Senior Java Lead

# Job Summary

We are looking for an experienced **Senior Java Lead / Application Engineer** with strong expertise in Java development, application security, vulnerability remediation, GitHub workflows, and modern AI/agentic coding practices.

The candidate will work closely with product teams, take technical ownership of delivery, remediate security vulnerabilities at scale, and help teams adopt secure and efficient AI-assisted development practices.

## Key Responsibilities

* Lead application development and technical delivery with strong hands-on expertise in **Java**.

* Work with unfamiliar and complex codebases and quickly understand application architecture, dependencies, and business logic.

* Remediate security vulnerabilities identified through **Software Composition Analysis (SCA)** and security scanning tools.

* Handle **dependency and transitive-dependency upgrades**, including analysis and resolution of breaking changes.

* Implement **OWASP-aligned code-level security fixes**.

* Work with SCA/security tools such as **Snyk, Black Duck, Checkmarx, Mend**, or equivalent.

* Use and operate **agentic/AI coding workflows** to generate code changes and merge-ready pull requests at scale.

* Review, validate, troubleshoot, and correct AI/agent-generated code before merge.

* Use **GitHub Actions** and follow disciplined pull-request, branching, code-review, and CI/CD practices.

* Act as the **technical lead** for the assigned product team and take accountability for technical delivery and output.

* Work closely with client/product teams and their SMEs through daily standups, technical discussions, and delivery activities.

* Provide technical guidance, knowledge transfer, and enablement to the client development team.

* Help establish sustainable development and security practices so that the team retains the capability after delivery.

* Collaborate effectively with teams that may have different development practices, priorities, or levels of technical maturity.

## Mandatory Skills

* **8+ years** of software/application development experience.

* Strong hands-on experience in **Java**.

* Good understanding of at least one additional language such as **C#, .NET, C++, or Python**, with the ability to read and understand other languages.

* Strong experience in **application security and vulnerability remediation**.

* Experience with **SCA tools** such as Snyk, Black Duck, Checkmarx, Mend, or similar.

* Strong understanding of **software dependencies and transitive dependencies**.

* Experience resolving security vulnerabilities and handling breaking changes caused by dependency upgrades.

* Knowledge of **OWASP and secure coding practices**.

* Hands-on experience with **GitHub Actions** and pull-request-based development.

* Experience with **AI/agentic coding tools or workflows**.

* Strong code-review, debugging, and troubleshooting skills.

* Excellent communication and client-facing skills.

* Previous experience as a **Technical Lead / Senior Engineer / Application Lead**.

## Preferred Skills

* **CSSLP, GWEB**, or equivalent security certification.

* Experience in **Financial Services** or other regulated industries.

* Experience in consulting, developer enablement, technical coaching, or developer advocacy.

* Experience working with enterprise-scale applications and large development teams.

* Knowledge of CI/CD, DevSecOps, and secure software development lifecycle practices.

## What We Are Looking For

The ideal candidate should be able to:

* Evaluate whether an **AI-generated code change is safe to merge**.

* Identify situations where an agent-generated change should be rejected and explain the reasoning.

* Quickly understand and contribute to an **existing/unfamiliar codebase**.

* Lead security remediation without compromising application stability.

* Work directly with product teams and SMEs in a client-facing environment.

* Influence and enable development teams while continuing to deliver hands-on technical outcomes.