Senior Software Engineer – Technical Remediation & Enablement

Description

The company needs a hands-on senior engineer to fix software vulnerabilities directly in enterprise application code, working with application developers and contractor engineers.

The role is part individual contributor, part team-level technical lead. You will write and debug code, and also help squad developers use internal security and build tools.

The goal is same-day vulnerability hotfixes and deployments, with fixes packaged into modern containers for fast, low-risk production releases.

Responsibilities

• Write, refactor and review application code to fix static code analysis (SAST) findings, such as injection flaws, cross-site scripting, insecure deserialization, poor error handling and weak cryptography.
• Upgrade third-party libraries and frameworks to fix SCA and CVE findings, handling transitive dependency conflicts, breaking API changes and version mismatches in Java, Python, Go,.NET or JavaScript/TypeScript.
• Write targeted automated unit, integration and regression tests to show that code fixes and library patches do not break functionality.
• Write and improve Dockerfiles, container manifests and base image configurations for Docker, OCI and Kubernetes/OpenShift.
• Help application squads move legacy services that do not run in containers into containers, using minimal base images and automated base image rebuilds for same-day OS and runtime patches.
• Help set up and tune CI/CD build scripts and release pipelines to shorten deployment cycles and remove manual steps from emergency hotfixes.
• Review application teams' remediation plans at code level, checking whether a proposed library bump or refactor removes the root cause of a vulnerability.
• Identify technical prerequisites a team needs before it can patch and release, such as test coverage gaps, build tool upgrades and compiler or runtime updates.
• Act as peer reviewer and technical guide for external contractor engineers, reviewing their pull requests for cleanliness, security, test coverage and architectural standards.
• Help contractor developers onboard and get repository access.
• Pilot, adopt and demonstrate internal developer tools, IDE security plugins, automated dependency update bots and local scanners within squads.
• Troubleshoot false positives, scanner misconfigurations and pipeline failures, and give clear, practical feedback to platform and tooling teams.

Requirements

• A bachelor's degree in computer science, software engineering, information systems or a related technical field.
• 4, 7 years of hands-on experience building enterprise web applications, microservices or distributed backend systems.
• A proven record of fixing SAST findings and managing third-party dependency upgrades in production.
• Practical experience containerizing applications and running them on Docker, Kubernetes or OpenShift.
• Strong hands-on development skills in at least one or two primary enterprise languages: Java (Spring Boot), Python, Go, C/.NET or TypeScript/Node.js.
• Experience analysing and fixing scanner findings from tools such as SonarQube, Checkmarx, Veracode or Fortify.
• Practical experience with dependency and build tools such as Maven, Gradle, npm/yarn, NuGet, pip/Poetry or Go modules, and with SCA tools such as Snyk, Black Duck or JFrog Xray.
• Hands-on experience writing production-grade Dockerfiles, multi-stage builds, patching base images and deploying to Kubernetes or OpenShift.
• Proficiency with Git, branching strategies (Gitflow or trunk-based) and pipeline configuration in tools such as Jenkins, GitHub Actions, Tekton, GitLab CI or Harness.
• You enjoy writing code, debugging builds, untangling dependency trees and getting clean pull requests merged.
• You speak the language of squad engineers, troubleshoot alongside them and offer practical fixes over abstract advice.
• You find safe workarounds or refactors quickly when library upgrades introduce breaking changes.
• You explain the why and how of security fixes clearly in pull request comments, documentation and pairing sessions.

Conditions

Full-time role.

Hybrid working, with up to 2 days a week working from home.

Based in London, at the company London.

Business casual dress.

Benefits

• A competitive base salary, reviewed annually.
• A discretionary annual performance-related bonus.
• Holiday allowance starting at 27 days plus bank holidays, rising with tenure.
• Private medical insurance packages tailored to individual circumstances.
• Employee assistance programme.
• Pension plan.
• Paid parental leave.
• Discounts for employees, family and friends.
• Access to a range of learning and development resources.