Java Security Researcher at CloudLinux

Company and role summary

CloudLinux is a global, remote-first company delivering high-volume, low-cost Linux infrastructure and security products. We are seeking a Java Security Researcher to join the Endless Lifecycle team and provide secure Java instrumentation for heterogeneous Java-based environments. This role focuses on analyzing vulnerabilities, backporting security patches, mitigating risks, and delivering production-ready fixes.

Key responsibilities

• Analyze publicly disclosed vulnerabilities (CVEs) affecting Java open-source libraries and frameworks.
• Investigate and identify safe, compatible versions of third-party dependencies.
• Backport security patches from newer releases to older versions where needed.
• Fix or mitigate vulnerabilities when no upstream patch exists, delivering production-quality updates.
• Write clean, maintainable, and well-documented code to implement security fixes.
• Collaborate with engineers and security specialists to produce high-quality, production-ready updates and instrumentation.

Requirements

• Minimum 3+ years of experience in software development.
• In-depth knowledge of Java Core and Java tooling.
• Experience with dependency management tools such as Maven and Gradle.
• Familiarity with Git, and CI/CD tools such as Jenkins or GitLab.
• Experience maintaining legacy systems and ensuring backward compatibility.
• Experience with repository management systems such as Nexus is a plus.

What we offer

• Focus on professional development and challenging, interesting projects.
• Fully remote work with flexible hours, allowing you to work from any location worldwide.
• Paid 24 days of vacation per year, 10 national holidays, and unlimited sick leave.
• Compensation for private medical insurance.
• Co-working and gym or sports reimbursement.
• Budget for education and professional development.
• Opportunity to receive a reward for the most innovative idea that the company can patent.

How to apply and privacy

By applying you consent to processing of your personal data as described in the CloudLinux candidate privacy notice. Please apply via the job application link on the posting.