Senior IT Developer

The position is for a developer contributing to the Automated Security Retest Engine, a security retesting platform automating security assessment report analysis and remediation verification. The company operates in the security domain developing and maintaining Python-based processing pipelines and Java Spring Boot web applications.

• Professional software development experience in Python and/or Java
• Experience developing and maintaining backend applications and REST APIs
• For Java: familiarity with Spring Boot and common development practices
• For Python: familiarity with modular application design, dependency management, and automated testing
• Experience writing and maintaining automated tests
• Working knowledge of Git and collaborative workflows including code reviews
• Understanding of secure software development: input validation, authentication, authorization, safe secret handling
• Ability to analyze existing codebases, troubleshoot, deliver changes with documentation
• Good written and spoken English for technical communication

Nice to have:

• Experience with both Python and Java Spring Boot
• Experience integrating LLM APIs or building LLM-assisted workflows with structured-output validation and error handling
• Familiarity with application security testing, especially DAST and SAST
• Experience with tools such as OWASP ZAP, Nuclei, Semgrep, pytest, or security test automation
• Experience with PDF processing, OCR, or document extraction
• Familiarity with web technologies such as JavaScript, HTML, CSS, Bootstrap, and Thymeleaf
• Experience with SQL databases, Maven, CI/CD, Docker, or cloud services
• Interest in application security, vulnerability remediation, and security engineering

• Develop and maintain the Python processing pipeline and Java Spring Boot web application UI
• Design and implement new features
• Integrate external tools and APIs
• Improve reliability and quality of automated tests and analysis
• Write and maintain automated tests
• Investigate and fix defects
• Maintain technical documentation
• Collaborate with security and product stakeholders to translate requirements
• Ensure security by preserving scope restrictions, protecting credentials and user data, validating inputs, and providing reliable evidence for retesting outcomes

Preferred office location is 3-city and Warsaw. Office presence required at least 3 days per week as per Nordea office requirement.