Security Remediation & Technical Debt Automation

Job Role: Security Remediation & Technical Debt Automation with Java Location: NJ or STL (Hybrid OR Remote) Employment Type: Contract About the Role We are seeking a highly skilled Java with expertise in application security remediation, technical debt reduction, and automated vulnerability fixes. This role involves identifying, triaging, and remediating security vulnerabilities across Java. You will also drive automated remediation workflows and work with Generative AI tools (e.g., AWS Bedrock) to accelerate secure coding and vulnerability fixes. This position requires collaboration with InfoSec, QA, DevOps, Architecture, and development teams to continuously improve our security posture. Key Responsibilities Vulnerability Remediation & Secure Coding • Analyze, triage, and remediate vulnerabilities identified through SAST, DAST, and SCA tools (SonarQube, Veracode, Checkmarx, Snyk, OWASP ZAP). • SQL Injection, XXE, XSS • CSRF, SSRF • Insecure Deserialization • Authentication & session management flaws • Path traversal or file upload vulnerabilities • Patch and upgrade vulnerable third-party dependencies (Maven, Gradle, npm, Bundler, Composer) and validate remediation results. • Harden and secure configurations across: • Spring Boot APIs • Ensure fixes do not impact app functionality by performing regression testing and user flow validation.