Java Architect (Security Expertise)

We currently have a vacancy for a Java Architect (Security Expertise) fluent in English, to offer his/her services as an expert remotely. In the context of the first assignment, the successful candidate will be integrated with the Development team of the company that will closely cooperate with a major client’s IT team.

Your tasks

• Creating designs and blueprints for secure front-end architecture;
• Coordination of the implementation of the secure technical architecture;
• Review of the secure architecture of existing systems with a view to refactor them if necessary from a security perspective;
• Perform rapid agile secure code reviews on features (manual and tool-assisted) & validate fixes;
• Coaching the developers in development security practices (security champion);
• Triage identified vulnerabilities, propose remediations and follow-up with the remediators;
• Overseeing and follow up of security findings within development team;
• Define security remediations for development security findings;
• Create, optimize, and review threat models;
• Finetune application security scanning tools (DAST, SAST, SCA, etc.);
• Contribute to the automation of security assurance checks in the development pipelines such as authZ tests.

Requirements

• University degree in IT or relevant discipline, combined with a minimum 12 years of relevant working experience in IT;
• At least 5 years of experience in architecture for front end of web information systems;
• At least 5 years of experience in software development in Java (Spring), using architectures based on REST services and front-end clients;
• At least 3 years of experience in web application security assessments;
• At least 2 years of experience in continuous integration tools (e.g., Maven, Gitlab, CI/CD pipelines, etc);
• Excellent knowledge of Application Security practices (e.g. secure code review, pentesting, threat modelling, secrets management, code signing, scanning tool finetuning etc.);
• Excellent knowledge of Java, Spring Framework, Rest services and Relational RDBMS;
• Good knowledge of AWS, Gitlab, CI/CD, Docker, etc;
• Knowledge of front-end frameworks and libraries (e.g., Angular 7+);
• Knowledge of scripting languages (e.g. Python, Go);
• One of the following certifications is required for the performance of tasks: Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA), Burp Suite Certified Practitioner (BSCP), Offensive Security Certified Professional (OSCP);
• Excellent command of the English language.

Benefits

If you are seeking a career in an exciting and dynamic company, where you will offer your services as part of a team of a major European Institution, operating in an international, multilingual and multicultural environment where you can expect real chances to make a difference, please send us your detailed CV in English, quoting reference (17123/06/2024).

We offer a competitive remuneration (either on contract basis or remuneration with full benefits package), based on qualifications and experience. All applications will be treated as confidential.

EUROPEAN DYNAMICS (ED) (www.eurodyn.com) is a leading Software, Information and Communication Technologies company, operating internationally (Athens, Brussels, Luxembourg, Copenhagen, Stockholm, London, Nicosia, Hong-Kong, Valetta, etc). The company employs over 1000 engineers, IT experts and consultants (around 3% PhD, 36% MSc and 53% BSc or equivalent). We design and develop software applications using state-of-the-art technology. The group generates annual revenues in the range of EURO 40 million, with an EBITDA in the range of 20%. The value of our contract portfolio exceeds EURO 250 million. EUROPEAN DYNAMICS is a renowned supplier of IT services to government institutions, multinational corporations, public administrations and multinational companies, research and academic institutes.

As part of our dedication to the diversity of our workforce, we are committed to Equal Employment Opportunity without regard for race, color, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion.

EUROPEAN DYNAMICS (ED) adheres to the General Data Protection Regulation principles by applying its Privacy Policy as published in www.eurodyn.com/privacy. By submitting an application to this position and by sharing your personal data with ED, you acknowledge and accept its Policy and authorise ED to process your personal data for the purposes of the company's recruitment opportunities, in line to the Policy.