Freelance Java Software Engineer – Maintenance & Security Fixes
A company is looking for a Freelance Java Software Engineer to support ongoing maintenance, security remediation, and bug fixing across multiple existing applications.
The role is primarily focused on analyzing security scan results, fixing vulnerabilities, updating outdated components, and ensuring build pipelines and Docker images remain compliant and secure.
This is a hands-on maintenance and remediation role, not feature development.
The mission is urgent and requires someone comfortable working on existing Java-based environments, refactoring code, and implementing sustainable fixes.
Responsibilities
- Analyze vulnerabilities reported by:
- Penetration tests
- Security scanners
- Dependency scanners (GitHub / build pipelines)
- Fix security issues in existing Java applications
- Perform bug fixing and corrective maintenance
- Refactor code to address security findings
- Update outdated dependencies and libraries
- Replace or update outdated Docker images
- Modify build configurations to comply with security standards
- Apply secure coding practices and improve code quality
- Ensure applications pass vulnerability scans (move from red to green)
- Implement long-term fixes to prevent recurring issues
- Investigate root causes and propose improvements
- Maintain and update technical documentation when needed
Technical Environment
- Java (main environment)
- Spring / Spring Boot (existing applications)
- Docker (image updates & maintenance)
- CI/CD pipelines (build chain remediation)
- Dependency management (Maven / Gradle)
- GitHub security scanning
- Security scan tools (SAST / dependency scanning)
- REST APIs & backend services
- Legacy code maintenance
Profile
- Strong experience in Java backend development
- Proven experience in maintenance / bug fixing roles
- Comfortable working on existing or legacy codebases
- Experience fixing security vulnerabilities
- Experience updating dependencies and frameworks
- Experience working with Docker images
- Good understanding of build pipelines
- Ability to refactor safely in production environments
- Autonomous and solution-oriented
- Comfortable investigating issues across multiple applications
Nice to Have
- Experience with OWASP guidelines
- Experience handling penetration test remediation
- Experience with dependency vulnerability management
- Experience improving CI/CD security
- Experience with container security best practices
Practical Information
- Freelance mission
- Urgent start
- 2 interview steps (technical + team fit)
- Hybrid setup (3 days onsite)
- French and English
