Senior Java Software Engineer

In this role, you will join Avaloq's Edinburgh security team to build automation and tooling that embed security into the software lifecycle. You will work across software engineering, DevOps, cloud and application security to deliver scalable, secure software. You will design and maintain CI/CD pipelines and security automation, integrating automated scanning and vulnerability management. You will collaborate with cross-functional teams to continuously improve secure development practices. This is a chance to shape security in a global fintech platform.

• hybrid working
• flexible working hours
• inclusive culture
• equal opportunity environment

• Design, develop and maintain CI/CD pipelines, automation tooling, backend services and APIs for security assurance
• Integrate automated security scanning across the SDLC (source, dependencies, repos, containers)
• Monitor validation processes, assess vulnerabilities, investigate false positives, and support remediation
• Develop automated vulnerability processing, reporting and event-driven workflows (e.g., Jira integration)
• Build security solutions for containerized and cloud-native environments (Kubernetes, OpenShift, OCI)
• Collaborate with engineering teams to resolve security issues and improve secure SDLC practices

• Experience as Senior Software Engineer with hands-on skills in Java/Spring Boot, Python, JavaScript/TypeScript, Gradle, Jenkins/Groovy, REST APIs or event-driven/messaging tech
• Strong track record in CI/CD, automation, and developer tooling within security-focused delivery environments
• Knowledge of application security and vulnerability management, including automated testing and container scanning
• Practical experience with Docker and Kubernetes/OpenShift; familiarity with OCI or similar cloud tech (highly desirable)
• Strong analytical, problem-solving and cross-team collaboration skills
• University degree in IT, CS, Math, Physics or related field

• Strong communication and collaboration
• Clear technical explanations for non-technical stakeholders
• Team-oriented and proactive problem solving
• Java/Spring Boot
• Python
• JavaScript/TypeScript