Back End Developer - Security

Introduction
At IBM, work is more than a job – it’s a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you’ve never thought possible. Are you ready to lead in this new era of technology and solve some of the world’s most challenging problems? If so, lets talk.

Your Role and Responsibilities
As a key member of our dynamic team, you will play a vital role in crafting exceptional software experiences. Your responsibilities will encompass the design and implementation of innovative features, fine-tuning and sustaining existing code for optimal performance, and guaranteeing top-notch quality through rigorous testing and debugging. Collaboration is at the heart of what we do, and you’ll be working closely with fellow developers, designers, and product managers to ensure our software aligns seamlessly with user expectations

• Communicate requirements to development teams and provide guidance and education on best practices.
• Ensure offerings meet security requirements, deliverables, and timelines.
• Execute and evaluate security scans and develop solutions to issues.
• Track and communicate vulnerabilities through a defined process.
• Facilitate audits, security reviews, and penetration tests.
• Work on the defects and feature enhancements of products.
• Collaborate with cross-functional teams, including offering management, development, support, and DevOps to continuously improve the security posture of offerings.

Required Technical and Professional Expertise

• 3+ years as a Software Developer.
• Hands on experience on Java/Python
• Familiarity with Security & Privacy by Design principles & industry standards such as OWASP.
• Familiarity with the following technologies:
• . Container development including OpenShift/Kubernetes, Docker & Ansible
• . CI/CD tooling including Github, Jenkins, Travis, Artifactory
• . Python, XML, and JSON
• Experience with security scan tools (dynamic/static/container/open source) and ability to interpret and respond to results. — secondary
• Good communication & organizational skills.
• Ability to execute in a fast-paced and dynamic environment.

Preferred Technical and Professional Expertise

• Knowledge of penetration test tools such as Burp Suite or Fiddler
• Experience with the Continuous Delivery process
• Experience with Agile methods and working within a Sprint-based setting
• Programming languages such as Python, Java and shell script
• ISO 27001 Certification experience
• Response to Vulnerabilities process
• Knowledge on Mend/Whitesource, AppScan, SonarQube, OWASP ZAP, Twistlock