Triage and remediate critical and high CVEs in Java dependency chains across 30+ microservices
Perform root-cause analysis for security bugs; implement well-tested, minimal-footprint fixes
Identify and harden vulnerable code paths: injection points, broken authentication, dependency hygiene, secrets handling
Upgrade third-party libraries across Maven multi-module projects while preserving functional correctness
Review security-sensitive changes in collaboration with the tech lead and service owners
Document suppression rationale for CVEs that cannot be immediately remediated; maintain the suppression registry
Contribute to security incident post-mortems and capture learnings as reusable patterns

3+ years Java (17+), Maven dependency management in multi-module projects
Experience resolving transitive dependency conflicts: mediation rules, exclusions, BOMs
Ability to read CVE advisories and assess actual exploitability in context — not just CVSS score
Practical understanding of OWASP Top 10 applied to Java backend services
Comfortable working across many codebases with varying configurations (client-specific solution forks differ significantly from the product standard)
GitLab CI/CD basics: reading pipelines, understanding scan job output, acting on findings
Bonus: JAX-RS/Jersey or Quarkus familiarity, JPA/Hibernate upgrade experience, container security basics, SAST tooling (SonarQube, SpotBugs) or GitLab Dependency Scanning

Great creative freedom and a variety of opportunities for further development in a very trusting and appreciative environment
The choice between different work models (office or hybrid) with flexible working hours, a working time account, overtime regulations and modern and ergonomically equipped workstations
State-of-the-art collaboration tools for efficient hybrid working (e. g., Stackoverflow for Teams)
A family-friendly and relaxed atmosphere where ideas are created together with the best colleagues on earth!
Unlimited employment contracts
Company pension plan
Bonus payments
Future leadership program
Development budgets and LinkedIn Learning
Sports events
Childcare support
Cafeteria
Health campaigns
Bring your dogs to work
Sufficient and free parking spaces
Bicycle leasing
IT hardware leasing
Tire changing service
Company and sports events
Team excursions and team challenges
Parcel service
Drinks, fresh fruit and vegetables, cookies and much more

Backend CVE Remediation Engineer – external

Key skills