Senior Java Developer - Flood Services / Security Vulnerabilities

We are looking for a Senior Java Developer to join the Flood Services team and lead the remediation of security vulnerabilities across a portfolio of business-critical enterprise applications. The ideal candidate brings deep hands-on expertise with Java and the Spring ecosystem, a strong security mindset, and a proven track record of driving complex technical initiatives in mature enterprise environments. You should be comfortable owning end-to-end solutions, mentoring other engineers, influencing technical decisions, and engaging directly with stakeholders. Experience with Angular is a nice-to-have, as some applications include front-end components that may also require updates. The applications are established enterprise systems with multiple business-critical workflows and integrations. As a Senior Java Developer, you will play a key role in shaping the security posture, architectural quality, and long-term maintainability of the Flood platform. Responsibilities Lead the analysis and remediation of security vulnerabilities identified across Flood applications Design, develop, and maintain backend functionality using Java and Spring, ensuring high standards of quality, performance, and security Perform in-depth investigation of existing code and define robust solutions that address vulnerabilities without compromising business functionality Drive upgrades of vulnerable libraries, frameworks, and application dependencies, including impact assessment and migration planning Define and promote secure coding standards and best practices across the team Troubleshoot and resolve complex application issues resulting from security fixes, dependency upgrades, or legacy implementations Own the quality of delivered solutions by writing clean, maintainable, and secure code Lead code reviews and mentor other developers, sharing knowledge on security, architecture, and Java best practices Collaborate closely with developers, QA engineers, product stakeholders, and other members of the Flood Services team, providing technical guidance and decision support Contribute to front-end changes where needed if Angular experience is available Drive continuous improvement of application security, technical quality, and engineering processes Participate in technical discussions with architects and stakeholders to influence the platform's evolution Requirements 3+ years of commercial software development experience with Java Expert-level knowledge of the Spring Framework and Spring Boot, including advanced features and internals Proven experience working with complex enterprise applications and large legacy codebases Strong understanding of REST APIs, backend architecture, application security principles (OWASP Top 10), and secure coding practices Demonstrated ability to independently investigate security findings, identify root causes, and design and implement effective, production-grade fixes Solid experience with dependency and framework upgrades, including resolving compatibility issues in large-scale systems Advanced troubleshooting and problem-solving skills, with the ability to reason about complex, poorly documented systems Experience mentoring engineers, leading technical initiatives, and driving decisions in cross-functional teams Ability to work autonomously and take ownership of complex deliverables within a distributed team Strong English communication skills (B2 level or higher), including the ability to interact effectively with stakeholders Nice to have Experience with Angular Hands-on experience leading security vulnerability remediation projects Proficiency with security scanning and static analysis tools (e.g., SonarQube, Checkmarx, Snyk, Veracode) Expertise in modernizing, refactoring, or maintaining large enterprise applications Solid knowledge of CI/CD pipelines and automated testing strategies Experience defining architectural or security guidelines at team or product level We offer International projects with top brands Work with global teams of highly skilled, diverse peers Healthcare benefits Employee financial programs Paid time off and sick leave Upskilling, reskilling and certification courses Unlimited access to the LinkedIn Learning library and 22,000+ courses Global career opportunities Volunteer and community involvement opportunities EPAM Employee Groups Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.