Job Opportunities API

If you are an expert at building secure cloud platforms and you wish to make a difference to real people’s real lives, then keep reading! In our delivery stream we cater primarily for dental laboratories. We are building both administrative software for dental laboratories (Lab Management Software – LMS) and AI-assisted dental CAD software (Automate) for designing crowns, bridges and other types of dental restorations with a clear strategy to converge these applications and offer seamless and smooth workflows for our customers. Our cloud infrastructure is in Microsoft Azure. In LMS, our primary coding language is C# with Blazor for front-end and Pulumi for IaC. In Automate, we use C++/WASM for rendering and high-speed calculations in browser; Angular for front-end and domain modeling and C# for business logic. We use Github Actions and Powershell scripts for build and deployment. You will be joining the mature LMS team of app. 10 people distributed across Copenhagen and Kyiv, Ukraine, with the intention of letting you rotate to the Automate team when the time is right. We in the LMS team have established sound processes; working in short iterations, high degree of test automation, frequent releasing, relentless addressing of incoming bugs and continuous improvement. We have a strong focus on collaboration between everyone in the team and pride ourselves in having a great team spirit of having a good time while delivering high quality work on schedule. Your role We need your proven expertise in building secure software for cloud deployment. This includes applying secure coding patterns, advocating tools for detecting vulnerabilities, providing guidelines on fixing vulnerabilities, and advocating security-related activities such as cloud penetration testing. We need you to share your proven experience with building secure web and cloud applications with both teams and across the stream but believe that having hands-on in a team will be the best way to get traction. We see you as a developer picking up tasks from the prioritized backlog and working as a generally capable and engaged team member. We do not expect you to work only on security-related tasks, and not all security-related tasks are expected to be taken by you. However, you will weigh in with a security focus, e.g. in architecture, design and code reviews, gather learnings, and find the potentially missing parts of good security practices in the team. You will proactively propagate good security practices to developers, testers and the architect in the team, and you will take pleasure in motivating and propagating these practices to other teams, e.g. through our stream architect community, where you are expected to be a frequent guest star. We are yearning to hear your suggestions for initiatives to increase secure coding practices, e.g. tooling, courses, breakathons and penetration tests, and we expect you to establish a good and active dialogue with our chief security architect and kindred spirits in the company. We thus expect you to be proactively outgoing; sticking your nose into things outside your team scope, but for “the right reasons”. Your profile We are looking for a senior software developer with savviness for and proven experience in building secure applications. Likewise, we see that you can check most of the following boxes: Senior-level Software development competences; C# and/or C++ Proven hands-on experience with cloud security engineering, including container, Kubernetes, IaC and CI/CD security Proven hands-on experience with building secure large cloud systems You know what OWASP Top 10 risks are, and you have prevented (some of) them in code You have in practical terms secured an API You know and always use secure coding patterns Experience with IaC and DevSecOps, including tool chains and security scanning pipelines Threat modeling and architecture translation