Senior Java Developer - Flood Services / Security Vulnerabilities

We are looking for a Senior Java Developer to join the Flood Services team and lead the remediation of security vulnerabilities across a portfolio of business-critical enterprise applications.

The ideal candidate brings deep hands-on expertise with Java and the Spring ecosystem, a strong security mindset, and a proven track record of driving complex technical initiatives in mature enterprise environments. You should be comfortable owning end-to-end solutions, mentoring other engineers, influencing technical decisions, and engaging directly with stakeholders. Experience with Angular is a nice-to-have, as some applications include front-end components that may also require updates.

The applications are established enterprise systems with multiple business-critical workflows and integrations. As a Senior Java Developer, you will play a key role in shaping the security posture, architectural quality, and long-term maintainability of the Flood platform.

Responsibilities

• Lead the analysis and remediation of security vulnerabilities identified across Flood applications
• Design, develop, and maintain backend functionality using Java and Spring, ensuring high standards of quality, performance, and security
• Perform in-depth investigation of existing code and define robust solutions that address vulnerabilities without compromising business functionality
• Drive upgrades of vulnerable libraries, frameworks, and application dependencies, including impact assessment and migration planning
• Define and promote secure coding standards and best practices across the team
• Troubleshoot and resolve complex application issues resulting from security fixes, dependency upgrades, or legacy implementations
• Own the quality of delivered solutions by writing clean, maintainable, and secure code
• Lead code reviews and mentor other developers, sharing knowledge on security, architecture, and Java best practices
• Collaborate closely with developers, QA engineers, product stakeholders, and other members of the Flood Services team, providing technical guidance and decision support
• Contribute to front-end changes where needed if Angular experience is available
• Drive continuous improvement of application security, technical quality, and engineering processes
• Participate in technical discussions with architects and stakeholders to influence the platform's evolution

Requirements

• 3+ years of commercial software development experience with Java
• Expert-level knowledge of the Spring Framework and Spring Boot, including advanced features and internals
• Proven experience working with complex enterprise applications and large legacy codebases
• Strong understanding of REST APIs, backend architecture, application security principles (OWASP Top 10), and secure coding practices
• Demonstrated ability to independently investigate security findings, identify root causes, and design and implement effective, production-grade fixes
• Solid experience with dependency and framework upgrades, including resolving compatibility issues in large-scale systems
• Advanced troubleshooting and problem-solving skills, with the ability to reason about complex, poorly documented systems
• Experience mentoring engineers, leading technical initiatives, and driving decisions in cross-functional teams
• Ability to work autonomously and take ownership of complex deliverables within a distributed team
• Strong English communication skills (B2 level or higher), including the ability to interact effectively with stakeholders

Nice to have

• Experience with Angular
• Hands-on experience leading security vulnerability remediation projects
• Proficiency with security scanning and static analysis tools (e.g., SonarQube, Checkmarx, Snyk, Veracode)
• Expertise in modernizing, refactoring, or maintaining large enterprise applications
• Solid knowledge of CI/CD pipelines and automated testing strategies
• Experience defining architectural or security guidelines at team or product level