Penetration Tester Jobs in Decatur, GA (NOW HIRING)

Calling all innovators – find your future at Fiserv.

We’re Fiserv, a global leader in Fintech and payments, and we move money and information in a way that moves the world. We connect financial institutions, corporations, merchants, and consumers to one another millions of times a day – quickly, reliably, and securely. Any time you swipe your credit card, pay through a mobile app, or withdraw money from the bank, we’re involved. If you want to make an impact on a global scale, come make a difference at Fiserv.

Job Title

Lead Software Engineer

We are seeking a highly skilled and experienced Lead Software Engineer to join the Digital Onboarding technology team. This role will focus primarily on backend application development, APIs, integration services, and cloud-native engineering capabilities that support Digital Onboarding applications and customer onboarding workflows.

The ideal candidate will have strong hands‑on experience with Java, Spring Boot, REST APIs, microservices, and AWS, with the ability to lead technical delivery, mentor engineers, troubleshoot complex application issues, and ensure high-quality production releases. A strong focus of this role is building secure, vulnerability‑free code and actively addressing OWASP Top 10, HackerOne, WAF, penetration testing, static scan, dynamic scan, open-source dependency, and other application security findings.

This role is best suited for a backend engineering lead who can participate across the full software development lifecycle, from understanding requirements and solution design through development, testing, vulnerability remediation, deployment, production support, and continuous improvement. While the primary responsibility is backend engineering, experience with Python and exposure to React or Next.js would be valuable as the role may evolve toward broader full‑stack responsibilities over time.

• Lead backend development for Digital Onboarding applications, APIs, customer workflows, and integration services.
• Design, develop, test, debug, and maintain scalable backend services using Java, Spring Boot, REST APIs, microservices, and cloud-native architecture patterns.
• Build and support secure, resilient, and high‑performing services deployed on AWS.
• Participate across the full software development lifecycle, including requirements analysis, solution design, development, code reviews, testing, deployment, and production support.
• Ensure code is secure, maintainable, reusable, testable, and aligned with enterprise engineering standards.
• Take ownership of application security by proactively identifying, remediating, and preventing OWASP Top 10, HackerOne, WAF, static scan, dynamic scan, penetration testing, and open-source dependency vulnerabilities.
• Partner with application security, cyber risk, DevOps, architecture, QA, and infrastructure teams to resolve security findings with urgency and ensure vulnerability remediation is built into delivery planning.
• Review Fortify, SAST, DAST, dependency scan, penetration testing, HackerOne, and related vulnerability findings, and drive fixes through code changes, configuration updates, dependency upgrades, or required platform actions.
• Ensure fixes are validated through retesting, regression testing, code reviews, and appropriate release controls.
• Troubleshoot and debug software defects, technical issues, production incidents, integration failures, performance problems, and security vulnerabilities.
• Implement unit tests, integration tests, API validation, and automated checks to improve software quality and reduce regression risk.
• Support non‑functional requirements including performance, scalability, resiliency, observability, logging, monitoring, secure configuration, and vulnerability remediation.
• Collaborate with product owners, architects, QA engineers, frontend developers, backend developers, DevOps engineers, data teams, and other cross‑functional partners.
• Document technical designs, implementation details, support processes, and security remediation approaches.
• Mentor and coach engineers, helping the team improve code quality, secure development practices, troubleshooting discipline, and delivery execution.
• Prioritize work across feature delivery, defect resolution, technical debt, security remediation, and production support needs.
• Stay current with evolving backend technologies, AWS services, secure coding practices, vulnerability management expectations, and AI‑assisted engineering tools.

• 7+ years of experience designing, developing, and supporting enterprise software applications.
• Strong hands‑on experience with Java, Spring Boot, REST APIs, microservices, and backend application development.
• Strong experience building secure backend applications with a focus on vulnerability‑free code, secure coding practices, and application security remediation.
• Experience remediating findings related to OWASP Top 10, HackerOne, penetration testing, static application security testing, dynamic application security testing, dependency vulnerabilities, and secure configuration issues.
• Experience with AWS services and cloud‑native application development.
• Experience with AWS capabilities such as ECS/EKS, Lambda, S3, API Gateway, CloudWatch, IAM, Secrets Manager, or related services.
• Strong understanding of API design, distributed systems, service integration, authorization, authentication, secrets handling, input validation, error handling, logging, observability, and production support.
• Experience with relational databases, SQL, persistence frameworks such as JPA/Hibernate, and application‑level data modeling.
• Experience with Git‑based workflows, Maven or Gradle, CI/CD pipelines, automated builds, release processes, and deployment automation.
• Experience writing unit tests and integration tests using JUnit, Mockito, or similar frameworks.
• Practical understanding of secure software delivery, including code reviews, dependency management, vulnerability scanning, remediation tracking, and retesting.
• Strong debugging, troubleshooting, and problem‑solving skills in complex application environments.
• Experience working in Agile teams and collaborating with product owners, QA, architecture, DevOps, AppSec, and business stakeholders.
• Ability to mentor engineers, influence technical direction, and communicate technical concepts clearly to both technical and non‑technical stakeholders.
• Bachelor’s degree in Computer Science, Information Technology, Information Systems, or a related field (or equivalent industry experience).

• Experience supporting Digital Onboarding, account opening, customer acquisition, merchant onboarding, or similar customer‑facing digital platforms.
• Hands‑on experience with Python for automation, scripting, API development, data processing, or platform utilities.
• Exposure to front‑end development using React, Next.js, JavaScript, TypeScript, HTML, and CSS.
• Experience contributing to full‑stack delivery across backend APIs and front‑end application experiences.
• Experience with AWS Glue, event‑driven processing, asynchronous service communication, or data integration patterns.
• Experience with containerized applications, Docker, Kubernetes, infrastructure‑as‑code, or cloud deployment automation.
• Experience with observability tools, centralized logging, distributed tracing, dashboards, alerting, and production monitoring.
• Experience with Fortify, SonarQube, Snyk, Black Duck, Checkmarx, WebInspect, Apiiro, or comparable security and code quality tooling.
• Experience working through vulnerability remediation processes involving ServiceNow VITs, WAF teams, AppSec, Cyber Risk, or penetration testing teams.
• Experience with Agentic SDLC, AI‑assisted coding tools, automated testing support, or developer productivity improvements.
• Experience in financial services, fintech, payments, merchant services, or regulated enterprise technology environments.

Important information about this role:

• This role is on‑site Monday through Friday. Fiserv considers in‑person collaboration to be an essential part of this role as in‑person office experiences help you with your overall onboarding experience and leads to stronger productivity.
• You must currently possess valid and unrestricted U.S. work authorization to be considered for this role. Individuals with temporary visas including, but not limited to, F-1 (OPT, CPT, STEM), H-1B, H-2, or TN, or any candidate requiring sponsorship, now or in the future, will not be considered for this role.
• This is a full‑time, direct‑hire position, and no contract options for unsolicited agency submissions will be considered.
• All offers of employment are contingent on standard background checks. Fiserv and certain of its affiliated companies are federal, state, and/or local government contractors. Should this position support a Federal Government contract, now or in the future, the successful candidate will be subject to a background check conducted by the U.S. Government to determine eligibility and suitability for federal contract employment for public trust or sensitive positions. Positions that support state and/or local contracts also may require additional background checks to determine eligibility and suitability.
• Build and maintain data pipelines that support MOA, Offer Engine, customer insights, personalization, and Digital Onboarding use cases.

This role is not eligible to be performed in Colorado, California, District of Columbia, Hawaii, Illinois, Massachusetts, Maryland, Minnesota, New Jersey, New York, Nevada, Rhode Island, Vermont, Virginia, Maine or Washington.

It is unlawful to discriminate against a prospective employee due to the individual's status as a veteran.

Please note that salary ranges provided for this role on external job boards are salary estimates made by outside parties and may not be accurate.

Our commitment to Equal Opportunity:

Fiserv is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, gender, gender identity, sexual orientation, age, disability, protected veteran status, or any other category protected by law.

If you have a disability and require a reasonable accommodation in completing a job application or otherwise participating in the overall hiring process, please contact AskHR.US@fiserv.com. Please note our AskHR representatives do not have visibility to your application status. Current associates who require a workplace accommodation should refer to Fiserv’s Disability Accommodation Policy for additional information.