Role Description:

We are seeking a highly skilled and experienced Mainframe Security Specialty Developer. The ideal candidate will possess deep expertise in IBM Mainframe technologies and application security, with a strong focus on vulnerability remediation, secure software development, and modernization of business-critical COBOL applications.

The successful candidate will support large-scale vulnerability reduction initiatives, perform security-focused code analysis, remediate critical findings, and drive secure coding practices across the enterprise mainframe landscape.

Key Accountabilities & Responsibilities:

Security Engineering

- Analyze, assess, and remediate vulnerabilities identified through Application Security Testing (AST).
- Investigate and resolve security weaknesses within COBOL applications.
- Perform secure code reviews and vulnerability assessments.
- Collaborate with security architects and application owners to reduce application risk.

Mainframe Development

- Design, develop, enhance, and maintain COBOL-based business applications.
- Familiarity with assembler macros.
- Modify and optimize existing programs running on IBM z/OS environments.
- Refactor legacy applications to improve maintainability, security, and performance.

Vulnerability Remediation

- Analyse critical and high-risk security findings.
- Resolve REXX, RACF Injection and command execution weaknesses.
- Improve authorization and access-control implementations.

Modernization and Automation

- Support modernization of legacy platforms.
- Leverage AI-assisted development and code analysis tools.
- Contribute to automation of vulnerability remediation processes.
- Promote DevSecOps and security-by-design principles.

Key Competencies & Skills required

Technical Skills





- Expertise in Mainframe Technologies COBOL, IBM z/OS, IMS-DC, JCL, DB2, TSO/ISPF, ISPW /BMC AMI DevX Code Pipeline
- Strong experience in Security Skills - RACF / ACF2, Application Security, AST, Vulnerability Analysis, Security Code Review
- Hands-on experience on Database Technologies - Embedded DB2 / Dynamic DB2 and Query Optimization
- Support implementation of Secure SDLC standards and best practices.

Nice to have:
- Good to have experience on Security tools - Checkmarx / Fortify / SonarQube
- Exposure to contemporary engineering tools - MQ Series , RDZ
- Familiarity with COBOL copybooks, assembler macros, and macro-driven code generation patterns in IBM z/OS environments, including the ability to understand and adapt legacy application logic

Behavioral Skills:
- Strong analytical and problem-solving skills.
- Ability to understand complex legacy application landscapes.
- Strong stakeholder communication and collaboration skills.
- Ability to translate security requirements into technical solutions.
- Passion for application modernization and secure software development.

Previous Experience & Qualifications

Minimum Educational Qualification:

- Bachelor or Master degree in information technology,Computer Science, or a related field.

Certification if any: Years of Experience & Knowledge:

- 6-8 years of experience in Mainframe Application Development.
- Strong hands-on expertise in COBOL, DB2, CICS/ IMS-DC, and JCL.
- Experience supporting mission-critical enterprise applications.
- Proven experience in application security and vulnerability remediation.
- Experience working within highly regulated environments.
- Experience performing root-cause analysis and defect remediation.
- Strong collaboration with business and technical teams

📌 Mainframe Developer_Security Specialist (Mumbai)
🏢 ERGO Technology u0026 Services
📍 Mumbai