Title: Senior DevSecOps / Vulnerability Remediation Engineer
Location: India (REMOTE)
Eastern Time Zone (6.30 PM IST to 3.30 AM IST)
Long Term Contract
Position Overview
We are seeking a hands-on *Senior DevSecOps / Vulnerability Remediation Engineer* to own application security vulnerabilities from initial identification through production deployment.
This role requires a strong combination of *software engineering, application security, DevOps, and SRE experience. The engineer will work across legacy Java, Python, and JavaScript applications*, analyze vulnerabilities identified by security tooling, determine the appropriate remediation, implement code and dependency fixes, resolve resulting build issues, update deployment pipelines, and successfully deploy the remediation into production.
This is primarily a *security remediation role rather than feature development*.
Key Responsibilities
* Own application vulnerabilities from *initial identification through production remediation and verification*.
* Triage CVEs and security findings across Java, Python,
and JavaScript applications.
* Perform hands-on code changes to remediate identified vulnerabilities.
* Upgrade vulnerable libraries, frameworks, and application dependencies.
* Troubleshoot application or build failures caused by dependency upgrades.
* Work within legacy codebases developed by other engineering teams.
* Update and maintain CI/CD and release pipelines required to deploy security fixes.
* Manage artifact versioning, promotion, and release processes.
* Validate successful remediation after deployment and ensure vulnerabilities are properly closed.
* Work across multiple applications and technology stacks as remediation priorities change.
Required Skills
* Robust hands-on software development experience with *Java, Python, and JavaScript*.
* Demonstrated experience performing *application vulnerability and CVE remediation*.
* Proven experience taking security findings through the complete lifec
📌 Senior DevSecOps (India)
🏢 Scubyt
📍 India