At a Glance
- Tasks: Conduct a security audit and refactor code for our innovative AI education platform.
- Company: Join a dynamic startup focused on gamified learning experiences.
- Benefits: Flexible hours, competitive pay, and the chance to work with cutting-edge tech.
- Why this job: Make a real impact on a live platform while enhancing your skills in security and development.
- Qualifications: Strong experience with TypeScript, React, and Supabase is essential.
- Other info: Work in an async-first environment with opportunities for growth and learning.
The predicted salary is between 36000 - 60000 £ per year.
We're looking for an experienced developer to perform a security audit and code refactoring on our live AI education SaaS platform (gamified, Duolingo-style).
Tech Stack:
- 14 (App Router) + TypeScript
- Supabase (Auth, PostgreSQL, RLS)
- Prisma ORM
- Tailwind CSS + shadcn/ui
- Vercel deployment
- OpenAI API integration
- Lemon Squeezy (payments/webhooks)
Scope of Work (Phased):
- Phase 1 – Security Sprint (Priority):
- Comprehensive security audit of 45+ API endpoints
- Implement rate limiting across all routes
- Input validation & sanitization
- CORS/CSP policy implementation
- Environment variable safety checks
- Fix TypeScript type safety issues (25 any types)
- Clean up 148 statements, integrate logger
- Performance optimization (bundle size reduction, lazy loading)
- Component architecture improvements
- API route standardization
About the Platform:
- 48 pages, beta stage, live at production URL
- 4-language internationalization (TR, EN, DE, ES)
- Features: AI Tutor, puzzle-based learning, ELO rating system, streak/XP gamification
- Existing bug report with 18 documented issues available
Ideal Candidate:
- Strong 14 App Router experience (not just Pages Router)
- Supabase experience (Auth, RLS policies, Edge Functions)
- TypeScript-first mindset
- Experience with security hardening for SaaS apps
- Bonus: Prisma ORM, AI/OpenAI integration experience
How We Work:
- Solo founder, async-first communication
- Git branching with PR reviews required
- Detailed bug reports and project documentation ready to share
- Starting with a paid 5-10 hour test sprint before committing to full scope
Timeline: 4-6 weeks for Phase 1+2
Availability: Minimum 15 hours/week
Contract duration: 1 to 3 months, with 30 hours per week.
Mandatory skills: TypeScript, React, Supabase, Prisma
Senior 14 Developer for Security Audit employer: FreelanceJobs
Contact Detail:
FreelanceJobs Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Senior 14 Developer for Security Audit
✨Tip Number 1
Network like a pro! Reach out to your connections in the tech world, especially those who work with TypeScript or security audits. A friendly chat can lead to opportunities that aren’t even advertised yet.
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your previous projects, especially any related to security or SaaS platforms. This gives potential employers a taste of what you can bring to the table.
✨Tip Number 3
Prepare for interviews by brushing up on common security audit questions and coding challenges. We recommend doing mock interviews with friends or using online platforms to get comfortable.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, we love seeing candidates who take that extra step!
We think you need these skills to ace Senior 14 Developer for Security Audit
Some tips for your application 🫡
Tailor Your Application: Make sure to customise your application to highlight your experience with the tech stack mentioned in the job description. We want to see how your skills align with our needs, so don’t hold back on showcasing your expertise in TypeScript and Supabase!
Showcase Relevant Experience: When detailing your past projects, focus on those that involved security audits or code refactoring. We’re keen to see examples of your work that demonstrate your ability to enhance security and optimise performance in SaaS applications.
Be Clear and Concise: Keep your application straightforward and to the point. We appreciate clarity, so avoid jargon and ensure your key achievements stand out. This helps us quickly grasp your qualifications and fit for the role.
Apply Through Our Website: Don’t forget to submit your application through our website! It’s the best way for us to receive your details and ensures you’re considered for the position. Plus, it makes the whole process smoother for everyone involved.
How to prepare for a job interview at FreelanceJobs
✨Know Your Tech Stack Inside Out
Make sure you’re well-versed in the tech stack mentioned in the job description. Brush up on your TypeScript, Supabase, and security practices. Being able to discuss specific features or challenges related to these technologies will show that you’re not just familiar but truly knowledgeable.
✨Prepare for Security Scenarios
Since the role focuses heavily on security audits, think of past experiences where you’ve implemented security measures. Be ready to discuss how you approached rate limiting, input validation, and CORS policies. Real-world examples will demonstrate your expertise and problem-solving skills.
✨Showcase Your Code Quality Mindset
The job requires a strong focus on code quality and performance optimisation. Prepare to talk about your experience with TypeScript type safety and any refactoring projects you've undertaken. Highlight how you’ve improved code architecture and standardised API routes in previous roles.
✨Ask Insightful Questions
Interviews are a two-way street! Prepare thoughtful questions about the company’s current challenges, especially regarding their live AI education platform. This shows your genuine interest in the role and helps you gauge if it’s the right fit for you.