Platform Engineer

We’re hiring a developer to proactively remediate vulnerabilities across our Java/Spring Boot platform services on a twice-per-week cadence. This isn’t firefighting-it’s disciplined, recurring upgrade work that keeps our platform ahead of security findings before they become blockers. You’ll work primarily in Java/Spring Boot codebases but will also touch Python services within the same platform ecosystem. You’ll leverage AI-assisted tooling and CI/CD pipelines to accelerate the remediation cycle. What You’ll Do

• Remediate library vulnerabilities across platform services on a twice-weekly cycle.
• Upgrade and manage dependencies, including Maven BOMs, parent POMs, and transitive dependencies.
• Analyze Mythos and Snyk findings, assess severity and impact, and apply fixes.
• Validate that upgrades don’t introduce regressions through build, test, and deployment processes.
• Maintain compatibility across shared libraries consumed by multiple services.
• Work with AI-assisted remediation tooling to accelerate upgrade workflows.
• Coordinate with security and release teams on vulnerability SLAs.
• Occasionally remediate Python dependencies using pip and requirements.txt in platform services.

Primary (Must-Have)

• Java 17/21
• Maven
• Spring / Spring Boot
• GitHub
• Jenkins pipelines

Secondary

• Python 3.x
• pip / requirements.txt / Poetry
• React
• Node.js / NPM

Cloud & Infrastructure

• AWS (ECS, Lambda, IAM)
• Docker
• Terraform
• Git

AI & Automation

• AI-assisted coding tools (AWS Kiro or similar)
• Familiarity with LLM-driven workflows
• Automation mindset

Security & Compliance

• Software Composition Analysis (SCA) tools such as Mythos, Snyk, or similar
• Vulnerability lifecycle management
• CVSS scoring and risk assessment
• Compliance awareness

Nice to Have

• Strong experience with SDLC, DevOps, and CI/CD pipelines
• Experience managing upgrades at scale across 10+ microservices
• Familiarity with Apache Camel or integration-heavy Spring services
• Background in financial services or insurance, particularly in regulated environments
• Experience with OpenSearch or Elasticsearch library upgrades
• Familiarity with NestJS/Node.js, as some platform tooling uses these technologies3