Senior Software Engineer Technical Remediation & Enablement

Description

The company is hiring a senior Applications Development Technology Lead Analyst to set up and roll out new or revised application systems and programs with the Technology team, leading systems analysis and programming work.

The role also covers a hands-on Vice President level Senior Software Engineer for Technical Remediation and Enablement. You will fix software vulnerabilities directly in code across enterprise application teams, as an individual contributor and team-level technical lead working beside application developers and contractor engineers.

The work mixes writing, refactoring and debugging code with enablement, guiding squad developers on security and build tools, tricky dependency conflicts and containerized releases. The goal is same-day vulnerability hotfix and deployment capability.

Success is measured by merged, validated pull requests and critical or high SAST and SCA issues resolved, the number of components containerized with automated checks ready for same-day hotfixes, review turnaround for remediation plans and contractor PRs, and measurable reductions in build and deployment friction for patched releases.

Responsibilities

• Write, refactor and review code to fix SAST findings such as SQL and command injection, cross-site scripting, insecure deserialization, poor error handling and weak cryptography.
• Work through complex third-party library and framework upgrades for SCA and CVE remediation, handling transitive dependency conflicts, breaking API changes and version mismatches across Java, Python, Go,.NET or JavaScript/TypeScript.
• Add targeted automated unit, integration and regression tests to confirm that fixes and patched libraries do not break functionality.
• Write and tune Dockerfiles, container manifests and base image configurations for Docker, OCI and Kubernetes or OpenShift, working directly in application repositories.
• Help squads containerize legacy services that are not yet containerized, using minimal base images and automated rebuilds that trigger same-day OS and runtime patches.
• Help configure and tune CI/CD build scripts and release pipelines to shorten deployment cycles and remove manual steps from emergency hotfixes.
• Review application teams' remediation plans at code level to confirm that proposed version bumps or refactors remove the root cause, and identify prerequisites such as test gaps, build tool upgrades and compiler or runtime updates.
• Act as peer reviewer and technical guide for external contractors. Review their pull requests for cleanliness, security correctness, test coverage and architectural standards, and help them onboard and get repository access.
• Pilot, adopt and demonstrate internal developer tools, IDE security plugins, automated PR bots and local scanners within squads. Troubleshoot false positives, scanner configuration errors and pipeline failures, and send clear feedback to platform and tooling teams.
• Partner with multiple management teams to integrate functions toward business goals, and identify and define system enhancements for new products and process improvements.
• Resolve high-impact problems through in-depth evaluation of complex business processes, system processes and industry standards.
• Provide expert application programming knowledge and make sure designs follow the overall architecture blueprint.
• Use advanced knowledge of system flow to set standards for coding, testing, debugging and implementation.
• Understand how business areas such as architecture and infrastructure fit together to reach business goals.
• Analyze issues in depth and think interpretively to define them and build innovative solutions.
• Advise and coach mid-level developers and analysts, assigning work as needed.
• Assess risk in business decisions with care for the firm's reputation and for protecting the company, its clients and assets. Drive compliance with laws, rules, regulations and Policy, apply sound ethical judgment, and escalate, manage and report control issues openly.

Requirements

• Bachelor's degree in Computer Science, Software Engineering, Information Systems or a related technical field, or equivalent experience.
• 4-7 years of hands-on software development delivering enterprise web applications, microservices or distributed backend systems.
• Proven record of fixing SAST findings and managing third-party dependency upgrades in production.
• Practical experience containerizing applications and working with Docker, Kubernetes or OpenShift.
• Strong hands-on skill in at least one or two of Java (Spring Boot), Python, Go, C/.NET or TypeScript/Node.js.
• Ability to analyze and fix findings from tools such as SonarQube, Checkmarx, Veracode or Fortify.
• Practical dependency management with Maven, Gradle, npm/yarn, NuGet, pip/Poetry or Go modules, plus SCA tools such as Snyk, Black Duck or JFrog Xray.
• Hands-on experience writing production-grade Dockerfiles, multi-stage builds, patching base images and deploying to Kubernetes or OpenShift.
• Proficient with Git, branching strategies (Gitflow or trunk-based) and pipelines such as Jenkins, GitHub Actions, Tekton, GitLab CI or Harness.
• Enjoys writing code, debugging builds, untangling dependency trees and getting clean PRs merged.
• Works well with squad engineers, troubleshoots side by side and offers practical solutions over abstract advice.
• Finds safe workarounds or code refactors quickly when library upgrades introduce breaking API changes.
• Explains the why and how of security fixes clearly in PR comments, documentation and pairing sessions.
• Recommended: 6-10 years of relevant experience in applications development or systems analysis.
• Recommended: extensive experience in systems analysis and software application programming.
• Recommended: experience managing and delivering projects successfully.
• Recommended: subject matter expert in at least one area of applications development.
• Recommended: ability to shift priorities quickly as circumstances change.
• Recommended: demonstrated leadership and project management skills.
• Recommended: clear, concise written and verbal communication.
• Master's degree preferred.

Conditions

Full-time position.

Based in New York, New York, United States.

Salary range for the primary location: $142,320.00 - $213,480.00.

Anticipated posting close date: Nov 06, 2026.

Other job-related duties may be assigned as required.

Hiring decisions are made and checked by people, and automated processing is used only to match skills to roles.

Benefits

• Eligible employees may receive discretionary and formulaic incentive and retention awards.
• Medical, dental and vision coverage, a 401(k), life, accident and disability insurance, and wellness programs.
• Paid time off covering vacation, sick leave and paid holidays.
• Offerings vary by jurisdiction, job level and date of hire. Full details are on the company's benefits site.