Senior Java Developer with strong Application Security Focus (m/f/d)

Commerzbank Digital Technology Centre Poland; Łódź; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Development plans for employees

Life insurance

Flexible working hours

Integration events

Job summary

Commerzbank Digital Technology Centre Poland is seeking a Senior Java Developer with a strong focus on application security. The role centers on reviewing existing Java code, analyzing security findings and guiding remediation without directly changing production code.

You will collaborate with Dev and IT security teams, promote secure coding standards for Java/Spring, and contribute to Secure SDLC improvements across the bank.

Qualifications

• High knowledge of secure coding, vulnerability identification and application security
• High knowledge of Java programming and scripting
• High knowledge of strong code analysis and reverse‑engineering skills
• High knowledge of impact and risk assessment of code changes
• Good knowledge of Spring, Spring Boot
• Good knowledge of problem‑solving and analytical thinking

Responsibilities

• Analyze static code, SAST/DAST results and dependency‑scanning findings for security threats
• Assess vulnerabilities based on severity, exploitability, business impact and remediation urgency
• Support and track remediation activities together with Dev and Ops teams without directly implementing code changes
• Act as technical counterpart for central teams in the context of Cyber / IT security
• Define and promote secure coding standards for Java/Spring applications
• Support continuous improvement of Secure SDLC practices and bank‑wide application security standards

Skills

Secure coding

Vulnerability identification

Application security

Java programming

Scripting

Code analysis

Reverse engineering

Impact assessment

Spring

Spring Boot

Problem solving

Analytical thinking

Job description

Senior Java Developer with Strong Application Security Focus (m/f/d)

The role is a security‑minded senior developer focused on application security and vulnerability remediation within the development context. It does not involve direct coding but requires deep Java development experience and the ability to understand and review complex Java applications.

The candidate will review existing application code, analyze security findings and potential defects, assess vulnerabilities based on severity, exploitability, business impact and remediation urgency, and provide expert guidance on robust remediation approaches. Knowledge of AI‑supported code analysis, SAST, DAST, dependency scanning and vulnerability management solutions is essential. The role also involves owning and coordinating application security topics for the development team, driving vulnerability remediation follow‑up, and supporting developers with experience‑based recommendations while the actual implementation remains with the development teams.

You will be responsible for

• Analyze static code, SAST/DAST results and dependency‑scanning findings for security threats
• Assess vulnerabilities based on severity, exploitability, business impact and remediation urgency
• Support and track remediation activities together with Dev and Ops teams without directly implementing code changes
• Act as technical counterpart for central teams in the context of Cyber / IT security
• Define and promote secure coding standards for Java/Spring applications
• Support continuous improvement of Secure SDLC practices and bank‑wide application security standards

Required knowledge and skills

• High knowledge of secure coding, vulnerability identification and application security
• High knowledge of Java programming and scripting
• High knowledge of strong code analysis and reverse‑engineering skills
• High knowledge of impact and risk assessment of code changes
• Good knowledge of Spring, Spring Boot
• Good knowledge of problem‑solving and analytical thinking

Location and work mode

Remote or hybrid on location Ogrodoa 8 (Łódź)

Benefits

• Development plans for employees
• Life insurance
• Flexible working hours
• Integration events

We work in inter‑locational and international teamwork in agile methodologies.