Job Description

Location Address: Hybrid - 2 days/week (likely Tuesdays/Thursdays)
Contract Duration: 6 months
Possibility of extension
Schedule Hours: 9am-5pm Monday-Friday; standard 37.5 hrs/weekStory Behind the Need
Business group: Cryptography - HMs team is a product group within Cloud and Applications Security - in security vertical in the Bank
Project: Application Security - Build and deploy secure applications; in initial research phases - trying to determine what needs to be implemented - can we achieve security by programmingCandidate Value Proposition:
The successful candidate will have the opportunity to understand how to secure APIs and other business applications working on a new project of its kind in the market.Candidate Requirements/Must Have Skills:
1) 10+ years coding experience in OOP languages, ideally with Java
2) 7+ years experience of programming APIs like REST, SOAP, gRPC etc
3) 7+ years programming Web based application - SPA based like Angular, React as well as traditional apps like SpringBoot, JSP etc (please list which)
4) 5+ usage of API testing tools, ideally with Postman
5) 3+ years documented application architectures using Visio or PowerPointNice-To-Have Skills:
1) Secure coding skills including OWASP Web and OWASP API Top 10
2) Experience with API Authentication methods like OIDC, OAuth etc
3) Security Testing with tools like Burp Suite
4) Financial industry experienceSoft Skills Required:

• Ability to understand and document application design by communication with various stakeholders like Team Leads, BSs, Solution Architects etc
• Ability to communicate to Senior Management on the outcomes of initiatives and weekly status/progress reports

Education:
Working experience preferred, education not mandatory

LanceSoft