*This is a perm position. Very competitive base salary plus bonus and benefits. Location, north of Boston, MA USA
This Developer will be part of our R&D team, working on security applications specifically for our products. We will consider either a C++/.Net/Java background, the critical piece is strong subject matter expertise in software application security. This person will be a hands-on developer, but will also be part of the overall strategy on security. He/She will be a one person team but will work closely with our IS organization. C++ would definitely be preferred, but we would be OK with Java or .Net. This person would be the only dedicated Security person in our Products group, but he/she would work closely with other Development teams on various projects and new releases.
My client is looking for a Principal Software Developer to drive the architecture, design and development of the technology stack for one of our key product suite from a product security perspective. This individual will play a critical role as part of a team of architects with a specialization in all aspects of security. This candidate’s attention to detail, strong technical leadership and excellent communication skills, will be essential for meeting hands-on and engineering deliverable responsibilities. A passion for technology, combined with the ability to quickly learn new technologies and apply them to existing architectures will put this candidate in a key position to drive change.
This candidate shall have:
1. Ability to test and verify the security of products, interpret results, identify and characterize fixes, advise and evangelize developers on best practices
2. Knowledge in areas of software and network security, compliance, and control
3. An ethical hacker: A skilled individual who knows how hackers think and understands business ethics and the mandate to protect corporate credibility.
4. Thorough knowledge of the complete Software Development Life Cycle and the ability to implement/oversee the packaging and releasing of critical patches, which may include but not be limited to data corruption and security fixes
A strong developer who has subject-matter expertise in application security.
An ethical hacker:
A skilled individual who knows how hackers think and who possesses the skill and business ethics to protect corporate credibility.
Thorough knowledge of Software Development Life Cycle (SDLC) who will be able to implement packaging and releasing critical patches which may include, but are not limited to, data corruption and security fixes
Ability to test and verify the security of products, interpret results, identify fixes, and advise developers
Knowledge in a various security, compliance, and control initiatives
Excellent communication skills: Ability to communicate with management, developers, QE engineers, and customer facing personnel in the event of a critical security or data corruption issue
Knowledge of software design principles, architecture guidelines, functioning of middleware & messaging systems, and Service Oriented Architecture (SOA) are important
Collaborate with peers and other development personnel to promote the scalability, configurability, performance, security, customizability, and quality in our products.
Ability to understand and consolidate legacy product architectures
Help the organization shape new product directions as well as implement product vision within the context of the next generation product architecture keeping the security infrastructure in mind.
Perform periodic review of security architecture of various products and enforce best practices
Adherence to standard processes such as issue tracking, source code control, coding conventions
Optimize and tune performance of products with security features enabled
Work with development teams in Bedford, MA, Houston, TX, and Shanghai, China.
Bachelor’s degree in computer science or similar. Master’s degree preferred but not required.
Experience in using application security tool, such as IBM AppScan is a plus
Strong written and verbal communication skills
Experience in architecting, designing, and developing distributed software systems for the Enterprise
Experience in debugging network-centric distributed software systems
Demonstrated ability working with Object-Oriented Design and other Software Patterns
Proven problem-solving skills, especially in data manipulation and system communication layer.
Good inter-personal skills along with team spirit is a must
Experience in team leadership positions
Experience in dealing with “Continuous Integration/build systems”
Proven history of working well in groups and with off-shore teams
Demonstrated ability to take on initiatives without frequent supervision or assistance
Other Essential requirements are :
Hands on coding experience in Java, C/C++ & C#
Experience with either Java Web, JEE or .NET or both would be key to this position.
Proficiency in Enterprise System Security is required including Authentication, Authorization, Permissions, LDAP, Active Directory, SAML 2.0 tokensXML Message-based software systems and/or SOA including Schema management across a multi-team project
Experience in implementing dynamic and secure web services.
Knowledge of WS* Web Services and REST is required.
Experience in implementing security around Web Services will be considered plus Agile Software Methodology and Full Software Development Life cycle
Experience with Scrum and XP (Extreme Programming)
Experience developing for and supporting mobile devices
Experience with Open Source in an Enterprise environment a plus
Understanding of Cryptography
If interested and more importantly qualified, send updated resume with contact info to firstname.lastname@example.org and you will be contacted immediately.
Unfortunately Visa sponsorship or transfer not available for this role.