Full Stack Engineer- Security Remediation
Summary
Senior full stack developer (Java/Spring Boot, ReactJS) on a 1+ year contract in Changi, Singapore, hardening an internet banking platform: applying security patches, remediating OWASP Top 10 vulnerabilities, running secure code reviews, and supporting audits and pen-test remediation.
Position: Senior Full Stack Developer (Java / ReactJS) - Security Remediation
Duration: 1 + year contract
Location: Changi
Job Description
We are seeking an experienced Senior Full Stack Developer to join our team and play a critical role in maintaining and enhancing the security posture of our internet banking platform. The ideal candidate will have strong expertise in secure full stack development and experience in identifying, remediating, and preventing security vulnerabilities in mission-critical financial systems.
Key Responsibilities
- Implement security patches and fixes across frontend and backend applications.
- Conduct code reviews focused on secure coding practices and vulnerability prevention.
- Ensure compliance with security guidelines, industry standards, and regulatory requirements.
- Participate in security audits, vulnerability assessments, and penetration testing remediation.
- Develop, test, and maintain secure, scalable, and high-performance web applications.
- Design and implement secure RESTful APIs and microservices using Spring Boot.
- Participate in architectural discussions and provide security-focused technical recommendations.
Required Experience
- 5 to 7+ years of professional software development experience.
- Proven experience with enterprise-scale internet-facing applications.
- Strong background in security vulnerability remediation and secure coding.
- Banking, financial services, or payment systems experience is highly preferred.
Technical Skills
Frontend
- Experience building secure, responsive, and high-performance web applications.
- Strong expertise in Java and Spring Boot.
- Experience with Spring Security and authentication/authorization frameworks.
- Strong knowledge of RESTful APIs and microservices architecture.
- Experience with PostgreSQL, MySQL, or MSSQL.
Security & DevOps
- Deep understanding of OWASP Top 10 vulnerabilities and remediation techniques.
- Experience with secure coding standards and security testing tools.
- Knowledge of OAuth2, OIDC, SAML2, and JWT.
- Familiarity with CI/CD pipelines, DevOps practices, and automated security testing.