Description

You will secure and remediate vulnerabilities in Java and Node.js applications.

This role is hybrid.

Responsibilities

• Analyze and fix vulnerabilities detected via SAST, DAST, and dependency analysis tools.
• Refactor code to mitigate risks like SQL Injection, XXE, deserialization attacks, XSS, CSRF, and authentication flaws.
• Patch and upgrade vulnerable third-party libraries and dependencies using Maven or Gradle.
• Collaborate with InfoSec and DevOps to validate and re-test remediation efforts.
• Enhance Spring Boot, REST API, Node.js, and microservices security configurations.

Required Skills

• Strong proficiency in Core Java, Spring Boot, and Node.js.
• Experience with REST API development and microservices architecture.
• Solid understanding of secure coding principles and application security fundamentals.
• Hands-on experience remediating vulnerabilities identified by automated scanning tools (SAST).
• Familiarity with dependency management and patching libraries using Maven or Gradle.
• Hands-on experience with JWT/OAuth2, input validation, and encryption techniques.
• Working knowledge of Docker and Kubernetes.
• Experience in secure code reviews and vulnerability management.

Preferred Skills

• DAST tool experience.
• Deserialization attack mitigation expertise.

Key Skills

Education

Any Graduate