Security Reliability & Remediation Engineering Specialist (Java)

About the company

Experian is a global data and technology company that drives opportunities for people and businesses around the world. We operate in various markets, such as financial services, healthcare, automotive, agribusiness, insurance, among others. Experian invests in people and in new advanced technologies to unlock the power of data. We have an incredible team of 25,200 employees in 32 countries.

Our uniqueness is valuing yours. Experian's culture, which is people-centered, inclusive, and purpose-driven, is recognized by several awards — including World’s Best Workplaces™ 2025 (Fortune's Top 25 global) and Great Place To Work™ in 26 countries, among others. Check out Experian Life on social media or explore our careers website to understand why. Experian is also proud to be an employer that promotes equal opportunity and affirmative action.

Serasa Experian is much more than you imagine. With the purpose of creating a better future, expanding opportunities for people and businesses, in Brazil we are more than 4 thousand people acting in various teams and specialties. Here, every knowledge and diversity complements each other and you can work on what you love most; we are committed to building an inclusive culture and an environment in which people can balance their careers with their personal commitments and interests, prioritizing well-being.

We dedicate ourselves much to being one of the best and most innovative companies to work for in the country, enabling incredible experiences and careers for our people. Our strong people-first approach is recognized externally through various market certifications: we were awarded by Great Place To Work™ in 24 countries and by the international Top Employers certification, in addition to being recognized as one of the best companies for young professionals and having a 4.6 rating on Glassdoor. Each recognition indicates to us that we are on the right track, providing an increasingly better work environment for our talents.

Your tasks

We are looking for a Security Reliability & Remediation Engineering Specialist I with solid experience in Java software development to work on resolving vulnerabilities, strengthening applications, and implementing structural security improvements.

The position will work directly with Engineering and Security teams, analyzing code and architectures, investigating vulnerabilities, identifying root causes, and actively implementing corrections and improvements in the software.

Main responsibilities

• Analyze and remediate vulnerabilities directly in the code, focusing on applications and services developed in Java.
• Develop, review, test, and implement security fixes in applications and software components.
• Investigate vulnerabilities and security issues, performing root-cause analysis and proposing technical solutions.
• Work with Java applications and frameworks such as Spring/Spring Boot, applying secure development practices.
• Perform code reviews with a focus on security, quality, and reliability.
• Act in the secure updating of frameworks, libraries, and application dependencies.
• Develop tools and automations to accelerate vulnerability identification and remediation processes.
• Contribute to the security hardening of applications, APIs, services, and infrastructure components.
• Identify recurring classes of vulnerabilities and implement solutions that reduce their recurrence.
• Integrate security controls and checks into development processes and CI/CD pipelines.
• Work together with Product Security, Engineering, and other Security areas to prioritize and solve technical risks.
• Document solutions and share secure development practices with Engineering teams.

Requirements

We expect a person with a strong engineering profile, capable of acting hands-on in the code, automating processes, and collaborating with different teams, including global teams.

What we expect from a Specialist I We expect a person who combines Software Engineering and Security Engineering, with the capacity to act directly in the implementation of solutions.

The professional must be able to understand existing applications, navigate complex codebases, diagnose security problems, and implement fixes with production quality.

We also expect autonomy to solve complex technical problems, the ability to collaborate with different teams, and the skill to transform recurring vulnerabilities into permanent improvements in code, architecture, libraries, or engineering processes.

• Professional experience in software development, with solid experience in developing Java applications and services in production environments.
• Experience with Java and its ecosystem, including Spring/Spring Boot, REST APIs, automated tests, dependency management, and software development best practices.
• Experience or solid knowledge in Application Security, Secure Coding, or Security Engineering, including identification and remediation of vulnerabilities, OWASP Top 10, and API security.
• Practical experience in analyzing and correcting vulnerabilities in code, including root-cause analysis, dependency updates, code review, hardening, and implementation of preventive controls.
• Experience with CI/CD, Git, SAST/SCA tools, and engineering process automation, with the ability to integrate security controls into the development cycle.
• Intermediate English