Senior Software Engineer Technical Remediation & Enablement

Description

This Vice President (VP) / Senior Software Engineer role is a hands-on, code-level position that leads the direct fixing of software vulnerabilities across enterprise application teams. You work as an individual contributor and technical lead alongside application developers and contractor engineers.

You will fix static code findings, patch vulnerable dependencies, containerize workloads and tighten local build and release pipelines, with the aim of shipping same-day vulnerability hotfixes. The job mixes writing and refactoring code and debugging pipelines with helping squad developers adopt internal security and build tools, resolve difficult dependency conflicts and package applications into modern containers for fast, low-risk production releases.

Responsibilities

• Write, refactor and review code to fix static analysis (SAST) findings such as SQL and command injection, cross-site scripting, insecure deserialization, poor error handling and weak cryptography.
• Upgrade complex third-party libraries and frameworks to clear SCA and CVE findings, handling transitive dependency conflicts, breaking API changes and version mismatches in Java, Python, Go,.NET or JavaScript/TypeScript stacks.
• Write targeted automated unit, integration and regression tests that confirm code fixes and patched libraries do not break existing behaviour.
• Write and improve Dockerfiles, container manifests and base image setups for Docker, OCI and Kubernetes or OpenShift, working directly in application repositories.
• Help application squads containerize legacy services that do not yet run in containers, using minimal base images and automated rebuilds that trigger same-day OS and runtime patches.
• Help set up and tune CI/CD build scripts and release pipelines to shorten deployment cycles and remove manual steps from emergency hotfixes.
• Review remediation plans from application teams at the code level and judge whether a proposed version bump or refactor removes the root cause of a vulnerability.
• Spot technical blockers such as missing test coverage, build tool upgrades or compiler and runtime updates that must be resolved before a team can patch and release.
• Act as peer reviewer and technical guide for external contractor engineers on remediation work, checking their pull requests for clean code, security correctness, test coverage and architectural standards.
• Help contractor developers onboard smoothly and get the repository access they need.
• Pilot, adopt and demonstrate internal developer tools, IDE security plugins, automated dependency update bots and local scanners within engineering squads.
• Diagnose false positives, scanner configuration errors and build failures, and give internal platform and tooling teams clear, actionable feedback to improve the developer experience.

Requirements

• A bachelor's degree in computer science, software engineering, information systems or a related technical field.
• 4 to 7 years of hands-on experience building enterprise web applications, microservices or distributed backend systems.
• A proven record of fixing SAST findings and managing third-party dependency upgrades in production.
• Practical experience containerizing applications and running them on orchestration platforms such as Docker, Kubernetes and OpenShift.
• Strong hands-on skill in at least one or two primary enterprise languages: Java (Spring Boot), Python, Go, C/.NET or TypeScript/Node.js.
• Ability to analyse and fix findings from static analysis tools such as SonarQube, Checkmarx, Veracode or Fortify.
• Practical experience resolving dependencies with Maven, Gradle, npm/yarn, NuGet, pip/Poetry or Go modules, and using SCA tools such as Snyk, Black Duck or JFrog Xray.
• Hands-on experience writing production-grade Dockerfiles, using multi-stage builds, patching base images and deploying to Kubernetes or OpenShift.
• Proficiency with Git, branching strategies such as Gitflow or trunk-based development, and pipelines in tools such as Jenkins, GitHub Actions, Tekton, GitLab CI or Harness.
• Enjoys writing code, debugging builds, untangling dependency trees and getting clean pull requests merged.
• Speaks the language of squad engineers, troubleshoots alongside them and offers practical fixes over abstract advice.
• Finds safe workarounds or code refactors quickly when a library upgrade introduces breaking API changes.
• Explains the reasoning and method behind security fixes clearly in pull request comments, documentation and pairing sessions.

Conditions

Full-time position.

The base salary range is $111,600.00 - $161,600.00.

This is an existing vacancy.

Automated tools, including AI, help match skills to roles, but people make and check all hiring decisions.