– Principal Software Developer

Location – Noida

Work from office – Hybrid

Exp: 8-12 years

This is an individual contributor role based in Noida. Hands-on Java development and Security Operations (SecOps)

- 8–12 years of skilled software engineering experience, with a strong track record of designing and delivering large-scale, production-grade systems.
- Proficiency in developing and maintaining Java Spring Boot–based applications, REST APIs, and event-based architecture
- Hands-on experience designing and operating JMS-based (or similar message-broker-based) service architectures.
- Strong experience with transactional databases (e.g., Oracle, PostgreSQL, SQL Server), including transaction management, data consistency, and performance optimization.
- Solid working knowledge of AWS services (e.g., EC2, S3, RDS, Lambda, ECS/EKS, IAM) and cloud architecture best practices.
- Practical experience building and maintaining CI/CD pipelines with GitHub and GitHub Actions (or comparable tools).
- Strong understanding of software design patterns, distributed systems concepts, and enterprise integration patterns.
- Experience in the financial services, asset management, or capital markets domain is a strong plus.
- Excellent communication skills, with the ability to influence technical direction across teams without direct authority.
- A pragmatic,



quality-first mindset with a track record of balancing technical excellence and delivery timelines.
- Proven experience remediating security vulnerabilities in Java applications and their dependencies, including working with SCA tools (e.g., Snyk, Dependency-Check, GitHub Dependabot) and SAST/DAST scanners.

Solid understanding of secure coding practices (e.g., OWASP Top 10) and common vulnerability classes affecting Java, JMS.

Candidates should preferably have experience in:

- Managing a security scanning pipeline end-to-end
- Working with CI/CD security integration
- Hands-on experience with:
- SAST (Static Application Security Testing)
- SCA (Software Composition Analysis)
- Container Security Scanning
- Strong understanding of OWASP Top 10 vulnerabilities and remediation techniques
- Demonstrated ability to independently identify, investigate, and fix application security vulnerabilities, rather than only reporting them to development teams
- Experience in secure coding practices and security-focused software development

Additional Preferred Experience (Good to Have) While not mandatory, candidates with exposure to compliance and audit frameworks will be highly valued:
- Support for SOC 2, ISO 27001, or similar audits
- Experience providing security evidence, reports, and controls validation from security tooling and platforms
- Participation in security governance, risk, and compliance activities

📌 Software Developer (Noida)
🏢 startuphr.consulting
📍 Noida