Key skills
JavaUnit TestingAzureAzure DevOpsAgileSDLCProject Management
About this role
Prominent is a Fortune 250 Financial Services and Payments organization seeking a Software Development Engineer to join its Security Remediation Team. This role focuses on identifying, analyzing, and remediating application security vulnerabilities while collaborating with development and security teams to enhance the security posture of enterprise applications.
Responsibilities:
- Execute and manage application security scans using:
- Sonatype
- Fortify
- WebInspect
- Analyze scan results and identify security vulnerabilities and code deficiencies
- Perform code remediation activities and validate fixes
- Partner with development teams to troubleshoot, resolve, and prevent application security issues
- Work closely with security teams to communicate vulnerability status, remediation plans, and resolution progress
- Create, update, and manage remediation tickets within Azure DevOps (ADO) or similar Agile work management tools
- Support multiple applications through recurring vulnerability assessments and remediation cycles
- Assist development teams with secure coding best practices and vulnerability resolution
- Participate in software development activities, including coding, debugging, and unit testing
- Support existing applications and contribute to new development initiatives as needed
- Lead technical efforts within assigned projects and assist with technical planning and execution
- Ensure adherence to organizational technology, security, and development standards
Requirements:
- Strong experience developing applications using Java
- Hands-on experience with application security scanning and remediation
- Experience with Security tools like: Sonatype, Fortify, WebInspect
- Experience reviewing scan findings and implementing security-related code fixes
- Experience working with Azure DevOps (ADO) or other Agile ticketing/project management platforms
- Strong understanding of secure coding principles and software development lifecycle (SDLC) practices
- Ability to communicate technical findings to both development and security stakeholders
- Experience performing unit testing and application troubleshooting