The Managed Risk Engines team is responsible for various scan engines that are used every day to scan millions of machines for security vulnerabilities and misconfigurations. A successful candidate will spend most of their time working on the Java SCAP/OVAL scan engine which is used by Arctic Wolf in its security product as well as OEM licensed to be used in other security products. That Java scan engine can perform local scanning on a wide variety of OSes, including Windows, Linux/Unix, and MacOS, along with performing remote scanning over various protocols to many more OSes and devices. Given the wide range of OSes and devices that can be scanned by the Java scan engine, the ideal candidate would have experience with using multiple OSes and some familiarity with setting up and configuring those OSes. This role is unique, as along with learning and gaining experience with the programming languages used, one will also learn a lot about many different OSes, standards-based security automation technology stacks, and various OSes. If you have a desire for continuous learning, this role is for you.
Responsibilities:
- Architect, design, develop, test, and deliver software in an agile environment.
- Work as part of a team of highly skilled engineers.
- Continuously learn and expand your technical horizons.
Requirements:
- 5+ years of experience shipping production-quality software.
- 3+ years of backend Java development.
- Experience using multiple OSes.
- Desire to write efficient code with resource usage in mind, and not rely on heavy-weight frameworks such as Spring.
Nice to Haves:
- Other programming languages: C#, PowerShell, GoLang, Python, JavaScript, JAXB/XML and JSON schemas and data models, XSLTs.
- Familiarity with Windows, Unix/Linux, macOS, Cisco IOS/IOS-XE, IBM AIX, Juniper OS, PanOS, VMWare ESXi.
- Knowledge of SCAP, XCCDF, OVAL, and other security standards and schemas.
- Experienced in Docker and Kubernetes (K8s)/ECS.
- Experience deploying to Amazon Web Services (AWS).
- Knowledge of ClassLoaders and isolation, Multi-threading and non-blocking I/O, Networking protocols, and data interchange formats.
- Experience in Maven.
- Interest in cyber security.

