java developer in Linux security

TuxCare offers security solutions for Linux and open-source software aimed at enterprise organizations. Its Endless Lifecycle Support product provides security patches for end-of-life Linux distributions, programming languages, runtimes, and frameworks.

• Analyze publicly disclosed vulnerabilities (CVEs) affecting Java open-source libraries and frameworks;
• Investigate and identify safe and compatible versions of third-party dependencies;
• Backport security patches from newer releases to older versions;
• Fix or mitigate vulnerabilities where no upstream patch exists;
• Write clean, maintainable, and well-documented code;
• Collaborate with other engineers and security specialists to deliver high-quality, production-ready updates.

• 5+ Years of experience in software development;
• In-depth knowledge of Java Core and Spring;
• Experience with dependency management tools (Maven, Gradle, Ant);
• Experience with AI tools on a daily basis;
• Experience with GitLab/Jenkins/GitHub for CI/CD;
• Experience with legacy systems and maintaining backward compatibility;
• English - upper-intermediate and higher;
• Nice to have: Experience with repository management systems such as Nexus, experience with Python.

• Fully remote work with flexible working hours, allowing work from any location worldwide;
• Paid 24 days of vacation per year;
• 10 Days of national holidays;
• Unlimited sick leaves;
• Compensation for private medical insurance;
• Co-working and gym/sports reimbursement;
• Budget for education;
• Opportunity to receive a reward for the most innovative idea that the company can patent.