Programming, consulting and other computing activities

Full Time

Employee

Telecommunications

Application Security Engineer (Java)

Published 27 of October

At Cafeto Software, we re looking for an Application Security Engineer with a strong Java background to strengthen the security posture of an enterprise application for a US-based pricing software company. You ll identify, prioritize, and fix vulnerabilities across the codebase, its dependencies, and its delivery pipeline.

Minimum requirements

What you’ll do

- Triage and remediate security vulnerabilities and CVEs reported by scanning tools.
- Upgrade libraries, frameworks, and dependencies, resolving breaking changes.
- Refactor code to eliminate insecure patterns such as injection, unsafe deserialization, and weak cryptography.




- Write tests that verify fixes and prevent regressions.
- Document findings and track progress with security and engineering stakeholders.

What we’re looking for

- 3 to 5 years of backend experience, primarily in Java.
- Experience managing dependencies in Maven or Gradle projects.
- Working knowledge of OWASP Top 10, CVE/CVSS, and secure coding practices.
- Advanced English and the ability to work with distributed teams across US time zones.

Nice to have

- Snyk, Mend, Dependabot, SonarQube, or Trivy.
- Spring, Dropwizard, Jersey, or Hibernate.
- Docker, Kubernetes, or Azure DevOps.

#J-18808-Ljbffr

📌 Application Security Engineer (Java) (Bogotá)
🏢 Cafetosoftware
📍 Bogotá