Technical Lead - Application Security Remediation (Java / Spring Boot / Angular)

• Lead application security remediation initiatives across multiple engineering teams.
• Analyze vulnerabilities and security findings from ArmorCode, Contrast Security, Snyk, SonarQube, and similar tools.
• Prioritize vulnerabilities based on severity, risk, and business impact.
• Track remediation activities and drive vulnerabilities to closure.
• Perform hands-on coding to implement security fixes in Java/Spring Boot and Angular applications.
• Conduct code reviews and recommend secure coding practices.
• Develop reusable security remediation patterns to reduce recurring vulnerabilities.
• Collaborate with Engineering, Architecture, Security, and DevOps teams.
• Lead and mentor a 3-5 member security remediation team.
• Monitor remediation progress and provide dashboards, status reports, and executive-level updates.
• Support security governance, change management, and continuous improvement initiatives.

10+ years of software engineering experience, Java Strong hands-on experience Spring Boot Strong hands-on experience Angular Strong hands-on experience JavaScript / TypeScript Strong hands-on experience REST APIs Required Microservices Required GitHub Required CI/CD Required OWASP Top 10 Strong understanding Secure SDLC Required DevSecOps Required SAST / DAST Required Vulnerability Management Required Security Tools ArmorCode, Contrast, Snyk, Veracode, Checkmarx, SonarQube or similar

Security & Governance

• Strong understanding of application security principles and secure software development.
• Experience identifying and remediating vulnerabilities throughout the SDLC.
• Understanding of SAST, DAST, code scanning, dependency vulnerabilities, and security findings.
• Experience with security governance and vulnerability tracking.
• Ability to work with development teams to implement sustainable security improvements.

Leadership & Soft Skills

• Strong technical leadership and mentoring capabilities.
• Experience leading a small technical/security remediation team.
• Excellent communication and stakeholder management skills.
• Ability to work with engineering, architecture, security, and business stakeholders.
• Strong problem-solving and analytical skills.
• Ability to provide clear technical and executive-level status reporting.

Preferred Background

• Experience in enterprise application security remediation.
• Experience working with Java/Spring Boot and Angular applications.
• Experience managing vulnerabilities across multiple applications or engineering teams.
• Healthcare/security governance experience is beneficial if applicable.