Job
In this role, you will develop security concepts for a Low-Code funding platform, design software adjustments, document security guidelines, and ensure IT security according to customer requirements.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- A new technical platform is to be developed, on which the individual funding services (over 100 different services) can be implemented configurably.
- The funding platform should be implemented based on the low-code platform PEGA and the SAP module Social Service Management.
- The funding platform is expected to be developed for the first funding instrument by the end of 2026 and to go live at the turn of the year.
- The organization of the project is divided into several sub-teams, which are to be transitioned into independent projects through the setup of programs.
- The task is to ensure the IT security of the new process in accordance with the customer guidelines.
- Support in activities related to the creation of the Data Protection Impact Assessment.
- Development of security concepts (including documentation as V-Siko).
- Design of requirements and definition of necessary software adjustments to meet the protection needs and security concepts.
- Ensuring the implementation of the defined software adjustments.
- Preparation of all necessary documents related to safety concepts for the procedural registration.
Our expectations of you
Qualifications
- Specialized knowledge in multi-tier applications.
- Design & Modeling of Software (OOA/OOD, UML).
- EJB container, application server (Oracle WebLogic, Payara).
- Cryptography.
- SAML, SSO, OpenID Connect.
- User and session management.
- Auditing and Logging.
- In-depth knowledge of JavaEE / EJB / Servlets.
- Portal architectures.
- Web frameworks (e.g., JSF).
- Java Script frameworks.
- Common Java tools (Eclipse, JDeveloper, Ant, Maven, JUnit, Hudson/Jenkins).
- RDBMS (Oracle, MS-SQL Server) and NoSQL databases.
- Test concepts (Unit Test, Performance Test).
- Integration architectures (ESB, Webservices, REST, Messaging).
- Multiple operating systems (UNIX, Linux, Windows).
- OpenSAMM as a procedural model.
- Threat analyses.
- Security architectures.
- Secure Design Pattern.
- Secure Design Principles.
- Security requirements according to OWASP.
- Test software for security.
- Metrics for security.
Experience
- Project-specific: Knowledge and experience in multi-tier applications as well as design & modeling of software - specialized knowledge (necessary).
- Knowledge and experience in user and session management - specialized knowledge (necessary).
- Knowledge and experience in threat analysis - advanced knowledge (necessary).
- Knowledge and experience in security metrics - advanced knowledge (necessary).
- Knowledge and experience in JavaEE / EJB / Servlets - advanced knowledge (desirable).
What we offer
- Project location: Nuremberg (10% on-site).
- Duration: 15.04.2026 - 30.04.2027.
- Volume: 833 hours (including 83 hours on-site).
Benefits
Work-Life-Integration
Health, fitness & fun
Topics you will work on
Job locations
More about the recruiting agency
mindheads GmbH is an independent company specializing in IT and personnel services, offering a wide range of services including the recruitment and placement of IT experts and executives, as well as planning and implementing IT infrastructure and software solutions.
- Recruiting Agency
- Onsite, Hybrid, Full Remote
- Internet, IT, Telecommunication
More jobs
These jobs might also interest you
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...
