[Hiring] Java Security Researcher @Cloudlinux

CloudLinux is a global, remote-first company. We are driven by our principles: Do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure everyone is successful.

We are truly a great place to work. 

We are looking for a talented and passionate Java Security Researcher to join our team. In this role, you will be working on the Endless Lifecycle team, where you will have the opportunity to make a significant impact by providing secure Java instrumentation for heterogeneous Java-based environments.

We are looking for someone with extensive expertise in Java tools and a fresh and revolutionary approach. This challenging mission requires a deep understanding of Java tools and a keen eye for creating groundbreaking solutions.

As a Java Security Researcher, you will:

• Analyze publicly disclosed vulnerabilities (CVEs) affecting Java open-source libraries and frameworks.
• Investigate and identify safe and compatible versions of third-party dependencies.
• Backport security patches from newer releases to older versions.
• Fix or mitigate vulnerabilities where no upstream patch exists.
• Write clean, maintainable, and well-documented code.
• Collaborate with other engineers and security specialists to deliver high-quality, production-ready updates.

Requirements

To be successful, you should have:

• 3+ years of experience in software development
• In-depth knowledge of Java Core 
• Experience with dependency management tools (Maven, Gradle)
• Experience with Git, Jenkins/Gitlab for CI/CD
• Experience with legacy systems and maintaining backward compatibility
• Experience with repository management systems, such as Nexus, is a plus

Benefits

What's in it for you?

• A focus on professional development.
• Interesting and challenging projects.
• Fully remote work with flexible working hours, that allows you to schedule your day and work from any location worldwide.
• Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves.
• Compensation for private medical insurance.
• Co-working and gym/sports reimbursement.
• Budget for education.
• The opportunity to receive a reward for the most innovative idea that the company can patent.

By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy (https://cloudlinux.com/candidate-privacy-notice), which provides detailed information on how we maintain and handle your data.

About the company

CloudLinux is on a mission to make Linux secure, stable, and profitable. We have spent more than 500 combined years working on Linux, and are changing how hosting companies and data centers use this technology we love by bringing it to millions of their customers. With more than 500,000 product installations and 4,000 customers, including Liquid Web, 1&1, and Dell, CloudLinux combines in-depth technical knowledge of hosting, kernel development, and open source with unique client care expertise.

CloudLinux team members are not tied to a physical office location, and everyone works remotely full-time. We provide flexible working hours and an open management style, to avoid unnecessary bureaucracy and excessive control while getting the best from our employees. This system allows each of us to fully realize our ideas and ambitions, while comfortably combining work with our usual lifestyles.