{"id":1944043,"url":"https://alion.io/job/majesco-lead-engineer","title":"Lead Engineer","company":{"id":58670,"name":"Majesco","domain":"majesco.com","url":"https://alion.io/company/majesco","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19000,"max_usd":57000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":8},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"CWE","optional":false},{"name":"Gradle","optional":false},{"name":"Java","optional":false},{"name":"Jenkins","optional":false},{"name":"JUnit","optional":false},{"name":"Keycloak","optional":false},{"name":"Maven","optional":false},{"name":"Mockito","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Rest API","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"Spring Boot","optional":false},{"name":"Spring Security","optional":false},{"name":"AWS","optional":true},{"name":"Docker","optional":true},{"name":"Fortify","optional":true},{"name":"Kotlin","optional":true},{"name":"Kubernetes","optional":true},{"name":"OWASP ASVS","optional":true},{"name":"OWASP ZAP","optional":true},{"name":"Threat Modeling","optional":true},{"name":"Veracode","optional":true}],"status":"live","first_seen_at":"2026-10-06T02:19:26Z","employer_posted_date":null,"last_verified_at":"2026-10-06T02:19:26Z","board_verified":false,"closed_at":null,"days_open":7,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":7},"description":"Job Description\n\nDescription for Internal Candidates\n\nAbout The Role\n\nWe are seeking a hands-on Java Spring Boot Developer with strong application-security experience. The successful candidate will develop and maintain Java applications while independently analyzing, remediating, and validating vulnerabilities identified through Snyk, SonarQube, penetration testing, and VAPT assessments.\n\nThis role requires practical experience in secure coding, dependency management, authentication and authorization, security-focused code reviews, and DevSecOps. The candidate must be comfortable tracing security findings to source code or dependencies, implementing appropriate fixes, and providing evidence of successful remediation with minimal supervision.\n\nKey responsibilities\n\nDevelop, enhance, and maintain Java, Spring Boot, REST API, and microservices applications.\nAnalyze security findings reported by Snyk, SonarQube, penetration tests, and VAPT assessments.\nIdentify vulnerability root causes, affected code paths, dependency relationships, exploitability, and business impact.\nRemediate vulnerabilities through secure code changes, dependency upgrades, configuration changes, or approved mitigating controls.\nAddress application-security issues involving authentication, authorization, access control, input validation, injection, secrets management, session management, file handling, logging, and secure configuration.\nAnalyze direct and transitive dependency vulnerabilities and recommend upgrades, replacements, patches, or risk-based mitigation.\nPerform CVE, CWE, and CVSS-based risk assessment and remediation prioritization.\nReview and resolve findings from penetration testing and VAPT reports, including authentication bypass, exposed secrets, IDOR, XSS, CSRF, insecure file upload, and missing rate limiting where applicable.\nImplement and review authentication and authorization controls using Spring Security, OAuth 2.0, JWT, Keycloak, or similar frameworks.\nParticipate in security-focused code reviews and recommend secure-coding improvements.\nDevelop or update unit, integration, regression, and security tests to validate remediation and prevent recurrence.\nRe-run Snyk and SonarQube scans after fixes and document remediation evidence and closure status.\nCollaborate with development, QA, DevOps, and information-security teams to embed security checks into CI/CD pipelines.\nProvide clear technical documentation, remediation notes, risk explanations, and status updates.\nIndependently manage assigned vulnerabilities through analysis, implementation, testing, and verified closure.\n\nMandatory Qualifications And Skills\n\nStrong hands-on experience in Java and Spring Boot application development.\nExperience developing secure RESTful APIs and microservices.\nDemonstrated experience analyzing and remediating vulnerabilities reported by Snyk.\nHands-on experience with SonarQube, including resolving security hotspots, vulnerabilities, bugs, and code-quality issues.\nExperience implementing fixes for penetration-testing and VAPT findings.\nGood knowledge of Maven or Gradle dependency management.\nUnderstanding of CVE, CWE, CVSS, OWASP Top 10, vulnerability severity, and remediation prioritization.\nExperience with Spring Security and authentication and authorization frameworks such as OAuth 2.0, JWT, or Keycloak.\nExperience writing unit and integration tests using JUnit, Mockito, or equivalent tools.\nFamiliarity with Jenkins or another CI/CD platform and DevSecOps practices.\nAbility to work independently with security scan reports and implement fixes with minimal guidance.\nStrong debugging, analytical, documentation, and communication skills.\n\nPreferred Qualifications\n\nExperience in insurance, banking, financial services, or another regulated industry.\nExposure to OWASP ASVS, secure API design, threat modeling, or application-security standards.\nExperience with Burp Suite, OWASP ZAP, Black Duck, Fortify, Veracode, or similar tools.\nExperience with Docker, Kubernetes, AWS, or cloud-native applications.\nRelevant application-security certification or formal security training.","description_format":"text","description_chars":4112,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-06T05:09:30Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 36 · green card filings: 14","filings_12m":36,"filings_prev_12m":41,"green_card_filings_12m":14,"median_offered_wage_usd":143900,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":85,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.846,"p_room":1,"age_days":7,"expected_fill_days":23,"reasons":["seen:7","win:early"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/majesco-lead-engineer","json_url":"https://alion.io/job/majesco-lead-engineer.json","meta":{"generated_at":"2026-10-13T05:56:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9197,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58670},"rest":"https://alion.io/mcp/rest/get_company?id=58670"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmajesco-lead-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmajesco-lead-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmajesco-lead-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/majesco-lead-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmajesco-lead-engineer"}]}