Java Software Engineer - Maintenance & Security Fixes

A company is looking for a Freelance Java Software Engineer to support ongoing maintenance, security remediation, and bug fixing across multiple existing applications.

The role is primarily focused on analyzing security scan results, fixing vulnerabilities, updating outdated components, and ensuring build pipelines and Docker images remain compliant and secure.

This is a hands-on maintenance and remediation role, not feature development.

The mission is urgent and requires someone comfortable working on existing Java-based environments, refactoring code, and implementing sustainable fixes.

Responsibilities

• Analyze vulnerabilities reported by:

• Penetration tests

• Security scanners

• Dependency scanners (GitHub / build pipelines)

Fix security issues in existing Java applications

Perform bug fixing and corrective maintenance

Refactor code to address security findings

Update outdated dependencies and libraries

Replace or update outdated Docker images

Modify build configurations to comply with security standards

Apply secure coding practices and improve code quality

Ensure applications pass vulnerability scans (move from red to green)

Implement long-term fixes to prevent recurring issues

Investigate root causes and propose improvements

Maintain and update technical documentation when needed

Technical Environment

• Java (main environment)
• Spring / Spring Boot (existing applications)
• Docker (image updates & maintenance)
• CI/CD pipelines (build chain remediation)
• Dependency management (Maven / Gradle)
• GitHub security scanning
• Security scan tools (SAST / dependency scanning)
• REST APIs & backend services
• Legacy code maintenance

• Strong experience in Java backend development
• Proven experience in maintenance / bug fixing roles
• Comfortable working on existing or legacy codebases
• Experience fixing security vulnerabilities
• Experience updating dependencies and frameworks
• Experience working with Docker images
• Good understanding of build pipelines
• Ability to refactor safely in production environments
• Autonomous and solution-oriented
• Comfortable investigating issues across multiple applications

Nice to Have

• Experience with OWASP guidelines
• Experience handling penetration test remediation
• Experience with dependency vulnerability management
• Experience improving CI/CD security
• Experience with container security best practices