Senior Java Developer with strong Application Security Focus (m/f/d)

Commerzbank AG - Poland; Poland; On-site; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Development plans

Life insurance

Flexible hours

Team integration events

Job summary

Commerzbank AG - Poland is seeking a Senior Java Developer with a strong focus on application security to own and coordinate security topics in the development context. The role emphasizes reviewing existing code, analyzing findings, and guiding remediation without direct coding changes.

Candidates should bring deep Java expertise, knowledge of SAST/DAST, and the ability to work with Dev and Ops teams to promote secure SDLC practices within a banking environment.

Qualifications

• Senior Java developer with hands-on Java experience and secure coding mindset.
• Experience reviewing code, analyzing security findings and coordinating remediation.
• Familiarity with SAST/DAST and dependency scanning tools.

Responsibilities

• Analyze static code, SAST/DAST results and dependency scanning findings for security threats
• Assess vulnerabilities based on severity, exploitability, business impact and remediation urgency
• Support remediation activities with Dev and Ops teams without implementing code changes
• Define and promote secure coding standards for Java/Spring applications
• Support continuous improvement of Secure SDLC practices and bank-wide application security standards

Skills

Secure coding

Vulnerability assessment

Java programming

Spring / Spring Boot

Reverse engineering

Analytical thinking

Tools

SAST tools

DAST tools

Dependency scanning

Job description

Senior Java Developer – Application Security Focus (m/f/d)

Senior Java Developer with strong application security focus is a security‑minded senior developer role, requiring deep hands‑on Java development experience and the ability to understand complex Java‑based applications. The primary purpose is to take ownership of application security topics and vulnerability remediation within the development context. The position is not for direct code development.

The candidate will review existing application code, analyze security findings and potential defects, assess vulnerabilities based on severity, exploitability, business impact, and remediation urgency, and provide expert guidance on robust remediation approaches. This includes knowledge of AI‑supported code analysis methods and application security tooling such as SAST, DAST, dependency scanning, and vulnerability management solutions. A core responsibility is to own and coordinate application security topics for the development team, drive vulnerability remediation follow‑up, and support developers with experience‑based recommendations while the actual implementation remains with the development teams.

By combining senior development expertise with a strong security mindset, the role helps safeguard the integrity, confidentiality, and availability of applications, strengthens secure development practices, and ensures that vulnerability remediation is understood, prioritized, tracked, and technically guided.

You will be responsible for

• Analyze static code, SAST/DAST results and dependency‑scanning findings for security threats
• Assess vulnerabilities based on severity, exploitability, business impact and remediation urgency
• Support and track remediation activities together with Dev and Ops teams without directly implementing code changes
• Act as technical counterpart for central teams in the context of Cyber / IT security
• Define and promote secure coding standards for Java/Spring applications
• Support continuous improvement of Secure SDLC practices and bank‑wide application security standards

Technology & skills

• High knowledge of secure coding, vulnerability identification and application security
• High knowledge of Java programming and scripting
• High knowledge of strong code analysis and reverse engineering skills
• High knowledge of impact and risk assessment of code changes
• Good knowledge of Spring, Spring Boot
• Good knowledge of problem‑solving and analytical thinking

Location

Remotely or hybrid on Ogrodoa 8 (Łódź)

Benefits

• Development plans for employees
• Life insurance
• Flexible working hours
• Integration events