Job Description & Details
This is a hands-on remediation gig focused entirely on clearing out a mountain of security vulnerabilities on a high-exposure IAM platform. You won't be building greenfield features here; instead, you'll be diving straight into existing codebases to fix real-world security gaps that could leave the front door wide open if left unaddressed.
What You'll Actually Be Doing
Your day-to-day will involve drowning in security scan reports, verifying if those alerts are actual threats or just noisy false positives, and then rolling up your sleeves to write code that patches them. You'll work across a diverse stack touching Java, .NET, Angular, and React, meaning you need to be comfortable jumping between frontend and backend codebases. The real trick here is efficiency—you'll need to group related vulnerabilities together so you can fix multiple security holes with minimal code disruption without breaking the underlying IAM workflows.
The Core Tech Stack
Java is your primary weapon here, heavily paired with a strong foundation in vulnerability management and security analysis. Because this role touches a broader tech stack that includes .NET, Angular, and React, you can't just be a siloed backend developer; you need to understand how data flows from the UI down to the enterprise services. The hiring managers need someone who doesn't just blindly follow a scanner report, but actually reads the vulnerability details, comprehends the underlying security flaw, and writes robust code fixes in enterprise-grade languages.
Interview Expectations
Expect the interviewers to drop a hypothetical CVE or a messy security vulnerability scenario in front of you and ask you to trace the flaw through an enterprise web stack. They want to see if your debugging process is methodical and whether you can instantly pinpoint how unvalidated inputs or poor session management manifest in modern Java or .NET applications. They are secretly testing your defensive mindset—they don't just want to hear that you can write code; they want to know that you constantly think about how an attacker might abuse that code.
Application Advice
To get past the ATS for this role, your resume needs to put security remediation front and center rather than just listing general software development. Make sure explicit keywords like "Vulnerability Management", "Static Analysis", "IAM Security", and "Java Remediation" are woven naturally into your experience bullets. Highlight specific instances where you dealt with security findings from tools like Veracode, Checkmarx, or SonarQube, and emphasize how you optimized code changes to slash remediation times without breaking production.