ONLY W2 AVAILABLE :: Java Lead with Vulnerability Remediation experience

Title: Java Lead with Vulnerability Remediation experience Location: Cedar Rapids,IA(Hybrid mode Onsite)Job Type: ContractMandatory Experience and Skills7 – 10 Years Have played a lead role and have deep technical understandingJava, Springboot, Angular, NodeJS, AWSAbout the RoleWe're hiring a developer to proactively remediate vulnerabilities across our Java/Spring Boot platform services on a twice-per-week cadence. This isn't firefighting — it's disciplined, recurring upgrade work that keeps our platform ahead of security findings before they become blockers. You'll work primarily in Java/Spring Boot codebases but will also touch Python services that live within the same platform ecosystem. You'll leverage AI-assisted tooling and CI/CD pipelines to accelerate the remediation cycle.What You'll Do• Remediate library vulnerabilities across platform services on a twice-weekly cycle• Upgrade and manage dependencies (Maven BOMs, parent POMs, transitive dependencies)• Analyze Mythos and Snyk findings, assess severity/impact, and apply fixes• Validate upgrades don't introduce regressions (build, test, deploy)• Maintain compatibility across shared libraries consumed by multiple services• Work with AI-assisted remediation tooling to accelerate upgrade workflows• Coordinate with security and release teams on vulnerability SLAs• Occasionally remediate Python dependencies (pip/requirements.txt) in platform servicesRequired SkillsPrimary (Must-Have)• Java 17/21• Maven• Spring / Spring Boot• GitHub• Jenkins pipelinesSecondary• Python 3.x• pip / requirements.txt / Poetry• React• Node.js / NPMCloud & Infrastructure• AWS (ECS, Lambda, IAM)• Docker• Terraform• GitAI & Automation• AI-assisted coding (AWS Kiro or similar)• Familiarity with LLM-driven workflows• Automation mindsetSecurity & Compliance• SCA tools (Mythos, Snyk, or similar)• Vulnerability lifecycle management• CVSS scoring & risk assessment• Compliance awarenessNice to Have• Strong experience with SDLC, DevOps, and CI/CD pipelines• Experience managing upgrades at scale across 10+ microservices• Familiarity with Apache Camel or integration-heavy Spring services• Background in financial services / insurance (regulated environment)• Experience with OpenSearch or Elasticsearch library upgrades• Comfort with NestJS/Node.js (some platform tooling uses this)ThanksAatmeshaatmesh.singh@ampstek.com