Java and Scala Developer

Ethereum Technologies LLC; Lansing (MI); On-site; USD 150,000 - 190,000; Full time

Job summary

Ethereum Technologies is seeking an experienced Application Security Engineer to review findings with the Clearing development lead, understand vulnerability patterns, and design code fixes that are repeatable across locations.

You will write unit and integration tests, adhere to coding standards, and participate in code reviews. The role focuses on authentication/authorization, transport security, secrets handling, and secure input validation in JVM-based services.

Qualifications

• 8+ years of Java software development experience.
• 3+ years of Scala software development experience.
• 2+ years AKKA development experience.
• Experience working with Kafka.
• Experience working with Postgres.
• Experience with writing unit tests.

Responsibilities

• Review findings identified by our Application Security team alongside the Clearing development lead, and develop a clear understanding of the vulnerability pattern and root cause.
• Design and implement code fixes with an emphasis on consistent, repeatable solutions where the same vulnerability pattern appears in multiple locations.
• Write or update unit and integration tests to validate fixes and prevent regression.
• Follow existing coding standards and participate in code review with the development lead prior to merge.
• The vulnerability categories in scope span authentication and authorization controls, transport security, secrets handling, input validation, and related secure coding domains.

Skills

Java

Scala

AKKA

Kafka

Postgres

Unit tests

Tools

Docker

AWS

Kubernetes

Job description

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Work Authorization: USC, GC, H-1B, OPT-EAD, GC-EAD, H4-EAD

Job Summary

Review findings identified by our Application Security team alongside the Clearing development lead, and develop a clear understanding of the vulnerability pattern and root cause. Design and implement code fixes with an emphasis on consistent, repeatable solutions where the same vulnerability pattern appears in multiple locations. Write or update unit and integration tests to validate fixes and prevent regression. Follow existing coding standards and participate in code review with the development lead prior to merge. The vulnerability categories in scope span authentication and authorization controls, transport security, secrets handling, input validation, and related secure coding domains.

Qualifications

• 8+ years of Java software development experience
• 3+ years of Scala software development experience
• 2+ years AKKA development experience
• Experience working with Kafka
• Experience working with Postgres
• Experience with writing unit tests

Preferred Qualifications

• Hands-on experience remediating application security findings (e.g., from SAST tools or penetration test reports)
• Packaged application integration experience, including knowledge of and the ability to implement packaged application software and integrate it with technology platforms
• Familiarity with transport security configuration (TLS/SSL) and secrets management in JVM-based services
• Experience with JWT / OAuth 2.0 in a JVM context
  Familiarity with CI/CD pipelines and security controls within build tooling

Technical Skills

• Solid understanding of JVM internals and interoperability between Scala and Java
  Familiarity with secure coding practices and common vulnerability classes (OWASP Top 10).
• Knowledge of AWS and Kubernetes
• Experience with Docker
• Experienced in functional programming, and event driven programming

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.