Title: Senior Full Stack Software Engineer / SRE – Vulnerability Remediation

Location: India (REMOTE)

Eastern Time Zone (6.30 PM IST to 3.30 AM IST)

Long Term Contract

## Position Overview

We are seeking a highly hands-on # Senior Full Stack Software Engineer / SRE – Vulnerability Remediation to own the triage and remediation of security vulnerabilities across legacy Java, Python, and JavaScript applications.

This is not traditional feature development. The engineer will take each vulnerability from identification through remediation and production deployment, including code fixes, dependency upgrades, build troubleshooting, CI/CD pipeline updates, artifact management, deployment, and post-deployment verification.

## Must-Have Skills – Non-Negotiable

### Multi-Language Vulnerability Remediation

- Robust hands-on, in-code experience across Java, Python, and JavaScript.

Must be comfortable working within legacy codebases developed by other teams.

Hands-on experience modifying application code to remediate security vulnerabilities.

Experience upgrading vulnerable libraries, frameworks, and application dependencies.

Ability to troubleshoot compatibility, build, API, and runtime issues resulting from security upgrades.

### End-to-End CVE Remediation

- Proven experience personally taking vulnerabilities/CVEs through the complete lifecycle:

Flagged → Triaged → Remediated → Tested → Deployed → Verified

Experience performing CVE analysis and determining appropriate remediation.

Hands-on code and dependency fixes.

Proven experience resolving application or build failures resulting from dependency upgrades.

Experience deploying security fixes into production and validating successful remediation.

### Build, Release & Artifact Pipeline

Strong hands-on experience with:

- Jenkins
- GitLab
- Harness
- JFrog Artifactory
- ArgoCD

Must have real artifact-library ownership experience, including:

Artifact versioning

Repository management

Artifact promotion across environments

Release traceability





CI/CD troubleshooting

Production deployment and rollback

GitOps deployment workflows

Experience simply triggering existing builds or deployments is not sufficient.

## Key Responsibilities

Own security vulnerabilities from initial identification through production closure.

Triage vulnerabilities across Java, Python, and JavaScript applications.

Implement hands-on application code and dependency remediation.

Upgrade vulnerable dependencies and resolve resulting application or build failures.

Troubleshoot legacy applications and unfamiliar codebases.

Update and troubleshoot CI/CD and release pipelines.

Manage application artifacts, versions, and environment promotions using Artifactory.

Deploy remediated applications using Harness, ArgoCD, and GitOps practices.

Verify application stability and successful vulnerability remediation after deployment.

Work across multiple application stacks and remediation priorities.

Drive assigned vulnerabilities through complete closure rather than only identifying or documenting issues.

## Strong Indicators

Ideal candidates should be able to provide examples of:

- Personally remediating vulnerabilities across Java, Python, and JavaScript applications.

Taking a real CVE from initial security finding through production deployment.

A dependency/security upgrade that broke an application or build and how they diagnosed and fixed it.

- Working with Harness and ArgoCD/GitOps together.
- Managing artifact versioning and promotion through JFrog Artifactory.
- Context-switching between Java, Python, and JavaScript remediation work.

## What Success Looks Like A steadily shrinking vulnerability backlog, with every assigned vulnerability completely owned and closed:

Security Finding → Triage → Code/Dependency Fix → Build → Artifact → Pipeline → Production Deployment → Verification → Closure The successful candidate will combine the hands-on coding ability of a Full Stack Software Engineer with the deployment, reliability, and production ownership of an SRE/DevSecOps Engineer.

📌 Senior Full Stack Software Engineer / SRE – Vulnerability Remediation-100% Remote(India)
🏢 Scubyt
📍 India