Senior JavaScript Full-Stack Developer

We are seeking a Senior JavaScript Full-Stack Developer to deliver feature and maintenance work across the explorer platform and live events product within the Exploration Pod.
In this role, you will own API security hardening, dependency vulnerability remediation, and feature delivery across two products that share a common Next.js + NestJS + CMS architecture.
The ideal candidate is a confident TypeScript engineer who can context-switch efficiently between products and takes security and reliability as seriously as feature delivery.
Responsibilities
Deliver feature work and bug fixes across the explorer platform and live events product
Maintain and extend NestJS API services, including data access layers and external service integrations
Contribute to CMS schema work and content model maintenance shared across both products
Implement rate limiting on the live events API to address identified DDoS risk
Harden webhook endpoints with HMAC authentication across both products
Triage and remediate the 1000+ dependency vulnerabilities identified in the live events product
Apply dead-letter queue and retry patterns to Lambda workers and async processors
Write and maintain unit, integration, and E2E tests to meet coverage gate targets
Participate in code reviews and contribute to engineering standards within the pod
Collaborate with the Integration Engineer on fan-out write patterns and Kafka consumer reliability
Work with the Business Analyst to refine stories before sprint planning
Requirements
3+ years of experience as a JavaScript Full-Stack Developer
Proficiency in TypeScript, Next.js (App Router + Pages Router), and NestJS
Expertise in Sanity Studio v5, Algolia, and Cloudinary
Background in AWS ECS, Lambda, and SQS
Knowledge of Confluent Kafka, PostgreSQL, and Terraform
Skills in implementing API security measures such as rate limiting and HMAC authentication for webhook endpoints
Competency in dependency vulnerability triage and remediation at scale
Understanding of dead-letter queue and retry patterns for async processors and Lambda workers
Familiarity with writing unit, integration, and E2E tests to meet coverage targets
Capability to context-switch efficiently between multiple products in a shared architecture
Experience using AI coding assistants for day-to-day feature development, security fix implementation, and dependency vulnerability triage
Flexibility to use AI tools to accelerate large-scale dependency remediation through automated upgrade scripts, breaking change analysis, and regression identification
English proficiency at an Upper-Intermediate level (B2) or higher
Nice to have
Interest in AI-assisted code review using LLM-based tools to catch security and quality issues before human review
Showcase of contributions to fan-out write patterns and Kafka consumer reliability
Familiarity with collaborating closely with Business Analysts to refine stories before sprint planning
We offer
International projects with top brands
Work with global teams of highly skilled, diverse peers
Healthcare benefits
Employee financial programs
Paid time off and sick leave
Upskilling, reskilling and certification courses
Unlimited access to the LinkedIn Learning library and 22,000+ courses
Global career opportunities
Volunteer and community involvement opportunities
EPAM Employee Groups
Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn
EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.

Work arrangement
Yes