Senior Java Application Security Lead (Remote)

Commerzbank AG - Poland; Poland; Hybrid; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Development plans

Life insurance

Flexible hours

Team integration events

Job summary

Commerzbank AG - Poland is seeking a Senior Java Developer with a strong focus on application security to own and coordinate security topics in the development context. The role emphasizes reviewing existing code, analyzing findings, and guiding remediation without direct coding changes.

Candidates should bring deep Java expertise, knowledge of SAST/DAST, and the ability to work with Dev and Ops teams to promote secure SDLC practices within a banking environment.

Qualifications

• Senior Java developer with hands-on Java experience and secure coding mindset.
• Experience reviewing code, analyzing security findings and coordinating remediation.
• Familiarity with SAST/DAST and dependency scanning tools.

Responsibilities

• Analyze static code, SAST/DAST results and dependency scanning findings for security threats
• Assess vulnerabilities based on severity, exploitability, business impact and remediation urgency
• Support remediation activities with Dev and Ops teams without implementing code changes
• Define and promote secure coding standards for Java/Spring applications
• Support continuous improvement of Secure SDLC practices and bank-wide application security standards

Skills

Secure coding

Vulnerability assessment

Java programming

Spring / Spring Boot

Reverse engineering

Analytical thinking

Tools

SAST tools

DAST tools

Dependency scanning

Job description

Commerzbank AG - Poland is seeking a Senior Java Developer with a strong focus on application security to own and coordinate security topics in the development context. The role emphasizes reviewing existing code, analyzing findings, and guiding remediation without direct coding changes.

Candidates should bring deep Java expertise, knowledge of SAST/DAST, and the ability to work with Dev and Ops teams to promote secure SDLC practices within a banking environment.