Senior Technical Lead

Job Summary

Role Summary

Own end-to-end security across frontend and backend stacks by driving CVE remediation, secure coding practices, and full-stack hardening.

Key Responsibilities

Key Responsibilities

• Triage and remediate CVEs across frontend (pnpm/npm) and backend (Java/Maven)

• Perform root-cause analysis and implement well-tested fixes across the stack

• Harden vulnerabilities: XSS, CSRF, injection, secrets exposure, broken authentication, IDOR

• Extend GitLab security scanning to frontend build artefacts

• Collaborate with tech leads on security-sensitive code reviews

• Handle minor full-stack bugfixes to maintain delivery velocity

• Contribute to security incident post-mortems and documentation

Skill Requirements

Required Skills

• Strong experience in Java and TypeScript/JavaScript

• Hands-on experience with Vue 3/Nuxt or comparable frontend frameworks

• Understanding of web security: XSS, CSRF, injection, auth, dependency risks, secrets management

• Ability to interpret CVE advisories and implement fixes

• Knowledge of container security (Docker, Kubernetes basics)

• Experience with Git, GitLab CI/CD pipelines, Maven and pnpm

• Structured problem-solving with good documentation practices

Other Requirements

Good to Have

• Vuetify component library experience

• SAST/DAST tools (Snyk, Sonar Qube, OWASP ZAP)

• Content Security Policy (CSP) configuration

• pnpm workspace experience

Ideal Profile

Versatile full-stack engineer with strong security mindset, capable of balancing secure coding practices with rapid delivery across modern web and backend architectures.