Application Developer (Security) / Software Engineer (Security)

Telecommunication is looking for a highly hands-on Application Security Developer to help remediate security vulnerabilities identified across its application codebase.

The environment generates a significant volume of security findings, potentially 100-200 tickets, and the person in this role will take ownership of reviewing those findings, identifying the vulnerable code, and making the necessary code-level fixes.

The ideal candidate is a strong software engineer who understands application security and can independently navigate an existing codebase, diagnose vulnerabilities, modify the code, test the remediation, and drive security tickets toward closure., * Review and triage application security vulnerability tickets.

• Investigate security findings and trace them back to the relevant application code.
• Perform hands-on code remediation to address identified vulnerabilities.
• Troubleshoot and fix issues involving Java, Node.js, React, and SQL-based applications.
• Remediate vulnerabilities such as SQL injection and other insecure coding patterns.
• Analyze existing code to determine the root cause of security findings.
• Validate fixes and ensure remediation does not introduce application regressions.
• Work through a high volume of vulnerability/security tickets and prioritize remediation based on severity and application impact.
• Partner with development and security teams to move vulnerabilities from identification through remediation and closure.
• Participate in code reviews with an emphasis on secure coding practices.
• Help reduce recurring vulnerabilities by identifying insecure coding patterns and recommending better development practices.

Software Development, Software Engineering, Applications Security, Security Software, Telecommunications, Budget Management, Applications Security, Computer Security, Software Development, Testing, * Strong professional software development / coding background.

• Hands-on development experience with:
• Java
• Node.js
• React
• SQL
• Experience identifying and fixing application-level security vulnerabilities.
• Strong understanding of SQL Injection and secure database/application coding practices.
• Ability to navigate unfamiliar or existing production codebases and determine where security vulnerabilities need to be remediated.
• Experience debugging, modifying, testing, and delivering production-quality application code.
• Solid understanding of secure coding principles and application security.
• Experience working with vulnerability findings, security defects, bugs, or remediation tickets.
• Strong troubleshooting and root-cause-analysis skills., * Experience with SAST / static code analysis and interpreting findings from application-security tools.
• Familiarity with security analysis platforms such as SonarQube, Semgrep, or CodeQL. These tools are examples from internal application-security guidance rather than confirmed requirements from Jack’s team.
• Understanding of common web-application vulnerabilities including injection flaws, cross-site scripting, insecure dependencies, and credential/secret exposure.
• Experience working within CI/CD-driven software-development environments.
• Familiarity with OWASP secure coding principles.