Application Security Engineer | Java

Description

**Pitang \| Technology made by people** Since 2004, Pitang has developed innovative Information Technology solutions for medium and large-sized public and private clients, with a national presence. Our purpose is to create projects with quality, creativity, and a focus on results, always putting people at the center. Headquartered in **Recife–PE**, at the **Porto Digital**, we are more than **350 Pitang People** spread across Brazil and the world. We have been certified by **Great Place to Work (GPTW)** since 2011, with recognitions that reflect our culture. Here, we value a **welcoming, collaborative, ethical, and diverse** environment, where every person has space to grow, learn, and be who they are. *“We create systems, automate processes, but we are people.”* If you are looking for challenges, continuous learning, and real impact, **come be a \#PitangPerson!** **The Challenge:** We are looking for a **Senior Java Developer with strong experience in Application Security**, capable of developing, reviewing, and evolving backend solutions considering security from the conception of the code. The focus of the position is on the application of **Secure Coding** practices, identification and correction of vulnerabilities, risk analysis in Java applications, and the adoption of security best practices in APIs, authentication, data persistence, messaging, and distributed architectures. **What We Expect From You:** * Develop and review Java applications with a focus on **code security**; * Apply **Secure Coding** practices throughout the development cycle; * Identify, analyze, and correct vulnerabilities in applications; * Act in the prevention of vulnerabilities related to the **OWASP Top 10**; * Support analyses and corrections pointed out by security tools and processes; * Ensure security in the implementation of **RESTful APIs**; * Implement secure **authentication and authorization** mechanisms, especially OAuth2; * Evaluate risks related to libraries and dependencies used by applications; * Act in the secure update and migration of **JDK and dependency** versions; * Apply security controls in integrations and messaging with **Apache Kafka**; * Work with authentication, authorization, and communication protection using mechanisms such as **SASL, ACLs, and TLS**; * Ensure best practices in transaction handling and data persistence; * Support architectural decisions considering security, resilience, and reliability; * Implement resilience patterns such as **Circuit Breaker and Retry**. **Technical Requirements** ----------------------- * Solid experience with **Java and Spring Boot**; * Experience with **Secure Coding**; * In-depth knowledge of the **OWASP Top 10**; * Experience in identifying and correcting vulnerabilities; * Knowledge of security in **REST APIs**; * Knowledge of **OAuth2 and authentication/authorization flows**; * Knowledge of secure dependency management; * Experience with relational and NoSQL databases; * Knowledge of transactional control with Spring (@Transactional); * Experience with **Apache Kafka**; * Knowledge of messaging security: **SASL, ACLs, and TLS**; * Knowledge of producers, consumers, consumer groups, topics, and partitions; * Mastery of HTTP methods, status codes, and idempotency concepts; * Knowledge of **microservices and distributed systems** architecture; * Knowledge of **Circuit Breaker and Retry**, preferably with Resilience4j; * Experience with updating or migrating **JDK** versions. **What you will find at Pitang:** Be yourself culture Meal/Food Voucher Health and Dental Plan ‍ Certification Assistance Master's and Doctorate Incentive Daycare Assistance Eyeglass Assistance Partnership with Online Therapy ️‍ ️ Gympass Reimbursement for chair or desk (remote work) Referral Program **\#BeYourSelf** Here you are free to be who you are! We value respect for others, with an emphasis on common sense and empathy, always being who we are in essence. We value the plurality of race, color, religion, gender identity, nationality, disability, sexual orientation, ancestry, or age. It is important to us to promote fair opportunities and conditions for all people and groups. All our positions are open to receiving candidates with disabilities (PCD).