Description

You will own the secure development and vulnerability remediation lifecycle for applications.

This role is hybrid.

Responsibilities

• Analyze, triage, and remediate vulnerabilities identified by SAST, DAST, and SCA tools.
• Refactor insecure Java and Node.js codebases to mitigate flaws like SQL Injection, XXE, and CSRF.
• Patch and upgrade vulnerable third-party dependencies, validating fixes post-remediation.
• Automate vulnerability remediation and validation within CI/CD pipelines.
• Perform secure code reviews and guide teams on secure coding best practices.

Required Skills

• 10+ years of experience in software development.
• Strong hands-on experience with Core Java, Spring Boot, Tomcat, and REST API development.
• Proficiency in secure coding principles and application vulnerability remediation.
• Familiarity in Node.js security configurations and remediation techniques.
• Experience remediating issues identified by tools like Veracode, Checkmarx, SonarQube, or Snyk.
• Knowledge of dependency management and patching using Maven or Gradle.
• Experience with OAuth2/JWT, input validation, and secure session management.
• Working knowledge of AWS services including Elastic Beanstalk, Lambda, API Gateway, and CloudFront.
• Understanding of Docker, Kubernetes, and security in cloud-native applications.

Preferred Skills

• Experience automating security checks within CI/CD workflows.
• Background in cloud-native application security patterns.

Key Skills

Education

Any Graduate