Senior Web Application Security Engineer (Java)

About CloudBees

CloudBees is the leading software delivery platform that enables enterprises to deliver scalable compliant and secure software empowering developers to do their best work.

Seamlessly integrating into any hybrid and heterogeneous environment CloudBees is more than a toolits a strategic partner in your cloud transformation journey ensuring security compliance and operational efficiency while enhancing the developer experience across your entire software development lifecycle. It allows developers to bring and execute their code anywhere providing greater flexibility and freedom through fast selfserve and secure workflows.

CloudBees supports organizations at every step of their DevSecOps journey whether using Jenkins onpremise or transitioning software delivery to the cloud and wanting to accelerate their cloud transformation by years. CloudBees is helping customers build the future today.

Why this role

You will join the Jenkins Security team which has the mission to enhance the security of the open source project Jenkins and the CloudBees product based on it (CloudBees CI).

What Youll Do

• Dig into the internals of Jenkins and its plugin system from the perspective of web application security.
• Work on the lifecycle of vulnerabilities.
• Improve our security tooling/process/automation.
• Provide security education increase awareness in the department and in the community.

What The Role Requires

• Bachelors degree in Computer Science or related field.
• 5 years of professional experience in Java web application development (JavaScript is a plus).
• Professional experience or certification in web application security.
• Hacker mindset.
  • Willingness to learn.
  • Desire to break things for the good.
  • Solving problems.
• Experience using CI/CD tools (Jenkins is a plus).
• Experience in scripting (Groovy Shell).

Were invested in you!

We offer generous paid time off to allow our employees time to rest recharge and to be present with family and friends throughout the year. At CloudBees we truly believe that the more diverse we are the better we serve our customers. A global community like Jenkins demands a global focus from CloudBees. Organizations with greater diversitygender racial ethnic and globalare stronger partners to their customers.

Whether by creating more innovative products or better understanding our worldwide customers or establishing a stronger crosssection of cultural leadership skills diversity strengthens all aspects of the CloudBees organization. In the technology industry diversity creates a competitive advantage. CloudBees customers demand technologies from us that solve their software development and therefore their business problems so that they can better serve their own customers. CloudBees attributes much of its success to its worldwide work force and commitment to global diversity which opens our proprietary software to innovative ideas from anywhere.

Along the way we have witnessed firsthand how employees partners and customers with diverse perspectives and experiences contribute to creative problemsolving and better solutions for our customers and their businesses.

Scam Notice

Please be aware that there are individuals and organizations that may attempt to scam job seekers by offering fraudulent employment opportunities in the name of CloudBees. These scams may involve fake job postings unsolicited emails or messages claiming to be from our recruiters or hiring managers. Please note that CloudBees will never ask for any personal account information such as cell phone credit card details or bank account numbers during the recruitment process. Additionally CloudBees will never send you a check for any equipment prior to employment.

All communication from our recruiters and hiring managers will come from official company email addresses (@) or from Paylocity and will never ask for any payment fee to be paid or purchases to be made by the job seeker. If you are contacted by anyone claiming to represent CloudBees and you are unsure of their authenticity please do not provide any personal/financial information and contact us immediately

We take these matters very seriously and will work to ensure that any fraudulent activity is reported and dealt with appropriately. If you feel like you have been scammed in the US please report it to the Federal Trade Commission at:

In Europe please contact the European AntiFraud Office at: of a Recruitment Scam

Ensure there are no other domains before or after @. For example:

Check any documents for poor spelling and grammar this is often a sign that fraudsters are at work.

If they provide a generic email address such as @Yahoo or @Hotmail as a point of contact.

You are asked for money an administration fee security fee or an accreditation fee.

You are asked for cell phone account information.

You are asked to cash a check for equipment prior to start.

You are offered a job offer immediately or without an interview.