Note: The job is a remote job and is open to candidates in USA. SRI Tech Solutions Inc. is seeking a Java Software Engineer to work with their Application Security team. The role involves reviewing security findings, designing code fixes, and ensuring adherence to coding standards.
Responsibilities
- Review findings identified by our Application Security team alongside the Clearing development lead, and develop a clear understanding of the vulnerability pattern and its root cause
- Design and implement code fixes with an emphasis on consistent, repeatable solutions where the same vulnerability pattern appears in multiple locations
- Write or update unit and integration tests to validate fixes and prevent regression
- Follow existing coding standards and participate in code review with the development lead prior to merge
- The vulnerability categories in scope span authentication and authorization controls, transport security, secrets handling, input validation, and related secure coding domains
Skills
- 5+ years of Java software development experience
- 3+ years of Scala software development experience
- 2+ years AKKA development experience
- Experience working with Kafka
- Experience working with Postgres
- Experience with writing unit tests
- Solid understanding of JVM internals and interoperability between Scala and Java
- Familiarity with secure coding practices and common vulnerability classes (OWASP Top 10)
- Knowledge of AWS and Kubernetes
- Experience with Docker
- Experienced in functional programming, and event driven programming
- Familiarity with Actor model
- Hands-on experience remediating application security findings (e.g., from SAST tools or penetration test reports)
- Packaged application integration experience, including knowledge of and the ability to implement packaged application software and integrate it with technology platforms
- Familiarity with transport security configuration (TLS/SSL) and secrets management in JVM-based services
- Experience with JWT / OAuth 2.0 in a JVM context
- Familiarity with CI/CD pipelines and security controls within build tooling
Benefits
- USA, Remote
Company Overview
Company H1B Sponsorship