Job Closed
This listing is no longer active.
Agilidade | Senioridade | Transparência | Responsabilidade Social
Senior Software Engineer, Java Backend, AppSec, DevSecOps
Location
Brazil
Posted
126 days ago
Salary
0
Seniority
Senior
Job Description
Senior Software Engineer, Java Backend, AppSec, DevSecOps
AVANTTi
• Library updates: perform patching of legacy libraries by modifying the pom.xml to secure versions. • Transitive vulnerability mitigation: address security issues in dependencies introduced indirectly by other libraries. • Impact analysis: assess whether updating a library may introduce breaking changes to existing code.
Job Requirements
- Proficiency in Java/JVM: deep knowledge of the platform, including class/library loading and how vulnerabilities can manifest (e.g., code injection and insecure deserialization).
- Experience in Dependency Management (Maven/Gradle): analyzing the dependency tree (mvn dependency:tree), identifying transitive dependencies, and using mechanisms to force versions and exclude vulnerable libraries.
- Plus: experience as an AppSec Engineer or Java Security Analyst.
- Background as a Senior Java Backend Developer with a focus on DevSecOps.
Benefits
- CLT (Brazilian formal employment contract)
- Benefits
Related Guides
Related Categories
Related Job Pages
More DevOps Engineer Jobs
• The analyst will be focused on Linux server administration with an emphasis on security.
• Lead the end-to-end migration from Azure DevOps to GitHub Enterprise. • Design and implement reusable GitHub Actions workflows. • Drive the implementation and adoption of GitHub Advanced Security. • Define and enforce CI/CD standards. • Act as the technical lead for AWS modernization initiatives. • Design and maintain Terraform code for AWS infrastructure. • Support container engineering practices including Helm. • Contribute to serverless architectures using AWS Lambda. • Embed security and compliance controls into delivery pipelines. • Work closely with platform, security, cloud, and application teams. • Mentor junior engineers.
• Support migration activities from Azure DevOps to GitHub Enterprise, including repository organization, workflow conversion, validation, and documentation. • Contribute to GitHub repository administration, branching strategies, pull requests, and code review processes. • Create, update, and maintain GitHub Actions workflows for CI/CD tasks such as testing, building, packaging, and deployment. • Assist with Docker image creation, pushing images to Amazon ECR, and deployments to Amazon EKS under senior guidance. • Contribute to AWS Lambda development in Python or Node.js, including integration with API Gateway and event-driven services such as SQS and EventBridge. • Contribute to Terraform modules for AWS infrastructure and automation, including services such as S3, IAM, Lambda, and container-related resources. • Review and triage GitHub Advanced Security findings, including CodeQL, Dependabot alerts, and secret scanning, with support from senior engineers and security teams. • Participate in automated testing, quality gates, and CI/CD best practices. • Create and maintain technical documentation related to pipelines, standards, and migration activities. • Actively use GenAI tools such as GitHub Copilot, Claude, and ChatGPT to support engineering work. • Participate in Agile ceremonies and contribute to the broader cloud modernization effort.
• Own and evolve our infrastructure, reliability, and deployment practices • Build the foundational platform that enables our engineering teams to ship quickly and reliably • Design, implement, and maintain our AWS cloud infrastructure using infrastructure-as-code principles with Terraform • Build and optimize CI/CD pipelines to enable rapid, safe deployments across multiple environments • Own observability strategy—implement comprehensive monitoring, logging, and alerting systems using Datadog and other tooling • Architect and manage containerized workloads on ECS Fargate and evaluate migration paths to Kubernetes • Establish and enforce security best practices, working closely with compliance teams on financial services requirements • Design and implement disaster recovery, backup, and business continuity strategies • Optimize system performance, cost efficiency, and resource utilization across AWS services • Collaborate with engineering teams to improve service reliability, reduce toil, and establish SLOs/SLIs • Participate in incident response and conduct thorough post-mortems to drive continuous improvement • Mentor engineers on DevOps practices, cloud architecture patterns, and operational excellence



