> Markdown version of [/jobs/ext/2642167-software-developer-java-platform-security-remediation-engineer](https://www.wearedevelopers.com/jobs/ext/2642167-software-developer-java-platform-security-remediation-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Software Developer Java Platform & Security Remediation Engineer - **Company:** Vich, Lisa - **Location:** Cedar Rapids, IA, United States - **Experience:** Expert - **Contract:** Temporary contract - **Skills:** Java (Programming Language), Artificial Intelligence, Amazon Web Services, Cloud Computing, Continuous Integration, DevOps, Elasticsearch, Github, Identity and Access Management, Python (Programming Language), Apache Maven, Node.Js, Systems Development Life Cycle, Apache Camel, ReactJS, Large Language Models, Spring-boot, Git, AngularJS, Npm(Software), NestJS, Terraform, Docker, Jenkins, Microservices - **Published:** August 31, 2026 - **Apply:** https://www.dice.com/job-detail/80562c8b-7b6f-4175-8009-762451970c4e ## About the Role Relevant Experience* 7 - 10 Years Have played a lead role and have deep technical understanding Mandatory skills* Java, Springboot, Angular, NodeJS, AWS Desired skills* AI , Python, Primary (Must-Have) * Java 17/21 * Maven * Spring / Spring Boot * GitHub * Jenkins pipelines Secondary * Python 3.x * pip / requirements.txt / Poetry * React * Node.js / NPM Cloud & Infrastructure * AWS (ECS, Lambda, IAM) * Docker * Terraform * Git AI & Automation * AI-assisted coding (AWS Kiro or similar) * Familiarity with LLM-driven workflows * Automation mindset Security & Compliance * SCA tools (Mythos, Snyk, or similar) * Vulnerability lifecycle management * CVSS scoring & risk assessment * Compliance awareness, * Strong experience with SDLC, DevOps, and CI/CD pipelines * Experience managing upgrades at scale across 10+ microservices * Familiarity with Apache Camel or integration-heavy Spring services * Background in financial services / insurance (regulated environment) * Experience with OpenSearch or Elasticsearch library upgrades * Comfort with NestJS/Node.js (some platform tooling uses this) ## Description We're hiring a developer to proactively remediate vulnerabilities across our Java/Spring Boot platform services on a twice-per-week cadence. This isn't firefighting - it's disciplined, recurring upgrade work that keeps our platform ahead of security findings before they become blockers. You'll work primarily in Java/Spring Boot codebases but will also touch Python services that live within the same platform ecosystem. You'll leverage AI-assisted tooling and CI/CD pipelines to accelerate the remediation cycle., * Remediate library vulnerabilities across platform services on a twice-weekly cycle * Upgrade and manage dependencies (Maven BOMs, parent POMs, transitive dependencies) * Analyze Mythos and Snyk findings, assess severity/impact, and apply fixes * Validate upgrades don't introduce regressions (build, test, deploy) * Maintain compatibility across shared libraries consumed by multiple services * Work with AI-assisted remediation tooling to accelerate upgrade workflows * Coordinate with security and release teams on vulnerability SLAs * Occasionally remediate Python dependencies (pip/requirements.txt) in platform services ## Related Videos - [Navigating the Corporate Jungle: Life as a Developer in a large Company](https://www.wearedevelopers.com/videos/621-navigating-the-corporate-jungle-life-as-a-developer-in-a-large-company) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Nest.js - TypeScript in the backend can also be clean](https://www.wearedevelopers.com/videos/1033-nest-js-typescript-in-the-backend-can-also-be-clean) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) - [Streaming AI Responses in Real-Time with SSE in Next.js & NestJS](https://www.wearedevelopers.com/videos/1630-streaming-ai-responses-in-real-time-with-sse-in-next-js-nestjs) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)