Senior Backend Developer (Hybrid Toronto)

Build secure scalable backend solutions that protect the worlds leading financial institutions.

The Role

Capco is looking for an experienced Backend Developer with strong Java and Spring expertise who has delivered secure backend applications and worked on security vulnerability remediation initiatives. Youll play a key role in designing developing and strengthening enterprise backend platforms ensuring security is embedded throughout the software development lifecycle.

Working alongside talented engineers architects and security specialists youll help deliver resilient high-performing applications that safeguard sensitive customer and financial data while supporting large-scale digital transformation programmes.

What Youll Do

• Design develop and maintain secure backend applications using Java Spring Boot and modern microservices architecture.

• Identify remediate and prevent security vulnerabilities including SQL Injection CSRF XSS insecure secrets management and exposure of sensitive information.

• Build and secure REST APIs using authentication authorization encryption and industry-standard security controls.

• Partner with engineering architecture and cybersecurity teams to improve backend architecture security posture and application resilience.

• Champion secure coding practices code reviews and continuous improvement across the software development lifecycle.

What Were Looking For

• Strong commercial experience developing backend applications using Java Spring Boot and RESTful APIs.

• Experience working on application security initiatives vulnerability remediation projects or secure software development within enterprise environments.

• Strong understanding of backend security fundamentals including authentication vs. authorization CSRF protection SQL injection prevention secure secrets management XSS mitigation and protection of personally identifiable information (PII).

• Experience designing or supporting secure microservices architectures including secure service-to-service communication and API security.

• Strong communication and collaboration skills with the ability to work effectively across multidisciplinary engineering teams.

Bonus Points For

• Experience working within financial services or other highly regulated industries.

• Knowledge of OAuth2 OpenID Connect JWT TLSmTLS or API gateway security.

• Experience with cloud platforms such as AWS Azure or Google Cloud and their security services.

• Familiarity withDevSecOpspractices CI/CD security scanning and automated vulnerability management.

• Security-related certifications such as CSSLP Security AWS Security Specialty or similar.