Java Developer - AWS Cloud
Developer Position We're hiring a developer to proactively remediate vulnerabilities across our Java/Spring Boot platform services on a twice-per-week cadence. This isn't firefighting — it's disciplined, recurring upgrade work that keeps our platform ahead of security findings before they become blockers. You'll work primarily in Java/Spring Boot codebases but will also touch Python services that live within the same platform ecosystem. You'll leverage AI-assisted tooling and CI/CD pipelines to accelerate the remediation cycle.
What You'll Do:
- Remediate library vulnerabilities across platform services on a twice-weekly cycle
- Upgrade and manage dependencies (Maven BOMs, parent POMs, transitive dependencies)
- Analyze Mythos and Snyk findings, assess severity/impact, and apply fixes
- Validate upgrades don't introduce regressions (build, test, deploy)
- Maintain compatibility across shared libraries consumed by multiple services
- Work with AI-assisted remediation tooling to accelerate upgrade workflows
- Coordinate with security and release teams on vulnerability SLAsOccasionally remediate Python dependencies (pip/requirements.txt) in platform services
Required Skills:
- Primary (Must-Have)
- Java 17/21 MavenSpring / Spring BootGitHubJenkins pipelines
- SecondaryPython 3.xpip / requirements.txt / PoetryReactNode.js / NPMCloud & InfrastructureAWS (ECS, Lambda, IAM)
Docker
TerraformGitAI & AutomationAI-assisted coding (AWS Kiro or similar)
Familiarity with LLM-driven workflows
Automation mindset
Security & ComplianceSCA tools (Mythos, Snyk, or similar)
Vulnerability lifecycle managementCVSS scoring & risk assessment
Compliance awareness
Nice to HaveStrong experience with SDLC, DevOps, and CI/CD pipelines
Experience managing upgrades at scale across 10+ microservices
Familiarity with Apache Camel or integration-heavy Spring services
Background in financial services / insurance (regulated environment)
Experience with OpenSearch or Elasticsearch library upgrades
Comfort with NestJS/Node.js (some platform tooling uses this)