Position: Java/Security Engineer
Company: EIS
Experience required: 2y
English level: upper

EIS is an insurance software platform provider that enables leading insurers to innovate and operate like a tech company: fast, simple, and agile. Founded in 2008, EIS provides an open, flexible platform of core systems and digital solutions allowing insurers to accelerate and scale innovation, launch products faster, deliver new revenue channels, and create experiences the world will love. With thousands of APIs, the platform gives insurers the freedom to connect to a vast ecosystem of Insurtech and emerging technologies. EIS powers premium growth for insurers in all lines of business worldwide. 

The EIS Security team develops and maintains the signals, tools, and infrastructure that we use, constantly evolving them to match sophisticated attackers. As part of this team, you will be building advanced and novel detection mechanisms for attacker techniques tactics, and procedures, developing systems to automate remediation, conducting threat hunting, and performing network and systems forensics, as well as malware and indicator analysis.
The team is responsible for handling all malicious activity on EIS networks and
environments. The EIS Security team performs a continuous deep analysis of threats to our corporate, production, and partner environments. This is the team at EIS that hunts for and helps respond to advanced attackers and insider threats.
As EIS Security Engineer, you would perform realistic offensive security exercises to simulate real attacks, test and improve our detection and response capabilities, and identify how attackers could infiltrate and move inside our infrastructure. 
With your technical expertise, you will create scenarios that advanced attackers might use to compromise our security. You will emulate both the techniques used by known groups, as well as create new techniques that attackers might attempt in the future. After each exercise, you will thoroughly document the findings.
Additionally, you would be responsible for maintaining the security of the EIS RESTful platform and improving our detection capabilities within the EIS HTTP stack and containerized deployment environment. You would help to design and code EIS defense-in-depth controls that limit attackers' ability to move inside our network and environments. You would have a chance to use your excellent judgment to suggest improvements throughout our software stack where they are most impactful.
We are looking for smart, dynamic, and intuitive people with a strong desire to learn the security aspects of the software development process. This position is a career pivot opportunity for you. As a Java coder, you have a chance to become EIS Software Security Engineer.
 
Requirements:
- BS degree or above in Computer Science or related fields or equivalent
practical experience, with at least 1 year of commercial working experience
within the Java Enterprise environment
- Experience in Java and Java Enterprise technology applications architecture,
design, development, and support. Programming, debugging, and
optimization skills; Understanding of OOP fundamentals
- Experience with Spring MVC/Spring Boot, Hibernate/JPA, Data Caching
Services, DB schema design, and data access technologies
- Knowledge of Cloud foundry, K8s, Docker
- Strong written/verbal communication and excellent teamwork skills; flexible
and be a self-starter 
- Fluent communication skills, proficient with communicating ideas in both oral
and written English

Would be a plus:
- Experience working with one or more of the following: general-purpose
programming languages including but not limited to C/C++, Python,
JavaScript, PHP, or Perl
- Experience with Unix/Linux environments and internals (have to know what
the hell grep does), distributed and parallel systems, experience developing
large software systems, and a deep understanding of HTTP stack. ReactJS
framework. JBoss EAP
- A solid foundation in computer science, with competencies in data
structures, ML algorithms, and software design
- Basic knowledge owasp top 10
- Understanding owasp asvs
- Basic skills with burp suite, zap.
 
We offer:
- Multistage training in modern security technologies
- Unique international working environment
- Paid vacation and sick leave
- Medical insurance
- Various social &amp; team-building activities
- English lessons