Description

You will own the process of strengthening application security posture through intelligent automation and vulnerability remediation across Java and Node.js applications.

This role is on-site.

Responsibilities

• Analyze, triage, and remediate vulnerabilities identified via SAST, DAST, and software composition analysis tools.
• Refactor insecure Java and Node.js codebases to mitigate vulnerabilities like SQL Injection, XXE, XSS, CSRF, Deserialization, and Authentication flaws.
• Automate vulnerability remediation and validation within CI/CD pipelines, leveraging Generative AI tools like AWS Bedrock.
• Perform secure code reviews, guide remediation, and enforce secure coding best practices across development teams.
• Patch and upgrade vulnerable third-party dependencies using Maven/Gradle, and validate remediation effectiveness.

Required Skills

• 10+ years of hands-on experience with Core Java, Spring Boot, Tomcat, and REST API development.
• Proficiency in secure coding principles and application vulnerability remediation.
• Experience remediating issues identified by tools like Veracode, Checkmarx, SonarQube, or Snyk.
• Knowledge of dependency management and patching practices using Maven or Gradle.
• Familiarity with Node.js security configurations and remediation techniques.
• Experience with OAuth2/JWT, input validation, encryption, and secure session management.
• Understanding of Docker, Kubernetes, and security considerations in cloud-native applications.
• Strong analytical, debugging, and problem-solving skills.

Preferred Skills

• Experience leveraging Generative AI tools like AWS Bedrock for automation.
• Deep knowledge of XXE and XSS remediation patterns.

Key Skills

Education

Any Graduate