Application Hardening & Vulnerability Remediation Engineer

Synechron; Chicago (IL); Presencial; USD 140 000 - 190 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Comprehensive insurance plan including

Retirement savings plans

On-demand Udemy for Business access

Extensive training opportunities

Resumo da oferta

Synechron is seeking an experienced Application Security Engineer focused on hardening and remediation across diverse technology stacks. You will identify root causes of vulnerabilities, implement fixes, and drive secure practices across enterprise applications.

Ideal candidates will have hands-on vulnerability remediation experience, knowledge of CVE remediation, and familiarity with container security and cloud-native architectures.

Qualificações

• Hands-on experience fixing vulnerabilities in large enterprise applications.
• Experience remediating vulnerabilities across diverse technology stacks and codebases.
• Knowledge of CVE remediation, dependency upgrades, and container security best practices.

Responsabilidades

• Assess existing applications, analyze security findings, identify root causes and implement fixes across diverse technology stacks.
• Reduce Application Vulnerability Items (AVITs) and Container Vulnerability Items (CVITs) while promoting hardened platform standards.
• Collaborate with application teams to adopt automated remediation practices and secure coding standards.

Conhecimentos

Node.js

TypeScript

Python

C# / .NET

APIs & microservices

AWS

Docker

AKS/OpenShift

Cloud-native environments

Descrição da oferta de emprego

At Synechron, we believe in the power of digital to transform businesses for the better. Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions. Synechron’s progressive technologies and optimization strategies span end-to-end Artificial Intelligence, Consulting, Digital, Cloud & DevOps, Data, and Software Engineering, servicing an array of noteworthy financial services and technology firms. Through research and development initiatives in our FinLabs we develop solutions for modernization, from Artificial Intelligence and Blockchain to Data Science models, Digital Underwriting, mobile-first applications and more. Over the last 20+ years, our company has been honored with multiple employer awards, recognizing our commitment to our talented teams. With top clients to boast about, Synechron has a global workforce of 14,500+, and has 58 offices in 21 countries within key global markets.

The ideal candidate will be able to quickly assess existing applications, analyze security findings, identify root causes, and implement fixes across diverse technology stacks. This role requires strong software engineering skills, the ability to work across unfamiliar codebases, and experience leveraging AI-assisted development tools to accelerate vulnerability remediation and application modernization.

The position is focused on reducing Application Vulnerability Items (AVITs) and Container Vulnerability Items (CVITs) while helping application teams adopt hardened platform standards and automated remediation practices.

Required Technical Skills

• Node.js
• TypeScript
• Python
• C# / .NET
• Strong understanding of APIs, microservices, and modern application architectures
• AWS
• Docker
• AKS and/or OpenShift preferred
• Containerized and cloud-native application environments

Application Security & Hardening

• Secure coding practices
• OWASP Top 10
• Vulnerability remediation
• Dependency management and modernization
• SAST
• DAST
• Software Composition Analysis (SCA)
• Black Duck
• Container security scanning
• Open-source vulnerability remediation

Preferred Experience

• Hands-on experience fixing vulnerabilities rather than only identifying or reporting them.
• Experience remediating vulnerabilities in large enterprise applications.
• Strong knowledge of CVE remediation, dependency upgrades, application hardening, and container vulnerabilities.
• Experience using AI coding tools to analyze code, generate fixes, refactor applications, and accelerate remediation.
• Ability to quickly understand unfamiliar codebases and work across multiple technology stacks.
• Experience modernizing legacy applications and upgrading frameworks/libraries to supported versions.

We offer:

• A highly competitive compensation and benefits package.
• A multinational organization with 58 offices in 21 countries and the possibility to work abroad.
• 10 days of paid annual leave (plus sick leave and national holidays).
• Maternity & paternity leave plans.
• A comprehensive insurance plan including medical, dental, vision, life insurance, and long-/short-term disability (plans vary by region).
• Retirement savings plans.
• A higher education certification policy.
• Commuter benefits (varies by region).
• Extensive training opportunities, focused on skills, substantive knowledge, and personal development.
• On-demand Udemy for Business for all Synechron employees with free access to more than 5000 curated courses.
• Coaching opportunities with experienced colleagues from our Financial Innovation Labs (FinLabs) and Center of Excellences (CoE) groups.
• Cutting edge projects at the world’s leading tier-one banks, financial institutions and insurance firms.
• A flat and approachable organization.
• A truly diverse, fun-loving, and global work culture.

SYNECHRON’S DIVERSITY & INCLUSION STATEMENT

Diversity & Inclusion are fundamental to our culture, and Synechron is proud to be an equal opportunity workplace and is an affirmative action employer. Our Diversity, Equity, and Inclusion (DEI) initiative ‘Same Difference’ is committed to fostering an inclusive culture – promoting equality, diversity and an environment that is respectful to all. We strongly believe that a diverse workforce helps build stronger, successful businesses as a global company. We encourage applicants from across diverse backgrounds, race, ethnicities, religion, age, marital status, gender, sexual orientations, or disabilities to apply. We empower our global workforce by offering flexible workplace arrangements, mentoring, internal mobility, learning and development programs, and more.

All employment decisions at Synechron are based on business needs, job requirements and individual qualifications, without regard to the applicant’s gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law.