Senior Java Application Security Engineer (Remote)

Title: Senior Java Application Security Engineer

Location: Remote (US-based))

Job Type: W-2 Contract (4 Months)

Compensation: $82.70/hr - $97.74/hr W-2 with benefits

Industry: Retail

Hours: Must be able to work during U.S Central Time business hours

About The Role

We are partnering with a leading Fortune 50 retail organization to identify experienced Senior Java Application Security Engineer for a focused application security remediation initiative within their Corporate Finance technology group. Our client operates one of the nation's largest retail and e-commerce platforms, where enterprise-scale applications support critical financial and business operations.

As a consultant embedded within established engineering teams, you will remediate security findings, reduce technical debt, and strengthen the security posture of enterprise applications. This is a hands-on engineering role focused on executing remediation work within existing production systems—ideal for a senior Java engineer who can contribute quickly in a fast-paced Agile environment.

This position is intended for hands-on software engineers who execute application security remediation—not security architects, governance specialists, or policy-focused security professionals.

Job Description

You will work within existing engineering teams to triage, remediate, and validate application security findings across enterprise production applications. Success in this role means delivering high-quality, well-documented remediation work with minimal oversight while collaborating effectively across engineering, infrastructure, platform, and security teams.

Key Responsibilities

• Triage and prioritize application security findings from approved vulnerability management and scanning tools.
• Remediate application code vulnerabilities using secure coding best practices.
• Perform dependency, framework, library, runtime, and version upgrades while minimizing compatibility and regression risk.
• Resolve static analysis, software composition analysis (SCA), exposed secret, and repository security findings.
• Execute unit, integration, regression, and security testing to validate remediation efforts.
• Produce traceable remediation documentation, including pull requests, tickets, test results, scan results, and approval evidence.
• Collaborate with engineering, infrastructure, platform, and security teams to deliver remediation packages that meet defined acceptance criteria.
• Contribute reusable remediation patterns, documentation, and automation where appropriate.
  
  

Success Measures

Successful Consultants Will

• Deliver assigned remediation packages that meet documented acceptance criteria.
• Resolve or properly disposition security findings with complete supporting evidence.
• Complete dependency and framework upgrades that successfully pass validation testing.
• Demonstrate measurable reduction of the prioritized security backlog.
• Deliver reusable documentation and knowledge transfer that enables ongoing engineering support after the engagement.
  
  

Qualifications

Required Qualifications:

• 5 years of enterprise software engineering experience, including recent hands-on development in Java production environments with complex enterprise codebases.
• Experience working within Linux environments and using command-line (CLI) tools to support development, troubleshooting, and deployment activities.
• Hands-on experience remediating application security vulnerabilities within existing production applications and codebases.
• Direct experience with:
• Dependency and library upgrades
• CVE remediation
• Static analysis findings
• Software Composition Analysis (SCA)
• Secret remediation
• Secure application configuration
• Strong, hands-on experience with Gradle in enterprise production environments, including:
• Build configuration and maintenanc
• Dependency management
• Resolving dependency conflicts
• Troubleshooting build and compilation issues
• Upgrading and remediating vulnerable libraries and transitive dependencies
• Experience using Git-based development workflows, including pull requests, branch management, and code review processes.
• Knowledge of repository security controls, including code scanning, dependency alerts, secret scanning, and branch protections.
• Experience developing and supporting REST APIs.
• Experience building and executing automated unit, integration, regression, and security tests.

Preferred Qualifications:

• Experience working in Kotlin codebases, or the ability to quickly become productive within existing Kotlin applications.
• Experience with GitHub Advanced Security, Dependabot, Renovate, or comparable enterprise security tooling.
• Experience remediating vulnerabilities within JVM applications, microservices, APIs, or messaging platforms.
• Experience developing remediation automation, reusable engineering patterns, playbooks, or operational documentation.
  
  

Benefits

Dahl Consulting is proud to offer a comprehensive benefits package to eligible employees that will allow you to choose the best coverage to meet your family’s needs. For details, please review the DAHL Benefits Summary: https://www.dahlconsulting.com/benefits-w2fta/.

How To Apply

Take the first step on your new career path! To submit yourself for consideration for this role, simply click the apply button and complete our mobile-friendly online application. Once we’ve reviewed your application details, a recruiter will reach out to you with next steps!

Equal Opportunity Statement

As an equal opportunity employer, Dahl Consulting welcomes candidates of all backgrounds and experiences to apply. If this position sounds like the right opportunity for you, we encourage you to take the next step and connect with us. We look forward to meeting you!