Sr. Java Software Engineer

• Design, develop, and maintain features and services in our large, production Java codebase
• Review existing code, identify security vulnerabilities (such as SQL injection, broken access controls, and insecure authentication), and fix them directly
• Verify that fixes are effective and that vulnerabilities are fully resolved
• Develop and maintain secure coding standards, patterns, and guardrails for engineering teams
• Contribute to security improvements across our AWS infrastructure, including IAM policy refinement and network controls
• Evaluate the security of AI-assisted development pipelines, tool integrations, and agent-accessible services
• Partner with the CISO on remediation planning and compliance initiatives, including PCI DSS
• Communicate priorities and progress clearly to both technical and executive stakeholders

• 7+ years of hands-on software engineering experience
• Strong Java/JVM expertise; Spring Boot and microservices experience desirable
• Proven experience understanding and modifying large, production-level Java codebases
• Experience conducting secure code reviews and writing code fixes for identified vulnerabilities
• Solid understanding of the OWASP Top 10 and secure coding practices
• Working knowledge of AWS security fundamentals (IAM, VPC networking, secrets management)
• Familiarity with AI-assisted development tools and a willingness to learn how to secure them
• Strong prioritization and communication skills

• Experience in payments, fintech, ecommerce, subscription/billing, or other regulated environments
• Experience with secure SDLC practices and integrating security tooling (SAST/DAST/SCA) into CI/CD
• Familiarity with global, multi-currency, or tax-calculation systems and their data-sensitivity considerations
• Security certifications (e.g., AWS Security Specialty, CISSP, OSCP, GIAC)