Java Security

We are currently looking for an experienced Senior Security Specialist (m/w/d) to drive our
Securities Finance Trading & Collateral technology and services roadmap to the global Securities Finance
& Collateral industry. Working closely with the Product Development management to deliver on our
mission to deliver future state cloud-native solution together with simplifying the integrations with open
API’s and provide seamless integrations.
About the role:
As a Senior Security Specialist, you are part of the Securities Finance Trading and Collateral core
development team. You will be responsible for ensuring the security aspects of the platform. You will be
required to investigate any potential security finding by automated tools, based on dependencies as well
as other sources such as penetration testing. You will be interacting with central security teams to
explain false positives and ensure vulnerabilities are resolved.
About the team:
Securities Finance Trading & Collateral is a market leader in delivering technology and services to the
global Securities Finance & Collateral industry. The components of solution suite are designed to
support the entire and complete value chain and processes of the Securities Finance and Collateral
market. The global business has 200+ clients, both sell side and buy side institutions including Banks,
Agent Lenders, Broker/Dealers and Asset Managers.
What you will be doing:
• Investigate and resolve security findings across multiple versions of SFTC
• Ensure false positives are properly explained to central security team and approved as false
positives
• Upgrade dependencies both Java as well as Typescript/Javascript libraries
• Resolve security vulnerabilities in no longer supported open source libraries
• Ensure any security related changes will not break existing functionality
What you will need:
• At least 7+ year’s hands-on professional experience in the Java enterprise environment.
• Experience building enterprise financial solutions.
• Experience with Agile and test-driven development.
• Experience in working in a distributed global environment
• Experience in investigating and resolving security related findings
• Experience in upgrading and working with 3
rd party open source dependencies
• Very good expertise in Java SE/JEE, TypeScript
• Very good expertise in software design patterns, integration patterns and enterprise
architectural concepts.
• Hands-on experience with Spring Framework and Middleware, JMS and JPA/Hibernate
• Good understanding of web frontend technologies: Angular v2+, Observables, Redux
• Experience integrating with Identity and Access Management (IAM) systems, with good
understanding of concepts like OAuth, OpenID Connect and Single Sign-on
• Adapting and integrating open-source frameworks and technologies
• Very strong communication skills and fluent in English.
• Team player, Willingness to take responsibility.
• Passionate about software development
Added bonus if you have:
• Experience with Integration Frameworks/Patterns (Apache Camel)
• Understanding of Jenkins, Harness IO, Apache Kafka
What we offer you:
we hire the best. In return, you receive exceptional benefits including:
• A varied, responsible job with a wide range of opportunities to contribute and to be
innovative
• A modern, international working environment in a committed and motivated teams
What you will need:
• At least 7+ year’s hands-on professional experience in the Java enterprise environment.
• Experience building enterprise financial solutions.
• Experience with Agile and test-driven development.
• Experience in working in a distributed global environment
• Experience in investigating and resolving security related findings
• Experience in upgrading and working with 3
rd party open source dependencies
• Very good expertise in Java SE/JEE, TypeScript
• Very good expertise in software design patterns, integration patterns and enterprise
architectural concepts.
• Hands-on experience with Spring Framework and Middleware, JMS and JPA/Hibernate
• Good understanding of web frontend technologies: Angular v2+, Observables, Redux
• Experience integrating with Identity and Access Management (IAM) systems, with good
understanding of concepts like OAuth, OpenID Connect and Single Sign-on
• Adapting and integrating open-source frameworks and technologies
• Very strong communication skills and fluent in English.
• Team player, Willingness to take responsibility.
• Passionate about software development
Added bonus if you have:
• Experience with Integration Frameworks/Patterns (Apache Camel)
• Understanding of Jenkins, Harness IO, Apache Kafka
What we offer you:
we hire the best. In return, you receive exceptional benefits including:
• A varied, responsible job with a wide range of opportunities to contribute and to be
innovative
• A modern, international working environment in a committed and motivated teams
As a Senior Security Specialist, you are part of the Securities Finance Trading and Collateral core
development team. You will be responsible for ensuring the security aspects of the platform. You will be
required to investigate any potential security finding by automated tools, based on dependencies as well
as other sources such as penetration testing. You will be interacting with central security teams to
explain false positives and ensure vulnerabilities are resolved.
About the team:
Securities Finance Trading & Collateral is a market leader in delivering technology and services to the
global Securities Finance & Collateral industry. The components of solution suite are designed to
support the entire and complete value chain and processes of the Securities Finance and Collateral
market. The global business has 200+ clients, both sell side and buy side institutions including Banks,
Agent Lenders, Broker/Dealers and Asset Managers.
What you will be doing:
• Investigate and resolve security findings across multiple versions of SFTC
• Ensure false positives are properly explained to central security team and approved as false
positives
• Upgrade dependencies both Java as well as Typescript/Javascript libraries
• Resolve security vulnerabilities in no longer supported open source libraries
• Ensure any security related changes will not break existing functionality