Position Overview: As a Senior Java Engineer - Application Security Specialist, you will play a crucial role in ensuring the security of our Java-based applications within the banking sector. As a Java expert, the vulnerabilities of application security of various Java applications (single page apps) need to be remediated and also upgraded not just the version but also business logic a. These vulnerabilities result from either running old versions of libraries and code that needs to be upgraded b. Could also be because the business logic is written poorly – with SQL injection attacks for example – to be remediated c. The parameters in the cloud are insecurely configured – AWS mainly You will be responsible for identifying, assessing, and remediating security vulnerabilities across various Java applications, employing your deep understanding of Java programming principles and application security best practices. Key Responsibilities: Collaborate with teams to implement Java application security measures. Perform thorough security assessments, including code reviews and testing. Analyze risks and suggest solutions to ensure compliance. Develop secure coding practices for Java teams. Stay updated on security trends and recommend countermeasures. Integrate security controls throughout development. Act as a security expert, guiding team members and promoting awareness. Partner with external vendors to address security challenges. Qualifications: Bachelor's degree in Computer Science, Information Technology, or a related field. Advanced degree or relevant certifications (e.g., CISSP, CEH) is a plus. Extensive experience in Java software development, with a strong understanding of Java frameworks, libraries, and security mechanisms. Proven track record in identifying and remediating security vulnerabilities within Java applications, preferably in the banking or financial services sector. Hands-on experience with security assessment tools and methodologies, such as static analysis, dynamic analysis, and threat modeling. In-depth knowledge of common application security vulnerabilities (e.g., OWASP Top 10) and mitigation techniques. Familiarity with secure coding practices, cryptographic algorithms, authentication mechanisms, and access control models. Excellent communication skills, with the ability to effectively convey complex technical concepts to both technical and non-technical stakeholders. Strong problem-solving skills and attention to detail, with a proactive and results-oriented approach to security. Must be able to work in Melbourne (hybrid option can be considered) Join us in our mission to safeguard the integrity and confidentiality of our banking applications while delivering exceptional customer experiences. If you are passionate about application security and possess the requisite Java expertise, we invite you to apply for this exciting opportunity to make a meaningful impact in the financial services industry!