Overview
Skills
Job Details
Has ability to write secure code in three or more languages (e.g., Java, JavaScript, C, C++, SQL) Familiar with secure coding standards (e.g., OWASP, CWE, SEI CERT) and vulnerability management Able to perform debugging and troubleshooting to analyze core, heap, thread dumps and remove coding errors Understands and implements standard branching (e.g., Gitflow) and peer review practices Has skills in test driven and behavior driven development (TDD and BDD) to build just enough code and collaborate on the desired functionality Understands use cases for advanced design patterns (e.g., service-to-worker, MVC, API gateway, intercepting filter, dependency injection, lazy loading, all from the gang of four) to implement efficient code Understands and implements Application Programming Interface (API) standards and cataloging to drive API/service adoption and commercialization Has skills to author test code with lots of smaller tests followed by few contract tests at service level and fewer journey tests at the integration level (Test Pyramid concept) Apply tools (e.g., Sonar, BLackduck, Checkmarx ) and techniques to scan and measure code quality and anti-patterns as part of development activity Has skills to collaborate with team and business stakeholders to estimate requirements (e.g., story pointing) and prioritize based on business value Has skills to elaborate and estimate non-functional requirements, including security (e.g., data protection, authentication, authorization), regulatory, and performance (SLAs, throughput, transactions per second) Has skills to orchestrate release workflows and pipelines, and apply standardized pipelines via APIs to achieve CI and CD using industry standard tools (e.g., Jenkins, AWS/Azure pipelines, XL Release, others). Has skills to understand, report, and optimize delivery metrics to continuously improve upon them (e.g., velocity, throughput, lead time, defect leakage, burndown) Has skills to document and drive definition-of-done for requirements to meet both business and operational needs