Java Developer - AWS Cloud

TechDigital Group; New York (NY); Hybrid; USD 120,000 - 170,000; Full time

Job summary

TechDigital Group is seeking a developer to proactively remediate vulnerabilities across our Java/Spring Boot platform services. The role focuses on a disciplined, recurring upgrade cycle with occasional Python work, leveraging AI-assisted tooling and CI/CD pipelines.

You will primarily work in Java/Spring Boot codebases while touching Python services within the same ecosystem, ensuring upgrades remain ahead of security findings and do not disrupt deployments.

Qualifications

• Must develop in Java 17/21 and manage Maven-based projects.
• Must maintain Spring / Spring Boot services and CI/CD pipelines.
• Must use GitHub and Jenkins for builds and deployments.
• Experience with Python in platform services is a plus.

Responsibilities

• Remediate vulnerabilities in Java/Spring Boot platform services on a twice-weekly cycle.
• Upgrade dependencies and manage Maven BOMs and transitive dependencies.
• Analyze Mythos and Snyk findings, assess risk, and apply fixes.
• Validate upgrades to avoid regressions in build, test, deploy.
• Coordinate with security and release teams on SLAs.
• Occasionally remediate Python dependencies in platform services.

Skills

Java 17/21

Maven

Spring / Spring Boot

GitHub

Jenkins pipelines

Python 3.x

pip / requirements.txt / Poetry

React

Node.js / NPM

Tools

AWS (ECS, Lambda, IAM)

Docker

Terraform

Git

Job description

We're hiring a developer to proactively remediate vulnerabilities across our Java/Spring Boot platform services on a twice-per-week cadence. This isn't firefighting — it's disciplined, recurring upgrade work that keeps our platform ahead of security findings before they become blockers. You'll work primarily in Java/Spring Boot codebases but will also touch Python services that live within the same platform ecosystem. You'll leverage AI-assisted tooling and CI/CD pipelines to accelerate the remediation cycle.

What You'll Do

• Remediate library vulnerabilities across platform services on a twice-weekly cycle
• Upgrade and manage dependencies (Maven BOMs, parent POMs, transitive dependencies)
• Analyze Mythos and Snyk findings, assess severity/impact, and apply fixes
• Validate upgrades don't introduce regressions (build, test, deploy)
• Maintain compatibility across shared libraries consumed by multiple services
• Work with AI-assisted remediation tooling to accelerate upgrade workflows
• Coordinate with security and release teams on vulnerability SLAs
• Occasionally remediate Python dependencies (pip/requirements.txt) in platform services

Required Skills

Primary (Must-Have)

• Java 17/21
• Maven
• Spring / Spring Boot
• GitHub
• Jenkins pipelines

Secondary

• Python 3.x
• pip / requirements.txt / Poetry
• React
• Node.js / NPM

Cloud & Infrastructure

• AWS (ECS, Lambda, IAM)
• Docker
• Terraform
• Git

AI & Automation

• AI-assisted coding (AWS Kiro or similar)
• Familiarity with LLM-driven workflows
• Automation mindset

Security & Compliance

• SCA tools (Mythos, Snyk, or similar)
• Vulnerability lifecycle management
• CVSS scoring & risk assessment
• Compliance awareness

Nice to Have

• Strong experience with SDLC, DevOps, and CI/CD pipelines
• Experience managing upgrades at scale across 10+ microservices
• Familiarity with Apache Camel or integration-heavy Spring services
• Background in financial services / insurance (regulated environment)
• Experience with OpenSearch or Elasticsearch library upgrades
• Comfort with NestJS/Node.js (some platform tooling uses this)