Platform Engineer java

Shrive Technologies LLC; United States; Remote; USD 120,000 - 150,000; Full time

Job summary

Shrive Technologies LLC is seeking a remote Java/Spring Boot developer to proactively remediate vulnerabilities across our platform. You’ll upgrade dependencies, analyze Snyk/Mythos findings, and validate changes across multiple microservices.

Some Python tooling work may be required, with AI-assisted workflows to accelerate remediation. The role emphasizes disciplined, recurring upgrade work on a twice-weekly cadence, coordinating with security and release teams to meet SLAs while maintaining

Qualifications

• Must have Java 17/21, Maven, Spring Boot, GitHub, Jenkins pipelines.
• Secondary: Python 3.x, pip, requirements.txt, Poetry; React/Node.js; AWS; Docker; Terraform.
• Nice to have SDLC/DevOps experience; upgrades at scale across multiple services; familiarity with OpenSearch/Elasticsearch; NestJS/Node.js.

Responsibilities

• Remediate library vulnerabilities across platform services on a twice-weekly cycle.
• Upgrade and manage dependencies (Maven BOMs, parent POMs, transitive dependencies).
• Analyze Mythos and Snyk findings, assess severity/impact, and apply fixes.
• Validate upgrades don't introduce regressions (build, test, deploy).
• Maintain compatibility across shared libraries consumed by multiple services.
• Work with AI-assisted remediation tooling to accelerate upgrade workflows.
• Coordinate with security and release teams on vulnerability SLAs.
• Occasionally remediate Python dependencies (pip/requirements.txt) in platform services.

Skills

Java 17/21

Spring Boot

Maven

GitHub

Jenkins pipelines

Python

CI/CD

SCA tools

Vulnerability management

Automation mindset

Tools

Mythos

Snyk

OpenSearch/Elasticsearch

AWS Kiro

Terraform

Docker

Job description

About the Role

We're hiring a developer to proactively remediate vulnerabilities across our Java/Spring Boot platform services on a twice-per-week cadence. This isn't firefighting - it's disciplined, recurring upgrade work that keeps our platform ahead of security findings before they become blockers. You'll work primarily in Java/Spring Boot codebases but will also touch Python services that live within the same platform ecosystem. You'll leverage AI-assisted tooling and CI/CD pipelines to accelerate the remediation cycle.

What You'll Do

• Remediate library vulnerabilities across platform services on a twice-weekly cycle
• Upgrade and manage dependencies (Maven BOMs, parent POMs, transitive dependencies)
• Analyze Mythos and Snyk findings, assess severity/impact, and apply fixes
• Validate upgrades don't introduce regressions (build, test, deploy)
• Maintain compatibility across shared libraries consumed by multiple services
• Work with AI-assisted remediation tooling to accelerate upgrade workflows
• Coordinate with security and release teams on vulnerability SLAs
• Occasionally remediate Python dependencies (pip/requirements.txt) in platform services

Required Skills

• Primary (Must-Have) Java 17/21 Maven Spring / Spring Boot GitHub Jenkins pipelines
• Secondary Python 3.x pip / requirements.txt / Poetry React Node.js / NPM Cloud & Infrastructure AWS (ECS, Lambda, IAM) Docker Terraform Git AI & Automation AI-assisted coding (AWS Kiro or similar) Familiarity with LLM-driven workflows Automation mindset Security & Compliance SCA tools (Mythos, Snyk, or similar) Vulnerability lifecycle management CVSS scoring & risk assessment Compliance awareness
• Nice to Have Strong experience with SDLC, DevOps, and CI/CD pipelines Experience managing upgrades at scale across 10+ microservices Familiarity with Apache Camel or integration-heavy Spring services Background in financial services / insurance (regulated environment) Experience with OpenSearch or Elasticsearch library upgrades Comfort with NestJS/Node.js (some platform tooling uses this)

This is a remote position.