Senior Developer

NTT DATA Services•Plano, TX

About The Position

NTT DATA is seeking a Senior Developer for its team in Plano, Texas. The role focuses on hands-on vulnerability analysis and remediation across servers, cloud environments, web applications, and on-premises applications. The Senior Developer evaluates scanner findings, identifies root causes and actual exposure, determines appropriate technical remediation, and drives findings through validated closure. The position also coordinates remediation with application, infrastructure, cloud, vendor, CSPM, and DevSecOps teams, and develops accurate, actionable vulnerability reports and dashboards. The role requires experience with Qualys server findings and Wiz and GCP cloud risks, along with the ability to assess exploitability, dependencies, business impact, compensating controls, and remediation evidence. The Senior Developer creates executable remediation plans that include ownership, dependencies, service and security impact, testing, rollback, target dates, closure evidence, and escalation paths. Additional responsibilities include validating reporting automation, supporting Terraform remediation, and documenting processes and active work to maintain operational continuity. Organization-specific tools, workflows, ownership mappings, reporting procedures, and internal application and process knowledge are taught during onboarding.

Requirements

Strong hands-on vulnerability remediation expertise, including root-cause analysis, exposure and business-impact assessment, remediation selection, ownership identification, validation, and verified closure.
Ability to technically validate findings and remediation evidence, evaluate exploitability and compensating controls, identify dependencies, and distinguish false positives from valid findings.
Deep experience interpreting Qualys server findings and determining remediation across operating systems, packages, services, configurations, protocols, certificates, and network controls.
Strong Wiz and GCP cloud-risk analysis and remediation skills, including IAM, network exposure, data sensitivity, runtime context, least privilege, configuration, encryption, logging, resource replacement, and Terraform changes.
Strong remediation knowledge for web and on-premises applications, including common web, API, client-server, middleware, database, and application-server weaknesses.
Ability to develop technically complete remediation plans and coordinate implementation with application, infrastructure, cloud, vendor, CSPM, and DevSecOps teams.
Ability to design and build actionable vulnerability reports and dashboards, reconcile source data, validate data quality, and report status, trends, and business impact.
Ability to challenge vague remediation responses and obtain an executable plan with clear ownership, target dates, testing, rollback, and closure evidence.
Working ability to understand Terraform-related cloud remediation and route work requiring engineering support.
Ability to validate automated reporting output against source data and specify corrections for logic or mapping defects.
Ability to document recurring operations, communicate active issues, and support knowledge transfer and operational continuity.

Nice To Haves

Working familiarity with Terraform remediation and routing changes to a DevSecOps team.
Experience validating automated report outputs and identifying logic or mapping defects.

Responsibilities

Technically validate vulnerability findings and remediation evidence; assess root causes, dependencies, whether vulnerable components are loaded or exploitable, compensating controls, and appropriate remediation or exception decisions.
Create clear vulnerability reporting that covers severity, exploitability, affected assets and applications, ownership, remediation actions, target dates, aging, exceptions, closure evidence, trends, and business risk.
Analyze vulnerability findings and drive them through verified closure by identifying exposure, business impact, technical remediation, implementation ownership, validation steps, and rollback requirements.
Interpret Qualys server findings and specify remediation at the operating-system, package, service, configuration, protocol, certificate, or network-control level.
Analyze Wiz and GCP cloud risks, including affected resources, attack paths, IAM and network exposure, data sensitivity, runtime context, inherited constraints, and downstream impact; recommend appropriate controls or changes.
Remediate web and on-premises application vulnerabilities by identifying affected code, dependencies, platforms, configurations, and data flows, and providing actionable technical guidance.
Coordinate remediation across application, infrastructure, cloud, vendor, CSPM, and DevSecOps teams, ensuring plans include required changes, owners, dependencies, impact, testing, rollback, target dates, closure evidence, and escalation paths.
Design, build, and maintain vulnerability reports and dashboards; reconcile source data and identify incorrect metrics, duplicate records, ownership gaps, missing data, and inconsistent totals.
Support Terraform-related cloud remediation and route actionable engineering work to the DevSecOps Run Team.
Validate automated report output against source data, identify logic or mapping defects, and provide correction requirements.
Document recurring work and operational procedures, explain dashboards and follow-up processes, share active issues, and prepare another engineer to assume daily responsibilities.