Backend Developer (Cyber Threat ) on w2

Job Title : Backend Developer — Cyber Threat Dashboard API Tech Stack

Job duration: Long Term

Locationvvv: Remote

Only on Independed candidated 

·       Java 21, Spring Boot 3.5.x, Maven

·       Spring Data JDBC/JDBC (Oracle via ojdbc11), Spring Data MongoDB, Spring Session (Mongo-backed)

·       Spring Cloud OpenFeign (+ Feign HttpClient) for calling Splunk/Illumio and other external services

·       ShedLock (JDBC provider) for distributed scheduled-job locking

·       Caffeine caching, Micrometer metrics, Splunk logging appender

·       Spring Security with Kerberos client and JWT-based auth (nimbus-jose-jwt)

·       springdoc-openapi (Swagger UI)

·       JUnit 5, Mockito, MockServer (Netty), REST Assured, Awaitility, H2 for test-time persistence

·       JaCoCo coverage, Checkstyle, Spotless (formatting/import-order gate on changed files), SonarQube

Responsibilities

·       Design and implement REST endpoints backing the UI's workload, traffic-investigation, service, rules, and approval-workflow screens

·       Build and maintain Feign clients and enrichment logic integrating Splunk and Illumio data into internal domain models

·       Implement rules and approval-workflow business logic, including validation and audit trail

·       Write scheduled jobs where needed (ShedLock-coordinated) for periodic sync/reconciliation tasks

·       Maintain Oracle (JDBC) and MongoDB data access layers; manage schema/migration concerns

·       Write JUnit/Mockito unit tests and REST Assured integration tests; keep JaCoCo coverage and the Sonar gate green; follow Checkstyle/Spotless formatting standards

·       Keep OpenAPI/Swagger documentation current for consumers, notably the frontend team

·       Coordinate with frontend developers on API contract, pagination, error-response shape, and the auth/permission model

Skills Required

·       Strong Java 21 / Spring Boot experience, comfortable with Spring Data (JDBC + MongoDB) in the same codebase

·       Experience with Feign or similar declarative HTTP clients, and integrating third-party security platforms (Splunk, Illumio, or similar SIEM/segmentation tools a plus)

·       Familiarity with enterprise Kerberos/JWT-based authentication

·       Solid testing discipline: JUnit 5, Mockito, MockServer/REST Assured for integration-level tests

·       Comfortable working in an enterprise SSO/corporate-proxy environment with GitLab CI, Sonar/Checkstyle gates