What are the responsibilities and job description for the Application & Cloud Security Engineer (Java / DevSecOps) position at Jobs via Dice?
Dice is the leading career destination for tech experts at every stage of their careers. Our client, Datum Software, Inc., is seeking the following. Apply via Dice today!
Role: Application & Cloud Security Engineer (Java / DevSecOps)
Location: Alpharetta - hybrid (onsite 3 day/week)
Role Overview
Our client is looking for a hands-on Application & Cloud Security Engineer with strong Java and cloud experience to support vulnerability remediation, secure coding, and DevSecOps enablement. This role is focused on fixing security issues, not just identifying them.
The ideal candidate is a security engineer first, with the ability to work directly in Java codebases, CI/CD pipelines, containers, and cloud environments to reduce risk across modern, cloud-hosted applications.
What You''ll Do
Security & Cloud
Role: Application & Cloud Security Engineer (Java / DevSecOps)
Location: Alpharetta - hybrid (onsite 3 day/week)
Role Overview
Our client is looking for a hands-on Application & Cloud Security Engineer with strong Java and cloud experience to support vulnerability remediation, secure coding, and DevSecOps enablement. This role is focused on fixing security issues, not just identifying them.
The ideal candidate is a security engineer first, with the ability to work directly in Java codebases, CI/CD pipelines, containers, and cloud environments to reduce risk across modern, cloud-hosted applications.
What You''ll Do
- Remediate security vulnerabilities in Java / J2EE applications deployed in cloud environments
- Analyze and fix findings from SAST, DAST, SCA, container, and cloud security scans
- Address OWASP Top 10, CVEs, dependency vulnerabilities, and misconfigurations
- Harden applications: authentication, authorization, API security, encryption, secrets management
- Embed security into CI/CD pipelines (GitHub or GitLab) with scans and quality gates
- Partner with DevOps teams on container security (Docker) and runtime hardening
- Review cloud configurations (AWS and/or Azure) and remediate security gaps
- Support patching, upgrades, and vulnerability SLAs
- Assist with incident triage, root cause analysis, and security defect resolution
- Clearly document fixes, risks, and remediation guidance
Security & Cloud
- Strong background in application security and vulnerability remediation
- Hands-on experience securing applications in AWS and/or Azure
- Knowledge of IAM, network security, secrets management, logging, monitoring
- Familiarity with OWASP Top 10, CVEs, secure coding standards
- Experience working in DevSecOps or Cloud Security environments
- Strong hands-on experience with Java 8 and Java 21
- Solid experience with Spring Boot / Spring Framework (Security, MVC, Data)
- Experience securing REST and SOAP APIs
- Experience with Tomcat or JBoss
- Understanding of secure system design and architecture
- Experience integrating security into CI/CD pipelines (GitHub or GitLab)
- Hands-on exposure to Docker container security
- Experience with JUnit, Mockito, and security-focused testing
- Working knowledge of SQL and database security
- Experience working with SNYK, Dependabot, Wiz
- Exposure to Node.js, TypeScript (security perspective)
- Kafka, Redis, or distributed systems security
- Kubernetes security concepts
- Compliance or regulated environment experience
- Security-focused engineer, not a general backend developer
- Strong remediation mindset—able to fix issues, not just report them
- Able to ramp up quickly in a contract role
- Comfortable working independently and delivering against timelines
- Strong communication and documentation skills