Application Vulnerability Developer

Job Title:

Experience Required:

Java Engineer

Key Responsibilities:

• Develop, test, and maintain scalable Java applications (Spring Boot, Hibernate, REST APIs).
• Perform

  secure code reviews

  and implement best practices for secure coding.
• Identify, triage, and remediate vulnerabilities reported by tools (e.g., SonarQube, Fortify, Veracode, OWASP ZAP).
• Collaborate with security teams to address findings from penetration tests and audits.
• Integrate

  security scanning tools

  into CI/CD pipelines for continuous monitoring.
• Apply

  patches and upgrades

  to frameworks, libraries, and dependencies to mitigate risks (e.g., CVEs).
• Document remediation steps and provide guidance to developers on secure coding standards.

Qualifications:

• Strong proficiency in

  Java SE/EE

  and frameworks (Spring, Hibernate, JPA).
• Experience with

  application security

  concepts: authentication, authorization, encryption, input validation.
• Hands-on experience with

  static and dynamic analysis tools

  (SAST/DAST).
• Familiarity with

  dependency management

  and vulnerability scanning (Maven, Gradle, Snyk).
• Knowledge of

  secure software development lifecycle (SSDLC)

  .
• Understanding of

  common vulnerabilities

  (SQL injection, XSS, CSRF, insecure deserialization).
• Strong problem-solving and debugging skills.