Description

You will own the process of strengthening application security posture through intelligent automation and vulnerability remediation across Java and Node.js applications.

Responsibilities

• Analyze, triage, and remediate vulnerabilities identified via SAST, DAST, and software composition analysis tools (SonarQube, Veracode, Snyk, Checkmarx).
• Refactor insecure Java and Node.js codebases to mitigate vulnerabilities like SQL Injection, XXE, XSs, CSRF, Deserialization, and Authentication flaws.
• Patch and upgrade vulnerable third-party dependencies using Maven/Gradle, and validate remediation effectiveness.
• Automate vulnerability remediation and validation within CI/CD pipelines, leveraging Generative AI tools like AWS Bedrock.
• Perform secure code reviews, guide remediation, and enforce secure coding best practices across development teams.

Required Skills

• 10+ years of hands-on experience with Core Java, Spring Boot, Tomcat, and REST API development.
• Proficiency in secure coding principles and application vulnerability remediation.
• Experience remediating issues identified by tools like Veracode, Checkmarx, SonarQube, or Snyk.
• Knowledge of dependency management and patching practices using Maven or Gradle.
• Familiarity with Node.js security configurations and remediation techniques.
• Experience with OAuth2/JWT, input validation, encryption, and secure session management.
• Understanding of Docker, Kubernetes, and security considerations in cloud-native applications.
• Strong analytical, debugging, and problem-solving skills.
• Experience with Java, Node.js, Xxe, Xss, Aws, Ci/cd Pipelines, Spring Boot, Rest Api.

Key Skills

Education

Any Graduate