Secure Dependency Management Expert Needed

Job Description (Current Role)

Role Focus

Application Security / Build & Dependency Management Engineer

Primary Responsibilities
• Monitor and manage dependency vulnerabilities using:
• Dependabot
• JFrog Xray
• Review and update Maven dependencies in pom.xml.
• Upgrade or exclude vulnerable libraries.
• Re-run Maven builds and ensure the application starts successfully after changes.
• Work mainly with Maven, pom.xml, and JFrog Artifactory/Xray.
• Validate builds (no endpoint or API testing required at this stage).


Tools & Technologies
• Java / Spring Boot
• Maven
• IntelliJ IDEA
• JFrog Artifactory
• JFrog Xray
• Dependabot
• Git (read-only/basic usage for now)
• Docker
• API or endpoint testing
• Feature development
• Production deployments


Weekly Expectations
• Send a simple weekly report every Friday EOD:
• What you worked on

Short One-Line Version (If You Ever Need It)

Responsible for managing Maven dependencies, monitoring and fixing security vulnerabilities using Dependabot and JFrog Xray, and ensuring application builds run successfully.