Software Developer

Job Description – Principal Software Developer

Location – Noida

Work from office – Hybrid

Exp: 8-12 years

This is an individual contributor role based in Noida. Hands-on Java development and Security Operations (SecOps)

• 8–12 years of professional software engineering experience, with a strong track record of designing and delivering large-scale, production-grade systems.

• Proficiency in developing and maintaining Java Spring Boot–based applications, REST APIs, and event-based architecture

• Hands-on experience designing and operating JMS-based (or similar message-broker-based) service architectures.

• Strong experience with transactional databases (e.g., Oracle, PostgreSQL, SQL Server), including transaction management, data consistency, and performance optimization.

• Solid working knowledge of AWS services (e.g., EC2, S3, RDS, Lambda, ECS/EKS, IAM) and cloud architecture best practices.

• Practical experience building and maintaining CI/CD pipelines with GitHub and GitHub Actions (or comparable tools).

• Strong understanding of software design patterns, distributed systems concepts, and enterprise integration patterns.

• Experience in the financial services, asset management, or capital markets domain is a strong plus.

• Excellent communication skills, with the ability to influence technical direction across teams without direct authority.

• A pragmatic, quality-first mindset with a track record of balancing technical excellence and delivery timelines.

• Proven experience remediating security vulnerabilities in Java applications and their dependencies, including working with SCA tools (e.g., Snyk, Dependency-Check, GitHub Dependabot) and SAST/DAST scanners.

Solid understanding of secure coding practices (e.g., OWASP Top 10) and common vulnerability classes affecting Java, JMS.

Candidates should preferably have experience in:

• Managing a security scanning pipeline end-to-end
• Working with CI/CD security integration
• Hands-on experience with:
• SAST (Static Application Security Testing)
• SCA (Software Composition Analysis)
• Container Security Scanning
• Strong understanding of OWASP Top 10 vulnerabilities and remediation techniques
• Demonstrated ability to independently identify, investigate, and fix application security vulnerabilities, rather than only reporting them to development teams
• Experience in secure coding practices and security-focused software development

Additional Preferred Experience (Good to Have)

While not mandatory, candidates with exposure to compliance and audit frameworks will be highly valued:

• Support for SOC 2, ISO 27001, or similar audits
• Experience providing security evidence, reports, and controls validation from security tooling and platforms
• Participation in security governance, risk, and compliance activities