AI-assisted code review using LLM-based tools to catch security and quality issues before human review
Exposure to fan-out write patterns and Kafka consumer reliability
Experience collaborating with Business Analysts to clarify stories before sprint planning
We offer
International projects with top brands
Work with global teams of highly skilled, diverse peers
Healthcare benefits
Employee financial programs
Paid time off and sick leave
Upskilling, reskilling and certification courses
Unlimited access to the LinkedIn Learning library and 22,000+ courses
Global career opportunities
Volunteer and community involvement opportunities
EPAM Employee Groups
Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

Work arrangement
Yes