Position: Junior Java/Security Engineer
Company: EIS
Category: Java
Experience required: 1y
English level: upper

EIS is a global innovator, providing the insurance industry with transformational platforms to enable its success. We are committed to delivering tools, digital enablement, and exploring emerging technologies that drive efficiency and empower clients to reimagine the possible.

Our culture is highly innovative, collaborative, and focused on building and maintaining relationships that allow us to surpass our customers’ expectations. We embrace the qualities that make each of our team members unique and develop each other’s skillsets so that together we can be stronger than the sum of our parts.

Requirements:
- BS degree or above in Computer Science or related fields or equivalent practical experience, with at least 1 year of commercial working experience within a Java Enterprise environment
- Experience in Java and Java Enterprise technology applications architecture, design, development, and support. Programming, debugging, and optimization skills;
- Understanding of OOP fundamentals;
- Experience with Spring MVC/Spring Boot, Hibernate/JPA, Data Caching Services, DB schema design, and data access technologies
- Knowledge of Cloud Foundry, K8s, Docker
- Strong written/verbal communication and excellent teamwork skills; flexible and a self-starter
- Fluent communication skills, proficient with communicating ideas in both oral and written English

Would be a plus:
- Experience working with one or more of the following: general-purpose programming languages including but not limited to C/C++, Python, JavaScript, PHP, or Perl
- Professional familiarity with Unix/Linux environments and internals (have to know what the hell grep does), distributed and parallel systems, experience developing large software systems, and a deep understanding of HTTP stack ReactJS framework, JBoss EAP
- A solid foundation in computer science, with competencies in data structures, ML algorithms, and software design
- Basic knowledge owasp top 10; Basic skills with burp suite, zap;
- Understanding owasp asvs.

Responsibilities:
- Implementing EIS Secure Software Development Process
- Performs code review and white-box testing of web applications and their APIs
- Reviews software architectures for secure design issues, providing a design review service to project teams
- Integrates Application Security automation solutions into the DevOps pipeline
Implements static code analysis customizations
- Develops and employs application-specific security testing automation

Communications
- Responds to technical security challenges and questions faced within EIS RnD
- Communicates the nature and impact of identified application security deficiencies as well as their potential solutions
- Provides training to other teams on software security, including information from the OWASP framework

What we offer:
- Variety of new knowledge sharing and training opportunities
- Unique international working environment
- Сompetitive salaries
- Paid vacation and sick leave
- Medical insurance
- Various social and team-building activities
- English lessons