Security Software Engineer - Global Health Data Platform

At DHIS 2 we are making a positive impact on the world. DHIS 2 software engineers develop a platform used to improve health care at a global scale. We work directly with end-users in order to understand how our system is being used. DHIS 2 developers work in small teams and have great impact on the product. We are seeking a security software engineer who is passionate about creating secure, reliable software systems.

DHIS 2 is a web-based, open source data platform used by governments, international development agencies and NGOs in more than 60 countries worldwide. It is currently recognized as the world's most widely adopted e-health information platform. The system is used to improve access and use of information within health, education, sanitation, nutrition, disaster relief and other domains. The platform has become a global standard within international development and has a huge impact on the way health systems are being managed.

DHIS 2 is changing the way developing countries and NGOs manage their health systems and programs through a world class data platform. We work on projects with global reach and scale, such as:

• Disease surveillance and monitoring in collaboration with the Centers for Disease Control and Prevention (CDC). DHIS 2 is used to notify the right people about possible disease outbreaks so that action can be taken in time.

• HIV/AIDS control in collaboration with PEPFAR, the largest initiative ever for combating a single disease. DHIS 2 is used to collect data and provide analytics and insights into how funding can be spent most effectively.

• Health information management systems with more than 60 ministries of health worldwide, including South Africa, Tanzania, Ghana and Cambodia. DHIS 2 is used to collect and analyze data for areas such as service utilization, family planning and immunization.

• Program monitoring and evaluation with more than 70 NGOs such as Medecins Sans Frontieres, Save the Children, and PSI. DHIS 2 is used to analyse the impact of programs, improve planning and guide resource utilization.

At DHIS 2 you will be specialize in building and maintaining a secure and reliable software platform. You will play a key role in the software design, implementation and testing, where you apply security thinking and best-practices to the process. You will advise, train and encourage fellow engineers to adopt secure software development practices, as well as writing source code on your own. The role encourages you to research and identify security flaws and attack vectors in the source code base, as well as ensuring these will be corrected. You will help defining and implementing an organization-wide security strategy.

At our team you will be part of the software design process and have great influence on the end product. We give you the vision and the challenge - you have the freedom to choose your own approach to problem solving. And of course, you can pick your hardware, tools and software of choice.

Our platform is built API-first with an extensible app architecture. We do continuous delivery and short iterations. You can find our source code on GitHub. Check out the backend repository and a typical front-end app repository.

To learn more about how it is to work at DHIS 2, have a look at this video.

Skills

• Experience with secure software engineering practices.

• Knowledge about application security risks including OWASP top 10.

• Experience with Java development (Java 8) and Maven.

• Experience with PostgreSQL, MySQL or other relational databases.

• Working proficiency and communication skills in verbal and written English.

Nice-to-have skills

• Relevant security certifications.

• Work experience from similar role.