Java Developer - AWS Cloud
We're hiring a developer to proactively remediate vulnerabilities across our Java/Spring Boot platform services on a twice-per-week cadence. This isn't firefighting — it's disciplined, recurring upgrade work that keeps our platform ahead of security findings before they become blockers. You'll work primarily in Java/Spring Boot codebases but will also touch Python services that live within the same platform ecosystem. You'll leverage AI-assisted tooling and CI/CD pipelines to accelerate the remediation cycle.
What You'll Do:
- Remediate library vulnerabilities across platform services on a twice-weekly cycle
- Upgrade and manage dependencies (Maven BOMs, parent POMs, transitive dependencies)
- Analyze Mythos and Snyk findings, assess severity/impact, and apply fixes
- Validate upgrades don't introduce regressions (build, test, deploy)
- Maintain compatibility across shared libraries consumed by multiple services
- Work with AI-assisted remediation tooling to accelerate upgrade workflows
- Coordinate with security and release teams on vulnerability SLAsOccasionally remediate Python dependencies (pip/requirements.txt) in platform services
Required Skills:
Primary (Must-Have) Java 17/21 MavenSpring / Spring BootGitHubJenkins pipelines SecondaryPython 3.xpip / requirements.txt / PoetryReactNode.js / NPMCloud & InfrastructureAWS (ECS, Lambda, IAM) Docker TerraformGitAI & AutomationAI-assisted coding (AWS Kiro or similar) Familiarity with LLM-driven workflows Automation mindset Security & ComplianceSCA tools (Mythos, Snyk, or similar) Vulnerability lifecycle managementCVSS scoring & risk assessment Compliance awareness Nice to HaveStrong experience with SDLC, DevOps, and CI/CD pipelines Experience managing upgrades at scale across 10+ microservices Familiarity with Apache Camel or integration-heavy Spring services Background in financial services / insurance (regulated environment) Experience with OpenSearch or Elasticsearch library upgrades Comfort with NestJS/Node.js (some platform tooling uses this)