The candidate must understand common web, API, client-server, middleware, database, and application-server weaknesses; identify the vulnerable code, library, framework, server, operating-system component, protocol, certificate, database configuration, or network dependency; assess exploitability and affected data flow; and provide actionable guidance such as input validation, output encoding, parameterized queries, authentication or authorization correction, dependency or framework upgrades, secret removal, secure header or TLS changes, application-server hardening, service-account correction, database remediation, patching, configuration changes, or retirement of obsolete components. JD for - GD Offshore - Senior Developer: Skill Area: Must-Have 1: Technical judgment, false-positive review, and findings reporting: Can technically validate findings and remediation evidence, distinguish symptoms from root cause, identify direct and transitive dependencies, verify whether a vulnerable component is loaded, reachable, or exploitable, recognize obsolete or shared assets, evaluate compensating controls, and determine whether remediation, false-positive closure, deferral, or risk acceptance is appropriate.