Senior Java Developer

Job Description

Job Description

Job Title : Senior Java Developer
Location: San Antonio, TX – Onsite
Duration: 6 Months

• Advanced Java Concepts: 7+ Years
• Experience Required: 8+ Years
• Analyze security vulnerabilities identified through SAST, SCA, vulnerability scans, penetration testing, and security assessments.
• Perform root-cause analysis and determine the appropriate remediation approach for Java applications.
• Implement secure code fixes for application-level vulnerabilities while minimizing functional regression.
• Remediate vulnerabilities associated with Java libraries, open-source components, frameworks, and third-party dependencies.
• Upgrade vulnerable libraries and frameworks to appropriate supported versions and resolve compatibility issues resulting from upgrades.
• Remediate common security weaknesses involving injection, authentication, authorization, sensitive-data exposure, insecure configurations, API security, and cryptography.
• Review CVE findings and assess their applicability to the application's implementation.
• Refactor legacy Java code where necessary to eliminate security weaknesses and improve maintainability.
• Ensure implementation follows established secure coding standards and security requirements.
• Perform unit and regression testing of vulnerability remediation changes.
• Work with QA teams to ensure security fixes do not introduce application regressions.
• Support rescanning and validation activities to confirm that identified vulnerabilities have been successfully remediated.
• Investigate vulnerabilities that cannot be immediately remediated and provide technical inputs for risk assessment and mitigation planning.
• Conduct secure code reviews and provide remediation guidance to development teams.
• Collaborate with cybersecurity, application security, architecture, DevOps, infrastructure, and production support teams.
• Participate in vulnerability triage meetings and provide technical updates on remediation progress, dependencies, and blockers.
• Maintain appropriate technical documentation covering vulnerability analysis, code changes, testing, and remediation evidence.
• Support integration of security checks into CI/CD pipelines to identify vulnerabilities earlier in the development lifecycle.

• Java Full Stack
• Spring Framework
• Spring Boot
• REST APIs and Microservices
• Spring Security
• PA/Hibernate
• Maven and Gradle
• JUnit
• Mockito and Automated Unit Testing
• Git-based Source Control and Branching Practices

• Java Full Stack
• Spring Framework
• Spring Boot
• REST APIs and Microservices
• Spring Security
• PA/Hibernate
• Maven and Gradle
• JUnit
• Mockito and Automated Unit Testing
• Git-based Source Control and Branching Practices