JavaScript Full-Stack Developer

We are seeking a JavaScript Full-Stack Developer to contribute to feature and maintenance work across the explorer platform and live events product within the Exploration Pod. In this role, you will support API security hardening, dependency vulnerability remediation, and feature delivery across two products that share a common Next.js + NestJS + CMS architecture, working under the guidance of senior engineers. The ideal candidate is a capable TypeScript engineer who is comfortable working across multiple products and understands the importance of security and reliability alongside feature delivery. Responsibilities Deliver feature work and bug fixes across the explorer platform and live events product Support the maintenance and extension of NestJS API services, including data access layers and external service integrations Contribute to CMS schema work and content model maintenance shared across both products Help implement rate limiting on the live events API to address identified DDoS risk Assist with hardening webhook endpoints using HMAC authentication across both products Participate in triaging and remediating the 1000+ dependency vulnerabilities identified in the live events product Apply dead-letter queue and retry patterns to Lambda workers and async processors with guidance from senior engineers Write and maintain unit, integration, and E2E tests to meet coverage gate targets Participate in code reviews and follow engineering standards within the pod Collaborate with the Integration Engineer on fan-out write patterns and Kafka consumer reliability Work with the Business Analyst to clarify stories before sprint planning Requirements 2+ years of experience as a JavaScript Full-Stack Developer Solid working knowledge of TypeScript, Next.js (App Router + Pages Router), and NestJS Hands-on experience with Sanity Studio v5, Algolia, and Cloudinary Practical experience with AWS ECS, Lambda, and SQS Working knowledge of Confluent Kafka, PostgreSQL, and Terraform Understanding of API security measures such as rate limiting and HMAC authentication for webhook endpoints Exposure to dependency vulnerability triage and remediation Basic understanding of dead-letter queue and retry patterns for async processors and Lambda workers Experience writing unit, integration, and E2E tests to meet coverage targets Ability to work across multiple products in a shared architecture Experience using AI coding assistants for day-to-day feature development, security fix implementation, and dependency vulnerability triage Willingness to use AI tools to help with large-scale dependency remediation through automated upgrade scripts, breaking change analysis, and regression identification English proficiency at an Intermediate level (B1) or higher Nice to have Interest in AI-assisted code review using LLM-based tools to catch security and quality issues before human review Exposure to fan-out write patterns and Kafka consumer reliability Experience collaborating with Business Analysts to clarify stories before sprint planning We offer International projects with top brands Work with global teams of highly skilled, diverse peers Healthcare benefits Employee financial programs Paid time off and sick leave Upskilling, reskilling and certification courses Unlimited access to the LinkedIn Learning library and 22,000+ courses Global career opportunities Volunteer and community involvement opportunities EPAM Employee Groups Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.