Software Dev in security space, where from here?

Scougar · 4 Aug 2021 at 15:16

I'm primarily a java developer for past 15 years or so.
This started with a heavy transaction based role for government.
Then moved to a big etailer that had by the minute price changes for products and heavy reliance on search ability and being able to show the right products.
Now at a legal services company where I recoded the entire login, security flow. Heavy spring boot use, containers, ldaps, db etc.

So, as those in the field know, coding is quite a small part of the process and being able to figure things out connect all the pieces and configure are huge parts of being successful.

Anyway, the question: I want to go even further into the security space, whilst somehow retaining my development skillset and wondering how I can achieve this? What sort of roles should I look for that won't place me in the "tech guy" role. I want to get into cyber security more, but really trying to not lay waste to my 15 years of pro-experience, or find myself in a boring configuration role.

Edit: At present, we are doing (again) a much updated version of our login process to be even more secure, and looking like my coding role will be lessened, and I will get training in the OTS product that is kinda config based. This is not where I want to be going if possible.

Scougar · 4 Aug 2021 at 19:06

I feel I'm lacking in the design area, so it's definitely an area I need to go back into. I haven't done any real modelling for years. It's all small stuff design wise. Not sure Architect yet is my thing. I've got no problem learning when it matters.

If I stay with the current company, I'm not sure cloud is the way to go, or at least if we did it would be on-prem cloud. I'll look into it though, and see what we can do. I am sure I could swing something towards the container (RHOS/kubernetes) side of things alongside the security parts.

Scougar · 5 Aug 2021 at 06:10

Mainly because the corp world seems very silo'd. I don't know if there are specific roles for what I'm asking.

Security Software Developer I guess? lol.

Scougar · 5 Aug 2021 at 16:32

I work for a legal services firm that does work for fortune 500 companies among other things, so security is always high on the agenda.

I just don't want my work to become paperwork/report driven..that would drive me nuts. Lol.

I have buddy that wants me to come work at his bank. Banks are inherently unstable though in regard to staff, so I don't find that particularly appealing.

Scougar · 6 Aug 2021 at 19:06

Good suggestion there Ev0. (and dowie I see you suggested this as well).

I'll take a look into what we have in those roles here at my current place. I already have a very good rep with the operations team etc, so it might be worth my time asking around.