- Analyze, triage, and remediate vulnerabilities identified via SAST, DAST, and software composition analysis tools such as SonarQube, Veracode, Snyk, and Checkmarx.
- Refactor insecure Java and codebases to mitigate vulnerabilities such as SQL Injection, XXE, XSS, CSRF, Deserialization, and Authentication flaws.
- Patch and upgrade vulnerable third-party dependencies using Maven/Gradle, and validate post-remediation effectiveness.
- Leverage Generative AI tools (e.g., AWS Bedrock) to build or enhance automation workflows for:
- Auto-remediation of common vulnerability patterns
- Code recommendations and patch generation
- AI-driven security analysis and triage assistance
- Automate vulnerability remediation and validation within CI/CD pipelines, improving security velocity and reducing manual effort.
- Strengthen security configurations in Spring Boot, REST APIs, services, and Tomcat-based deployments.
- Perform secure code reviews, provide remediation guidance, and promote secure coding best practices across development teams.
- Collaborate with InfoSec and DevOps teams to validate fixes, perform re-scans, and close vulnerability tickets.
- Stay current on security advisories, OWASP Top 10, CWE/SANS 25, and Java/Tomcat ecosystem updates.
- Strong hands-on experience with Core Java, Spring Boot, Tomcat, and REST API development.
- Proficiency in secure coding principles and application vulnerability remediation.
- Experience remediating issues identified by tools like Veracode, Checkmarx, SonarQube, or Snyk.
- Knowledge of dependency management and patching practices using Maven or Gradle.
- Familiarity with security configurations and remediation techniques.
- Experience with OAuth2/JWT, input validation, encryption, and secure session management.
- Understanding of Docker, Kubernetes, and security considerations in cloud-native applications.
- Experience with automating vulnerability remediation using GenAI platforms (e.g., AWS Bedrock, Amazon CodeWhisperer).
- Exposure to DevSecOps pipelines, including automated security scans and policy enforcement.
- Strong understanding of Spring Security, secure API design, and infrastructure hardening.
- Certifications such as CEH, CSSLP, GSSP-Java, or similar are a plus.
- Strong analytical, debugging, and problem-solving skills.
- Excellent communication and documentation abilities.
- A collaborative mindset with the ability to work across security, development, and operations teams.
- Self-motivated and proactive in driving secure development practices and automation.
-
The Security Engineer II - Threat and Vulnerability is responsible for identifying security risks across environments. This includes detecting vulnerabilities in on-premises and cloud platforms. · ...
St Louis, MO1 month ago
-
+RiVidium Inc (dba TripleCyber) seeks Vulnerability Assessment Analyst who performs system/network assessments identifying deviations from acceptable configurations. · +Analyze organization's cyber defense policies/configurations evaluating compliance with regulations/directives. ...
St. Louis1 month ago
-
RiVidium Inc (dba, TripleCyber) seeks a Vulnerability Assessment Analyst to perform system and network assessments within the NE or enclave. · Analyze cyber defense policies and configurations for compliance with regulations. · ...
St Louis, MO1 month ago
-
We are seeking a highly skilled Java Engineer with expertise in secure coding,vulnerability remediation,and security automation. · Analyze,triage,and remediate vulnerabilities identified via SAST,DAST,and software composition analysis tools such as SonarQube.Veracode,Snyk,and Che ...
St. Louis4 weeks ago
-
Amyx is seeking to hire a Vulnerability Assessment Analyst-Intermediate to support our Cybersecurity Division and Intel client in the St. Louis, MO area. · ...
St Louis, MO3 weeks ago
-
The Security Engineer II - Threat and Vulnerability is responsible for identifying, assessing, and mitigating security risks across our environments. This role emphasizes detecting vulnerabilities, · Research, analyze, and evaluate emerging threats,vulnerabilities,and exploits ac ...
St. Louis1 month ago
-
Performs assessments of systems and networks within the NE or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. · Measures effectiveness of defense-in-depth architecture against known vulnerabilities.. · A ...
St. Louis1 month ago
-
Amyx is seeking to hire a Vulnerability Assessment Analyst-Intermediate to support our Cybersecurity Division and Intel client in the St. Louis area. · ...
St. Louis Full time1 month ago
-
We are seeking a highly skilled Java Engineer with expertise in secure coding, vulnerability remediation and security automation. The ideal candidate will have hands-on experience remediating vulnerabilities in Java applications with a strong grasp of automation techniques and a ...
St Louis, MO4 weeks ago
-
RiVidium Inc (dba TripleCyber) is seeking a Vulnerability Assessment Analyst who performs assessments of systems and networks within the NE or enclave. · Analyze organization's cyber defense policies and configurations. · Conduct penetration testing on enterprise network assets. ...
St. Louis1 month ago
-
Analyze organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives. Conduct and/or support authorized penetration testing on enterprise network assets. · Maintain deployable cyber defense audit toolkit (e.g., sp ...
St. Louis3 weeks ago
-
The Security Engineer II - Threat and Vulnerability is responsible for identifying, assessing, and mitigating security risks across our environments.This role emphasizes detecting vulnerabilities, ensuring secure configurations, · and driving remediation efforts to strengthen the ...
St. Louis1 week ago
-
A highly skilled Node Engineer is sought to analyze, triage and remediate vulnerabilities in applications using secure coding principles. · Analyze triage remediate vulnerabilities identified via SAST DAST software composition analysis tools. · ...
St. Louis, MO4 days ago
-
We are seeking a highly skilled Node Engineer with expertise in secure coding vulnerability remediation and security automation. The ideal candidate will have hands-on experience remediating vulnerabilities in Java and applications with a strong grasp of automation techniques and ...
St. Louis $70 - $75 (USD) Freelance5 days ago
- Work in company
Vulnerability Assessment Analyst with Security Clearance
Only for registered members
Amyx is seeking to hire a Vulnerability Assessment Analyst-Intermediate to support our Cybersecurity Division and Intel client in the St. Louis area. · Analyze organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational dir ...
St. Louis3 weeks ago
-
This role is ideal for someone who thrives in a dynamic environment and is passionate about cybersecurity. The Vulnerability Management Analyst will lead continuous monitoring activities related to third-party suppliers.The position involves assessing risk and prioritizing vulner ...
Illinois1 month ago
- Work in company
Senior Cybersecurity Vulnerability Management Versatilist
Only for registered members
The Boeing Company is looking for a Senior Cybersecurity Vulnerability Management Versatilist. In this position, you will play a crucial role in protecting Boeing's Information Technology ecosystem by accelerating security automation and emergent vulnerability response activities ...
Hazelwood $142,800 - $207,000 (USD) Full time1 month ago
-
We are seeking a skilled and dedicated Infrastructure Platform Administrator to join our IT Security team. · Experience: Minimum of 5 years of experience in IT security, with a focus on vulnerability management. · Strong knowledge of network and system security principles. · Soli ...
St Louis, MO1 week ago
-
++We are seeking a highly skilled Java Engineer with expertise in secure coding vulnerability remediation and security automation. · Analyze triage and remediate vulnerabilities identified via SAST DAST and software composition analysis tools such as SonarQube Veracode Snyk and C ...
St Louis5 days ago
-
We are seeking a Security Engineer II to support threat and vulnerability management across on-premises and cloud environments. · Identify, assess, and remediate vulnerabilities across on-prem and cloud environments (AWS/Azure/GCP) · Monitor and analyze threat intelligence using ...
St Louis, MO1 month ago
Java Developer with Vulnerability - St Louis - Brillio
Description
About Brillio:
Brillio is one of the fastest growing digital technology service providers and a partner of choice for many Fortune 1000 companies seeking to turn disruption into a competitive advantage through innovative digital adoption. Brillio, renowned for its world-class professionals, referred to as "Brillians", distinguishes itself through their capacity to seamlessly integrate cutting-edge digital and design thinking skills with an unwavering dedication to client satisfaction.
Brillio takes pride in its status as an employer of choice, consistently attracting the most exceptional and talented individuals due to its unwavering emphasis on contemporary, groundbreaking technologies, and exclusive digital projects. Brillio's relentless commitment to providing an exceptional experience to its Brillians and nurturing their full potential consistently garners them the Great Place to Work certification year after year.
Job Title: Java Engineer – Application Security Remediation & Automation
Location: St. Louis MO-hybrid 3 days
Employment Type: Full-time
Experience Level: 5+ years
About the Role
We are seeking a highly skilled Java Engineer with expertise in secure coding, vulnerability remediation, and security automation. The ideal candidate will have hands-on experience remediating vulnerabilities in Java and applications, with a strong grasp of automation techniques, and a proven ability to leverage Generative AI solutions such as AWS Bedrock to accelerate security workflows.
This role requires close collaboration with InfoSec, QA, DevOps, and engineering teams to ensure application security posture is proactively strengthened through intelligent automation and continuous improvement.
Key Responsibilities
Required Skills
Preferred Qualifications
Soft Skills
Know more about Brillio :
PPE:
Know more about Brillio :
PPE:
Equal Employment Opportunity Declaration
Brillio is an equal opportunity employer to all, regardless of age, ancestry, colour, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding, and related medical conditions), and sexual orientation.
Know what it's like to work and grow at Brillio
-
Threat and Vulnerability Engineer
Only for registered members St Louis, MO
-
Vulnerability Assessment Analyst
Only for registered members St. Louis
-
Vulnerability Assessment Analyst
Only for registered members St Louis, MO
-
Java Developer with Vulnerability
Only for registered members St. Louis
-
Vulnerability Assessment Analyst
Only for registered members St Louis, MO
-
Threat and Vulnerability Engineer
Only for registered members St. Louis
-
Vulnerability Assessment Analyst
Only for registered members St. Louis
-
Vulnerability Assessment Analyst
Full time Only for registered members St. Louis
-
Java Developer with Vulnerability
Only for registered members St Louis, MO
-
Vulnerability Assessment Analyst
Only for registered members St. Louis
-
Vulnerability Assessment Analyst
Only for registered members St. Louis
-
Threat and Vulnerability Engineer
Only for registered members St. Louis
-
NodeJS Developer with vulnerability – R01560256
Only for registered members St. Louis, MO
-
NodeJS Developer with vulnerability - R01560256
Freelance Only for registered members St. Louis
-
Vulnerability Assessment Analyst with Security Clearance
Only for registered members St. Louis
-
Vulnerability Management, Risk Analyst
Only for registered members Illinois
-
Senior Cybersecurity Vulnerability Management Versatilist
Full time Only for registered members Hazelwood
-
Platform Administrator –
Only for registered members St Louis, MO
-
Software Engineer
Brillio- St Louis
-
Security Engineer – Threat
Only for registered members St Louis, MO