Role Description:

Develops complex applications and systems to provide the required functionality for all IT services,

including configuration and adjustment of standard software. Provides application maintenance and

support services to users or to service delivery functions and contributes to the operations of a dedicated

application or application class. Lead the team as a technical expert.

Key Accountabilities & Responsibilities:

Analyze and remediate findings from SAST, DAST, software composition analysis, secrets

scanning, and penetration testing.

Remediate security vulnerabilities affecting our applications built on Java + Spring Boot,

managed in Git/GitHub, and deployed on OpenShift (OCP4) via ArgoCD and Maven-based

build pipelines. Without compromising functional quality or maintainability.

Use approved AI-assisted engineering tools, including GitHub Copilot and Claude Code where

available, for root-cause analysis, secure refactoring, test generation, and code review.

Validate all AI-generated changes through human review, automated tests, security scans, and

established change-control processes.

Perform threat modeling and security design reviews for new and changed functionality.

Integrate preventative security controls into CI/CD pipelines and create reusable remediation

patterns.

Collaborate with product teams, security specialists, architects, and platform engineers to prioritize

findings by exploitability and business impact.

Coach development teams on secure coding and document lessons learned to prevent

recurrence.

Key Competencies & Skills required

Technical Skills: Strong experience in Java and Spring Boot framework for building

robust microservices and RESTful APIs development & including Core

Java, Advanced Java concepts (able to read and review code for

security issues).

GitHub,



GitHub Actions, Docker, CI/CD pipelines, automated testing,

and code-quality tooling.

Experience with OpenShift 4 (OCP4) and Kubernetes concepts

Job Description

Strictly Confidential

Proficiency with Maven:

o Dependency management, plugins, build profiles, and

repository configuration.

Performs application support tasks such as systems monitoring,

security reviews, vulnerability assessments, patching, and routine

maintenance.

Hands-on testing experience, including unit testing

Nice to have:

SQL Server Management Studio

Visual Studio

Postgres SQL

IntelliJ IDE

Knowledge about Test Tools (e.g. Postman, ALM) and SNOW Tool

Incident Management

Creation of unit tests, automation tests

GitHub Advanced Security, SBOM processes, AWS security services,

MCP-based integrations, and agentic workflow concepts.

Relevant security or cloud certifications.

Behavioral Skills:

Strong ownership, analytical thinking, and a proactive approach to

identifying risk and presenting options.

Transparent communication across distributed and cross-functional teams.

Ability to coach peers and translate security findings into actionable

engineering work.

Commitment to responsible AI use, confidentiality, traceability, and

human accountability.

Excellent interpersonal and communication skills for working in a global

environment

Willingness to learn and quickly adapt to changing requirements

Previous Experience & Qualifications

Minimum Educational

Qualification:

A degree in Computer Science or equivalent or a related discipline; or

equivalent work experience

Years Experience &

Knowledge:

0-2 years of Development background in design, analysis and

coding, bug fixing.

IT technical background & client server programming experience

Experience process know-how insurance

Experience in Agile Methods

📌 Java Developer-NTS_AI (Mumbai)
🏢 CIEL HR
📍 Mumbai