Description

You will analyze, fix, and validate vulnerabilities across Java-based and Node.js applications.

Responsibilities

• Analyze and fix vulnerabilities detected via SAST, DAST, and dependency analysis tools (e.g., SonarQube, VeraCode).
• Refactor code to mitigate risks including SQL Injection, XXE, deserialization attacks, XSS, CSRF, and authentication flaws.
• Patch and upgrade vulnerable third-party libraries and dependencies using Maven or Gradle.
• Collaborate with InfoSec and DevOps to validate and re-test remediation efforts.
• Perform secure code reviews and enhance Spring Boot, REST API, Node.js, and microservices security configurations.

Required Skills

• 5+ years of experience in software development.
• Strong proficiency in Core Java, Spring Boot, Node.js, and REST API development.
• Solid understanding of secure coding principles and application security fundamentals.
• Experience remediating vulnerabilities identified by automated scanning tools.
• Familiarity with dependency management and patching libraries using Maven or Gradle.
• Hands-on experience with JWT/OAuth2, input validation, and encryption techniques.
• Working knowledge of Docker and Kubernetes or cloud security principles.
• Experience with secure REST API design.

Key Skills

Education

Any Graduate