Software Developer (Secure Development)

Description

Job Summary: Indra Group is seeking a Software Developer specialized in secure development to build leading-edge technological solutions that strengthen competitiveness and security. Key Highlights: 1. Develop critical technologies that drive digital transformation 2. Work with cutting-edge technologies in innovative projects 3. Foster a tailored career plan and continuous training **Location:**Madrid, MD, ES **Professional Profile:** Software Development \- Legacy Languages **Required Experience:** More than 2 years of experience **Work Modality:** Hybrid **Software Developer (Secure Development).** Madrid, hybrid model At **Indra Group, We Protect What Matters Most**, we develop critical technologies that drive the digital transformation of strategic and high-impact sectors. We lead the development of leading-edge technological solutions that reinforce the competitiveness and security of essential infrastructures at national and international levels. Join our team! In our positioning as a technology and secure development leader, we aim to strengthen our team with a **Software Developer specialized in secure development**, bringing solid experience in secure development best practices, applied security, and software quality. **What You’ll Do:** * Develop solutions using a primary stack (e.g., Java), applying layered architecture principles. * Manage Git repositories: branch creation and management, pull requests (PRs), and conflict resolution. * Design and implement REST APIs, including error handling, HTTP status codes, and basic documentation using OpenAPI/Swagger. * Work with databases performing CRUD operations, basic queries, and simple migrations. * Apply security by default, avoiding common vulnerabilities such as injection, XSS, CSRF, broken access control, data exposure, or SSRF. * Implement input validation, sanitization/encoding, and secure file handling. * Apply authentication and authorization concepts: use of JWT, understanding of OAuth2/OIDC, interaction with Identity Providers (IdPs), and role/scope management. * Perform basic applied cryptography management: use of TLS, encryption with standard libraries, and secure password hashing (bcrypt/argon2\). * Manage secrets in secure environments: appropriate use of environment variables or secret managers. * Create basic unit and integration tests to ensure code quality. * Generate structured logs, ensuring no sensitive data is included. * Clearly document developed changes, indicating what was modified, why, and associated risks if pending. * Collaborate with multidisciplinary teams, promoting code reviews and secure development best practices. **What We’re Looking For:** Don’t worry if you don’t meet 100% of the requirements. Go ahead — learn about our proposal and let us discover what you can bring to our team! * At least **2 years of experience** in software development. * Proficiency in a primary backend stack (e.g., Java) and understanding of layered architectures. * Solid knowledge of Git: branching, PRs, and conflict resolution. * Experience with REST APIs, basic documentation, and OpenAPI/Swagger usage. * Good database handling skills: CRUD operations, basic queries, and simple migrations. * Applied security knowledge for development: injection, XSS, CSRF, broken access control, data exposure, SSRF (at least conceptually). * Experience in input validation, sanitization/encoding, and secure file handling. * Basic knowledge of authentication/authorization: JWT, OAuth2/OIDC (IdP, access token, simple roles and scopes). * Applied cryptography: use of TLS, secure password hashing. * Good practices for secret management and use of environment variables or secret managers. * Execution of unit tests and some integration testing. * Knowledge of structured logging without exposing sensitive data. * A *secure-by-default* mindset, proactivity, and ability to request review when needed. * Ability to document changes, decisions, and pending risks. * Availability to work in a hybrid model in Madrid. **What We Offer:** * **Stability and Future**: Long-term projects at a leading company with over 50\.000 professionals and financial stability. * **Innovative and High-Impact Projects**: Work with cutting-edge technologies, with national and international impact. * **Close and Transparent Environment**: Direct and fluid communication with managers and colleagues in a collaborative setting. * **Autonomy and Flexibility**: Freedom to organize your work, with real work-life balance adapted to your pace. * **Tailored Career Plan**: Designed to boost your professional growth and development. * **Continuous Training**: Access to Open University and Udemy for Business (over 6\.000 courses). * **Exclusive Discounts**: Benefits at gyms, restaurants, stores, leisure, and more. * **Competitive Compensation and Flexible Reward Plans**. **What’s Our Selection Process Like?** * **Profile Review**: We analyze your experience and skills. * **Initial Contact (5–10 min)**: If we call from an unknown number, it’s us! * **Technical Interview**: With the team, including brief competency and English assessments. * **Offer and Onboarding**: If everything aligns, you join the team! Estimated duration: **1–2 weeks**. Our commitment is to foster workplaces where people are treated with respect and dignity, supporting employees’ professional development and guaranteeing equal opportunities in selection, training, and promotion — offering a workplace free from any discrimination based on gender, age, disability, sexual orientation, gender identity or expression, religion, ethnicity, marital status, or any other personal or social circumstance. INDRA is a Top Employer 2025! Join a company certified as one of Spain’s best employers, thanks to our comprehensive HR management and conditions offered to our professionals.