Developer (Java), Platform Security

Job Description

SAP started in 1972 as a team of five colleagues with a desire to do something new. Together, they changed enterprise software and reinvented how business was done. Today, as a market leader in enterprise application software, we remain true to our roots. That s why we engineer solutions to fuel innovation, foster equality and spread opportunity for our employees and customers across borders and cultures.SAP values the entrepreneurial spirit, fostering creativity and building lasting relationships with our employees. We know that a diverse and inclusive workforce keeps us competitive and provides opportunities for all. We believe that together we can transform industries, grow economics, lift up societies and sustain our environment. Because it s the best-run businesses that make the world run better and improve people s lives.SAP Ariba is the leading provider of collaborative business commerce solutions. SAP Ariba combines industry-leading technology with the worlds largest web-based trading community to help companies discover, connect, and collaborate with a global network of partners - all in a cloud-based environment. Using the Ariba Commerce Cloud, businesses of all sizes can buy, manage cash, and sell more efficiently and effectively. More than 500,000 companies around the globe use the Ariba Commerce Cloud to simplify inter-enterprise commerce and enhance results.SUMMARYThe Team focuses on security engineering as it applies to the Ariba OnDemand platform - it s software stack, and the underlying infrastructure. The individual should have a passion for security principles, have software development experience using java-based technologies and components, have knowledge of web servers and secure infrastructure, and have the ability to understand complex legacy systems and adapt them to modern technologies and principals. As a senior developer you are responsible for collaborating with architects and other technical leaders on overall technology direction, but you have ownership of solution designs, implementations, testing, and delivery with high quality.THE ROLEThe role is of a Senior Full Stack Developer, the individual would develop, design, deploy, review requirements and work with other security engineering staff on technical solutions. This role would involve the Senior Developer to develop new security shared services and APIs following cloud and micro service principles. He or She would evaluate and mitigate reported security vulnerabilities reported in penetration tests across the Ariba OnDemand products and would develop in the area of Encryption at Rest using JCE and similar cryptographic APIs and in Transit using JCE, OpenSSL and similar cryptographic APIs. In this role, the developer is expected to build knowledge of the Ariba Web Tier and help drive the secure hardening of the web stack (work on Java primarily) but willingness to work on perl/shell code, if there is a need. In addition, the senior developer should be able to coach/mentor their team members, and be a self starter.ROLE REQUIREMENTS

• Bachelor s degree in Computer Science, Engineering, Information Security or related field with 5+ years professional experience in Java Software Development
• Working expereince or Knowledge of Microservices, development in cloud based products, and REST API design is must.
• Sound knowledge of Data structures and algorithms, experience in cloud-based SaaS applications and ability to design high quality and scalable software
• Strong analytical skills, results-oriented, customer-oriented attitude, good strategic and conceptual thinking skills
• Previous experience working in a security related software development effort and Apache deployments/security configurations is a plus
• Ability to work in an agile development environment and capable of working effectively with cross cultural global teams.

• Experience in cloud-based SaaS applications and 3rd party security tools such as Vault, Consul, and Cloud HSMs is a plus.
• Good to Have: Knowledge of the TLS protocol and be able to troubleshoot and diagnose handshake issues as we strengthen our TLS protocol support.

Keyskills :
web serverssecurity toolslegacy systemsdata structuresshared servicescomputer scienceanalytical skillsagile developmententerprise softwaresoftware developmentinformation security