Mainframe Developer_Security Specialist

Role Description:

We are seeking a highly skilled and experienced Mainframe Security Specialty Developer. The ideal candidate will possess deep expertise in IBM Mainframe technologies and application security, with a strong focus on vulnerability remediation, secure software development, and modernization of business-critical COBOL applications.

The successful candidate will support large-scale vulnerability reduction initiatives, perform security-focused code analysis, remediate critical findings, and drive secure coding practices across the enterprise mainframe landscape.

Key Accountabilities & Responsibilities:

Security Engineering

• Analyze, assess, and remediate vulnerabilities identified through Application Security Testing (AST).
• Investigate and resolve security weaknesses within COBOL applications.
• Perform secure code reviews and vulnerability assessments.
• Collaborate with security architects and application owners to reduce application risk.

Mainframe Development

• Design, develop, enhance, and maintain COBOL-based business applications.
• Familiarity with assembler macros.
• Modify and optimize existing programs running on IBM z/OS environments.
• Refactor legacy applications to improve maintainability, security, and performance.

Vulnerability Remediation

• Analyse critical and high-risk security findings.
• Resolve REXX, RACF Injection and command execution weaknesses.
• Improve authorization and access-control implementations.

Modernization and Automation

• Support modernization of legacy platforms.
• Leverage AI-assisted development and code analysis tools.
• Contribute to automation of vulnerability remediation processes.
• Promote DevSecOps and security-by-design principles.

Key Competencies & Skills required

Technical Skills:

• Expertise in Mainframe Technologies COBOL, IBM z/OS, IMS-DC, JCL, DB2, TSO/ISPF, ISPW /BMC AMI DevX Code Pipeline
• Strong experience in Security Skills - RACF / ACF2, Application Security, AST, Vulnerability Analysis, Security Code Review
• Hands-on experience on Database Technologies - Embedded DB2 / Dynamic DB2 and Query Optimization
• Support implementation of Secure SDLC standards and best practices.

Nice to have:

• Good to have experience on Security tools - Checkmarx / Fortify / SonarQube
• Exposure to modern engineering tools - MQ Series , RDZ
• Familiarity with COBOL copybooks, assembler macros, and macro-driven code generation patterns in IBM z/OS environments, including the ability to understand and adapt legacy application logic

Behavioral Skills:

• Strong analytical and problem-solving skills.
• Ability to understand complex legacy application landscapes.
• Strong stakeholder communication and collaboration skills.
• Ability to translate security requirements into technical solutions.
• Passion for application modernization and secure software development.

Previous Experience & Qualifications

Minimum Educational Qualification:

• Bachelor or Master degree in information technology,Computer Science, or a related field.

Certification if any:

Years of Experience & Knowledge:

• 6-8 years of experience in Mainframe Application Development.
• Strong hands-on expertise in COBOL, DB2, CICS/ IMS-DC, and JCL.
• Experience supporting mission-critical enterprise applications.
• Proven experience in application security and vulnerability remediation.
• Experience working within highly regulated environments.
• Experience performing root-cause analysis and defect remediation.
• Strong collaboration with business and technical teams