We have a fully built grocery e-commerce platform ready for launch. The codebase is complete and functional — we need an experienced developer to review it before going live.
This is not a development role. Your job is to find bugs, security holes, and logic errors that could cause problems in production, then deliver a written report of what needs fixing.
In simple terms: We built the app. We need you to break it (on purpose) and tell us what's wrong before real customers use it.
About the Project:
• Grocery e-commerce platform serving the Jordanian market
• Backend built with FastAPI (Python), PostgreSQL, Redis, and Meilisearch
• Includes admin dashboard, customer mobile app, and full order management pipeline
• 40+ database tables, async architecture, warehouse-aware inventory
What You'll Do:
• Review the full backend codebase for bugs, security vulnerabilities, and logic errors
• Audit authentication and authorization flows (JWT-based)
• Test order placement, cart operations, and inventory management under concurrency
• Identify race conditions, data consistency risks, and edge cases
• Review database queries for SQL injection, performance issues, and correctness
• Review Redis usage (caching, sessions, cart storage) for data loss scenarios
• Deliver a written report with severity levels and recommended fixes
Requirements:
• 5+ years of backend development experience
• Strong experience with Python (FastAPI or similar async frameworks)
• Strong experience with PostgreSQL (raw SQL, not just ORM)
• Experience with Redis in production environments
• Solid understanding of web security (OWASP Top 10)
• Experience auditing or reviewing existing codebases
• E-commerce or fintech production experience is a strong plus
Contract Details:
• Duration: 1–2 months (flexible)
• Remote or on-site (Amman, Jordan)
• This is a review/audit engagement, not a rewrite
To apply, please share your السيرة الذاتية (CV) and a brief description of a past code audit or security review you've conducted.