Java Software Engineer

This is not a traditional feature-development or reactive security role. The primary focus is disciplined, recurring vulnerability remediation and dependency modernization across enterprise platform services. You'll work primarily within Java/Spring Boot environments, with occasional Python development, using security scanning, AI-assisted development tools, and CI/CD automation to keep applications secure and current.The ideal candidate combines strong Java engineering skills with DevOps, application security, dependency management, and automation experience.What You'll DoRemediate application and library vulnerabilities across platform services on a twice-weekly release cycle.Upgrade and manage Java dependencies, including Maven BOMs, parent POMs, and transitive dependencies.Analyze vulnerability findings from Mythos, Snyk, or comparable SCA tools.Assess vulnerability severity, impact, CVSS scores, and remediation requirements.Implement upgrades and security fixes while maintaining application stability.Validate changes through build, automated testing, deployment, and regression processes.Maintain compatibility across shared libraries consumed by multiple microservices.Partner with Security and Release teams to meet vulnerability-remediation SLAs.Use AI-assisted coding and remediation tools to accelerate dependency analysis and upgrade workflows.Support CI/CD pipelines and identify opportunities to automate repetitive remediation activities.Occasionally remediate Python dependencies using pip, requirements.txt, Poetry, or similar tooling.Required Technical SkillsJava & Application DevelopmentJava 17/21Spring / Spring BootMavenGitHubGitJenkins pipelinesCloud & DevOpsAWS, including familiarity with:ECSLambdaIAMDockerTerraformCI/CD pipelinesApplication SecuritySoftware Composition Analysis (SCA)Snyk, Mythos, or comparable vulnerability-management toolsDependency vulnerability remediationCVSS scoring and risk assessmentVulnerability lifecycle managementSecurity and compliance awarenessAI & AutomationExperience using AI-assisted development tools, such as AWS Kiro or comparable platforms.Familiarity with LLM-driven development workflows.Strong automation mindset and ability to identify repeatable engineering processes.Additional Technical ExperienceExperience with some of the following is beneficial:Python 3.xpip / requirements.txt / PoetryReactNode.js / NPMNestJSApache CamelOpenSearch / ElasticsearchPreferred QualificationsStrong understanding of the SDLC, DevOps, and CI/CD lifecycle.Experience managing dependency upgrades across 10+ microservices.Experience maintaining shared libraries across distributed application environments.Familiarity with integration-heavy Spring Boot services.Experience upgrading OpenSearch or Elasticsearch libraries.Background supporting financial services, insurance, or another regulated environment.