Fullstack Engineer - Security
- Copenhagen, Denmark
- Department: Infosec
Tradeshift is a unicorn in the fintech industry. We are disrupting a typically stagnant environment by connecting companies of all sizes and providing them with the platform and network needed to create value from old processes like procurement, invoicing, payments, and workflow. We recognize that business is both messy and social - two revelations that have driven the development of Tradeshift, a platform for all your business interactions. We work hard and our teams have great freedom and responsibility to choose the best solutions, technologies and approaches to evolve the product to the next level.
We believe that being a global, multicultural company is a tremendous strength and we have people working from 18 different countries with hubs in Bucharest, Copenhagen, Kuala Lumpur, and San Francisco. We believe that if we truly focus on how to work distributed and collaborate across locations and (home) offices, we will not only enjoy work more but also build better products for our customers, and ultimately be a better company.
About The Role
The product security team (or PROSE) is a part of Tradeshift’s Security Engineering organisation, owning, maintaining and developing security features within Tradeshift’s platform, such as authentication and authorisation, anti-virus scanning, our third-party app security model, and so on. The team spends most of their time on software development, and while previous exposure to security is helpful, it is not a requirement.
What You’ll Be Doing
You’ll be joining a small team constantly making platform-wide changes so we’re looking for a great human being who’s not too shy to talk to others, although public speech doesn’t have to be one of your hobbies.
And last, but certainly not least, we expect you to be good! You’ll be working with Tradeshift’s sensitive bits, so we need you to be responsible, not be afraid of jumping into an unknown codebase to dissect it, and of course, to be just an awesome software engineer overall.
- Must think that security is at least 3/10 in terms of how interesting it is
- Knowlegde about web applications, building APIs and working in a microservice universe
- Eye for detail
- Familiarity with highly available systems - including designing them!
Nice to Have's
- Experience with Scala and/or Groovy
- Knowing the Spring framework
- Security knowledge, especially around authentication and authorisation
- SSO knowledge: SAML, OIDC, OAuth, and more SAML
- Familiarity with Docker, Kubernetes, AWS
We value diversity at our company. Tradeshift prohibits unlawful discrimination based on race, color, religious or religious creed, sex, sexual orientation, gender, age, marital status, veteran status, disability status or any other consideration made unlawful by applicable federal, state, or local laws. All your information will be kept confidential according to EEO and GDPR guidelines