Join a fast-paced application security remediation initiative supporting enterprise software engineering teams. This hands-on role focuses on strengthening application security, reducing technical debt, and improving the overall security posture of critical business applications.

Responsibilities

• Review and prioritize application security findings from approved vulnerability management and scanning tools
• Remediate code-level vulnerabilities using secure coding practices
• Complete dependency, framework, library, runtime, and version upgrades while minimizing compatibility issues and regression risk
• Address findings related to static code analysis, software composition analysis, exposed secrets, and repository security controls
• Build and run unit, integration, regression, and security tests to confirm remediation quality
• Document remediation work clearly with pull requests, tickets, test outcomes, scan results, and approval evidence
• Partner with engineering, infrastructure, platform, and security teams to deliver remediation work that meets acceptance criteria
• Contribute reusable patterns, documentation, and automation where helpful

Skills

• 5+ years of enterprise software engineering experience
• Strong Java development background in enterprise production environments
• Hands-on experience remediating application security vulnerabilities within existing codebases
• Experience with dependency and library upgrades, CVE remediation, static analysis findings, SCA, secret remediation, and secure application configuration
• Working knowledge of Git-based development workflows, including pull requests and branch management
• Understanding of repository security practices such as code scanning, dependency alerts, secret scanning, and branch protections
• Experience developing REST APIs
• Experience creating and executing automated unit, integration, and regression tests
• Ability to work independently while collaborating effectively in Agile teams
• Strong documentation and communication skills with the ability to provide clear evidence of completed work
• Ability to work during U.S. Central Time business hours

Preferred Skills

• Experience working in Kotlin codebases or quickly becoming productive in Kotlin applications
• Familiarity with GitHub Advanced Security, Dependabot, Renovate, or similar enterprise security tools
• Experience remediating vulnerabilities in JVM applications, microservices, APIs, or messaging platforms
• Experience creating remediation automation, playbooks, reusable engineering patterns, or operational documentation

Horizontal is committed to fostering an inclusive, equitable, and welcoming environment where diverse perspectives are valued. We believe stronger teams and better outcomes come from embracing different backgrounds, experiences, and ideas.

By applying for this position, you acknowledge and agree that Horizontal Talent may contact you regarding your application using automated technology, including phone calls, SMS/text messages, or email, which may be delivered by our virtual AI recruiter, Alex.