Java Developer – Web Apps Security Remediation

Java Developer – Web Security Remediation Contract: 6 months + Location: Toronto (light hybrid/(remote is possible for Sr candidates outside of GTA) Main Deliverables • Remediate vulnerabilities in legacy Java web applications. • Upgrade outdated libraries and dependencies. • Maintain and enhance applications built on older Java web technologies. • Deliver code fixes through established development and source control processes. Technical Stack • Java (Java-based web applications built on legacy technologies) • JSP (JavaServer Pages) • Servlets • Traditional Java Web Frameworks • Vulnerability remediation (tools such as Checkmarx or Snyk) • Maven / Gradle • Git • Eclipse IDE • Jira • Spring Framework • Apache Commons FileUpload Requirements • 7+ years of Java web application development experience. • Strong hands-on experience with legacy Java applications • Deep expertise with JSP, Servlets, and traditional Java frameworks. • Familiarity with secure coding principles. • Experience working with vulnerability remediation (fixing identified vulnerabilities and upgrading outdated libraries) • Experience modifying, debugging, and maintaining mature enterprise codebases. • Experience upgrading Java libraries and dependencies using Maven or Gradle. • Strong understanding of dependency management and version upgrades. • Proficiency with Git, including branching, pull requests, and code reviews. • Experience using Eclipse IDE for Java development. Responsibilities • Analyze and remediate vulnerabilities identified through automated scanning tools. • Modify and maintain legacy Java web applications built with JSP, Servlets, and traditional frameworks. • Upgrade vulnerable or unsupported libraries while ensuring application stability. • Resolve issues related to outdated dependencies and framework versions. • Perform testing and validation of code changes after remediation activities. • Manage source code changes through Git-based workflows and peer-reviewed pull requests. • Track remediation work and development activities using Jira. • Support ongoing maintenance and modernization efforts for legacy enterprise applications.