Role Description:

Develops complex applications and systems to provide the required functionality for all IT services, including configuration and adjustment of standard software. Provides application maintenance and support services to users or to service delivery functions and contributes to the operations of a dedicated application or application class. Lead the team as a technical expert.

Key Accountabilities & Responsibilities:

- Analyze and remediate findings from SAST, DAST, software composition analysis, secrets scanning, and penetration testing.
- Remediate security vulnerabilities affecting our applications built on Java + Spring Boot, managed in Git/GitHub, and deployed on OpenShift (OCP4) via ArgoCD and Maven-based build pipelines. Without compromising functional quality or maintainability.
- Use approved AI-assisted engineering tools, including GitHub Copilot and Claude Code where available, for root-cause analysis, secure refactoring, test generation, and code review.
- Validate all AI-generated changes through human review, automated tests, security scans, and established change-control processes.
- Perform threat modeling and security design reviews for new and changed functionality.
- Integrate preventative security controls into CI/CD pipelines and create reusable remediation patterns.
- Collaborate with product teams, security specialists, architects, and platform engineers to prioritize findings by exploitability and business impact.
- Coach development teams on secure coding and document lessons learned to prevent recurrence.

Key Competencies & Skills required

Technical Skills:

- Strong experience in Java and Spring Boot framework for building robust microservices and RESTful APIs development & including Core Java, Advanced Java concepts (able to read and review code for security issues).




- GitHub, GitHub Actions, Docker, CI/CD pipelines, automated testing, and code-quality tooling.
- Experience with OpenShift 4 (OCP4) and Kubernetes concepts
- Proficiency with Maven:
- Dependency management, plugins, build profiles, and repository configuration.
- Performs application support tasks such as systems monitoring, security reviews, vulnerability assessments, patching, and routine maintenance.
- Hands-on testing experience, including unit testing[CK1]

Nice to have:

- SQL Server Management Studio
- Visual Studio
- Postgres SQL
- IntelliJ IDE
- Knowledge about Test Tools (e.g. Postman, ALM) and SNOW Tool Incident Management
- Creation of unit tests, automation tests
- GitHub Advanced Security, SBOM processes, AWS security services, MCP-based integrations, and agentic workflow concepts.
- Relevant security or cloud certifications.

Behavioral Skills:

- Strong ownership, analytical thinking, and a proactive approach to identifying risk and presenting options.
- Transparent communication across distributed and cross-functional teams.
- Ability to coach peers and translate security findings into actionable engineering work.
- Commitment to responsible AI use, confidentiality, traceability, and human accountability.
- Excellent interpersonal and communication skills for working in a global environment
- Willingness to learn and quickly adapt to changing requirements

Previous Experience & Qualifications

Minimum Educational Qualification:

- A degree in Computer Science or equivalent or a related discipline; or equivalent work experience

Years Experience & Knowledge:

- 4-6 years of Development background in design, analysis and coding, bug fixing.
- IT technical background & client server programming experience
- Experience process know-how insurance
- Experience in Agile Methods

📌 Java Developer_NTS_AI (Mumbai)
🏢 ERGO Technology u0026 Services
📍 Mumbai