About the role
We are looking for a Senior C++ Engineer with strong low-level programming and security expertise to identify and remediate vulnerabilities in a large-scale, mature healthcare product. The ideal candidate has hands-on experience with legacy C++ codebases, memory safety (pointers, buffer overflows, memory corruption), multithreading, secure coding, and strong debugging/troubleshooting skills.
About the role
In this role, you will improve the security and resilience of a large-scale healthcare product used in enterprise environments. Working within an extended security engineering team, you will help identify, analyze, and remediate vulnerabilities across a mature C++ application while collaborating closely with architects, QA engineers, security specialists, and experienced product developers.
Your work will directly contribute to reducing technical risk and strengthening secure software development practices.
Conditions:
* Location - Bulgaria, Poland (remote) * B2B contract ( rate 30 -38 USD /h)
Responsibilities
* Analyze assigned security requirements and security findings * Implement security-related changes in the healthcare product * Remediate vulnerabilities such as unsafe input and length handling, buffer-overflow or memory-corruption risks, and SQL injection * Work safely with a large legacy C++ codebase, including pointer-based and memory-sensitive logic * Maintain and improve existing threading components * Identify technical impact and regression risks before modifying existing functionality * Participate in code reviews, testing, debugging, and troubleshooting * Continuously integrate changes into the existing product and collaborate closely with the client's developers and architects
Requirements
* Strong commercial experience with C++, including mature or legacy C++ codebases * Advanced knowledge of low-level programming, including pointers, pointer arithmetic, manual memory management, bounds checking, and memory safety * Proven experience identifying and remediating native-code vulnerabilities such as buffer overflows, memory corruption issues, and unsafe input handling * Practical experience working with multithreaded applications and thread-safe development approaches * Strong understanding of object-oriented programming principles and software design concepts * Familiarity with Qt or other desktop UI frameworks is an advantage * Experience developing Windows or Windows Server-based enterprise applications is an advantage * Good knowledge of SQL and secure database interaction principles; Oracle Database experience is a plus * Exposure to ISAM or other legacy data-storage technologies is beneficial * Well-developed debugging, troubleshooting, and analytical problem-solving skills * Experience with secure software development and remediation of documented security findings is strongly preferred * Proficiency in close collaboration with architects, QA engineers, security experts, and existing product developers
Originally posted on Himalayas