Position: Senior Security Engineer
Company: LotusFlare
Category: Java
Experience required: 3y

**Required skills**
•  3+ years of experience in web application security testing (SAST, DAST, SCA, etc)
• Familiarity with network and web application protocols (HTTP, Https, TCP/IP, SAML 2.0, OAuth 2.0, Rest APIs, etc)
• Programming knowledge in at least one of the following (Scala/Java/JS/Python)
• Familiarity with OWASP/NIST guidelines
• Knowledge of Agile and secure SDLC
• Good spoken and written English
• Be a critical thinker and have problem-solving skills

**As a plus**
•  Familiar with modern DevOps practices and tools
• Experience with AWS, Redis, Kafka, and Cassandra

**We offer**
•  21 working-days paid vacation, public holidays, full coverage for sick leaves;
• Flexible schedule with unlimited possibility to work from home;
• Medical Insurance after probation period (3 months);
• Paid Lunches;
• PE 5% Taxes compensations, accountant assistance;
• Company stock options;
• Summer and winter performance review;
• Trainings and workshops, English Speaking Club;
• Exceptional opportunities for professional growth working closely with managers from Facebook and Microsoft.

**Responsibilities**
•  Evangelize, implement, and monitor security measures for the protection of Lotusflare Platform and products.
• Develop secure system design and secure coding recommendations.
• Providing guidance to engineering teams and work with with the development team
• Design and implement SDLC practices including automated and manual security tests, code review, etc.
Implement and manage tools (e.g., web security scanners) to help test and monitor product security