Java Developer IV

Java Developer Contractor This position for onboarding an experienced Java Developer contractor dedicated to security initiatives. Responsibilities include: Assisting, implementing, and supporting Cybersecurity and Digital Risk program initiatives related to applications within the portfolio. Protecting systems, data, technologies, and the airline by implementing and embedding Cybersecurity in the full development lifecycle. Providing ongoing support and completion of daily tasks for cybersecurity programs such as incident response, application cybersecurity, vulnerability management and remediation, cloud and infrastructure cybersecurity, data protection and privacy, and risk management and compliance. Supporting and conducting cybersecurity threat assessments. Collaborating with digital technology, business teams, and external partners to build relationships supporting accountabilities and ensure consistency, adaptability, responsiveness, and effectiveness of security solutions. Measuring and communicating progress for the overall Cybersecurity health of applications in scope. Communicating information with dependent teams and resources. Skilled software engineer to design, develop, document, debug, and test secure software applications. Review and implement security best practices and industry standards, conducting security analysis, review and resolve security vulnerabilities and mitigate risks. Collaborate with other internal and external partners and entities to measure and evaluate cyber security threat assessments. Provide support and mentorship to other members of the team. Responsibilities: Articulate, plan, implement, test, and operate advanced software security techniques and best practices in compliance with technical reference architecture. Perform on-going security testing and code review to improve software security. Troubleshoot and debug issues that arise. Provide engineering designs for new software solutions to help mitigate security vulnerabilities. Contribute to all levels of the architecture from security aspects. Maintain technical documentation. Respond to security related incidents. Measure and communicate progress for overall Cybersecurity health of applications in scope. Support and mentor team members on secure coding practices. Requirements and skills: Proven work experience as a software security engineer. Detailed technical knowledge of techniques, standards, and state-of-the-art capabilities for security vulnerabilities and remediation. Minimum 5 years of hands-on experience with Java, Spring Boot. Minimum 2 years of hands-on experience with foundational AWS Services (such as, EC2, S3, RDS, VPC, CloudTrail, CloudFront, Lambda, EKS, and/or ECS). In-depth knowledge of various web-related technologies (such as Web applications, services, architectures etc.). Experience with analytic tools such as ELK Stack, Google Analytics, or AppD. Experience working with high performance teams in an agile development environment where continuous integration and continuous delivery (CI/CD) are critical. Experience with secure software development life cycle framework. Experience with security principles. Demonstrate knowledge of software engineering best practices such as version control, software packaging and software release management. Must be self-motivated, possess strong communication skills (verbal and written) and be able to work in a team-oriented environment. Strong analytical and problem-solving skills; attention to detail. Samprasoft