Senior Software Engineer - Java

The world’s most critical--and at risk--business applications have been neglected for far too long. Onapsis eliminates this blind spot by providing cybersecurity solutions dedicated to business-critical applications. Whether running on premises, in the cloud, or in a hybrid environment, Onapsis helps nearly 30% of the Forbes Global 100 understand the threats and risks across their SAP and Oracle landscapes.

Working with leadership, product management, and the Onapsis research team. You will be engaged in evaluating, scoping, proposing, and building features to fulfill business solution requirements to protect our customers. Work collaboratively with a team of cybersecurity researchers, engineers, and product managers to iterate toward product definition and realization. Additionally, you will be working with the Architecture team to take the platform to the next level of maturity in terms of technologies and architecture design while advancing our quality engineering processes to deliver high-quality products and services while also working closely with security and IT professionals to ensure safe and secure systems architectures are followed.

Experience & Core Stack

• Professional Experience: 6+ years of professional software engineering experience, with 4+ years of experience in Object-Oriented Programming (OOP) and Object-Oriented Design (OOD) concepts.
• Education: Bachelor’s Degree in Systems Engineering, Computer Science, or a related field (or equivalent relevant work experience).
• Language Proficiency: 4+ years of solid programming experience with Java. Knowing or having a strong interest in Kotlin is highly valued.
• Frameworks: 3+ years of experience with Spring Boot and Micronaut frameworks.
• Data Layer: Strong knowledge of relational databases, SQL, and ORM frameworks (e.g., Hibernate).

Architecture & System Design

• System Design: 3+ years of experience contributing to system design, architecture, reliability, and scaling of new and current systems.
• Architectural Patterns: Robust background in Distributed Systems, Microservices, and Event-Driven architectures.
• API Development: Proven experience building high-performance APIs (REST, GraphQL).

Infrastructure, Cloud & Environment

• Cloud & Containers: Hands-on experience with cloud-native application development, specifically AWS and containerization using Docker.
• Operating Systems: Proficient in Linux environments (comfortable with Bash scripting).
• Build Automation: Experience with modern build tools like Maven and Gradle.
• Asynchronous Messaging: Solid knowledge of message brokers, asynchronous tasks, and queues (e.g., RabbitMQ, AMQ, Redis).

Engineering Practices & Modern Tooling

• Development Workflow: Solid experience with Git version control, CI/CD pipelines (GitLab preferred), Test-Driven Development (TDD), and Agile methodologies.
• Observability: Experience troubleshooting production environments using modern observability and monitoring tools.
• AI Productivity: Solid understanding and conceptual use of AI tooling / Agentic AI to optimize and accelerate day-to-day development workflows.

Technical Leadership & Communication

• System Ownership: Proven experience taking a leading role in building, architecting, and successfully delivering complex, enterprise-wide software systems to customers.
• Collaboration & Requirements: Strong communication skills with users, cross-functional technical teams, and senior management to gather requirements, define product features, explain technical designs, and align on product strategy.
• Engineering Standards: Deep understanding of the full software development life cycle (SDLC) best practices, including coding standards, comprehensive code reviews, source control management, build processes, testing, and operations.

Advanced Engineering & Architecture

• Security: Strong commitment to and experience with secure software development lifecycle (SSDLC) best practices.
• Distributed Systems: Experience with distributed computing and large-scale, enterprise-grade systems.
• Orchestration & Containers: Knowledge of Kubernetes (K8s) deployments and managing applications via Helm charts.
• Performance Optimization: Hands-on experience or strong interest in GraalVM for native image compilation, runtime optimization, and resource consumption management.

Emerging Tech & Secondary Stack

• Data & AI Agents: Background or interest in data-extraction agents or managing complex system integrations.
• Additional Languages: Experience with or knowledge of Python is highly valued.

• A role in shaping the future of protecting the most critical applications that run the world's business and a career that grows as the company grows.
• A unique culture of high achievement and teamwork.
• Supportive and humble colleagues are the space's top problem solvers and innovators.
• Financial security through competitive compensation and incentives.

Onapsis is establishing a new development center in Bucharest. This is a hybrid role (1-2 days per week from the office), so candidates must be commutable to Bucharest.

Onapsis protects the business applications that run the global economy. The Onapsis Platform delivers vulnerability management, change assurance, and continuous compliance for business applications from leading vendors such as SAP, Oracle, and others. The Onapsis Platform is powered by the Onapsis Research Labs, the team responsible for the discovery and mitigation of more than 1,000 zero-day vulnerabilities in business applications.

Onapsis is headquartered in Boston, MA, with offices in Heidelberg, Germany and Buenos Aires, Argentina, and proudly serves hundreds of the world’s leading brands, including close to 30% of the Forbes Global 100, six of the top 10 automotive companies, five of the top 10 chemical companies, four of the top 10 technology companies, and three of the top 10 oil and gas companies.

For more information, connect with Onapsis on LinkedIn or visit https://www.onapsis.com.

#LI-AC1

#LI-Hybrid