Lead Software Engineer (Java Full Stack)

The IT SIFMU Delivery Department supports core Clearing and Settlement application delivery for DTC, NSCC and FICC.  The department also develops and supports Asset Services, Wealth Management & Insurance Services and Master Reference Data applications.

n

About DTCC

n

DTCC safeguards the financial markets and helps them run efficiently, in times of prosperity and crisis. We are uniquely positioned at the center of global trading activity, processing over 100 million financial transactions every day, pioneering industry-wide, post-trade solutions and maintaining multiple data and operating centers worldwide. From where we stand, we can anticipate the industry’s needs and we’re working to continually improve the world’s most resilient, secure and efficient market infrastructure. Our employees are driven to deliver innovative technologies that improve efficiency, lower cost and bring stability and certainty to the post-trade lifecycle.

n

DTCC proudly supports Flexible Work Arrangements favoring openness and gives people freedom to do their jobs well, by encouraging diverse opinions and emphasizing teamwork.  When you join our team, you’ll have an opportunity to make meaningful contributions at a company that is recognized as a thought leader in both the financial services and technology industries. A DTCC career is more than a good way to earn a living. It’s the chance to make a difference at a company that’s truly one of a kind.

n

Are you ready to explore a world of possibilities? 

n

Join our DTCC family, and you'll grow your expertise and become the best version of you. As you embark on a new journey, you'll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life.

n

Why You'll Love This Job:

n

Being a member of the SIFMU IT team means you will be a part of a technology team with a rich diverse skill sets and a phenomenal hard-working committed team. Whether it’s Java, Spring suite, JavaScript, AngularJS, Unix or Database skillset required for the project initiatives, we are there for each other collaborating and helping each other to achieve the common goal. We are embarking on an incredible multi-year transformation journey and we are looking for best-of-breed software engineers to join us on this journey.

n

In this role you will be responsible to contribute towards fixing the software vulnerabilities evaluated by Pen and Foss security testing tools. This role is expected to work closely with Risk management, End to End Testing and Release Management teams to resolve security vulnerabilities within the due date and strengthen the Security posture of Applications in DTCC. There is also significant opportunity for advancement and growth in this role based on your performance and contribution towards the organization goals.

n

Your Responsibilities:

n

n- To review and remediate Security findings from Pentest, FOSS and Fortify reports. n- Manage integration with vulnerability check tools such as Static Code Analysis and Dynamic Code Analysis tools. n- Identify and implement efficiencies and improvements to standard processes and procedures such as automation through scripting, programming, etc n- Understands corporate info. security standards; ensures test plans validate security requirements. n- Follow best security practices while coding to prevent any security incidents. n- Willingness to play the Security Maven will be an added advantage. n- Is familiar with different software development methodologies (Waterfall, Agile, Scrum, Kanban). n- Mitigates risk by following established procedures, spotting key errors and demonstrating strong ethical behavior. n- Engages in activities to support the broader organization n

n

n

n **Talents Needed for Success:**n

n

n

n- Minimum of 5 years of related experience. n- Bachelor's degree in Computer Science is required, Masters' preferred or equivalent experience. n- Strong knowledge on OWASP top 10 vulnerabilities & Application Security. n- Strong understanding on Secure Coding and Best Practices. n- Strong Coding Experience on Java and related technologies Java, J2EE, Spring (Boot, Core, MVC,JDBC, Security), Struts, Junit, Hibernate. n- Strong expertise on UI technologies like Angular, HTML, JavaScript, jQuery, JSP. n- REST APIs, Swagger n- JEE Application servers Tomcat, Websphere, JBOSS. n- DevOps tools like Maven, Jenkins, nexus and fortify. n- Solid understanding of Agile, CI/CD, Dev/Ops practices and tools n- Hand on experience on Fiddler and Burp Suite. n- Knowledge on host operating system Linux, Windows servers and Portal applications would be an added advantage. n- Demonstrates strong analytical and interpersonal skills. n- Experienced in working with a geographically separated team. n

n