Application Security Engineer JBoss Contract to Hire Hybrid

Experienced Recruiting Partners; City of Albany (NY); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Experienced Recruiting Partners is seeking a security-focused software professional to join a hybrid development team in Albany, NY. You will diagnose vulnerabilities, perform risk-based assessments and penetration tests, and advise leadership on security training and design improvements.

Must have a strong background in Java/Web security, secure coding in RHEL/JBoss, and experience with Fortify, SonarQube, and CI/CD security integration. Local or near-local candidates preferred.

Qualifications

• 8+ years information technology experience.
• 5+ years in a software development role (Developer/Architect).
• Bachelor's degree in CS or equivalent experience.
• Java/Web development with secure coding in RHEL and JBoss.
• 3+ years in Application Security Engineering with assessments, PT, and tool usage.
• Experience reviewing code changes for vulnerabilities.
• Experience integrating AI-assisted code analysis into CI/CD pipelines.
• Ability to present risk updates to leadership.
• Excellent written and verbal communication; ability to teach others.

Responsibilities

• Diagnose, document, and remediate application security vulnerabilities.
• Conduct risk-based assessments and penetration tests with dynamic/static tools.
• Consult with Development leadership on security training and designs.
• Stay current with cybersecurity trends and attack vectors.
• Collaborate cross-functionally to address security findings and remediation.

Skills

IT experience

Software development

Java/Web development

Secure coding

RHEL/JBoss

Application security

Static/Dynamic code scanning

CI/CD security integration

Threat modeling

Communication

Education

Bachelor's degree in Computer Science or related field

Equivalent education/experience

Tools

Fortify

SonarQube

AI-driven code analysis platforms

Job description

Contract (Possibly Contract to Hire)

Hybrid role: Remote + Onsite in Albany, NY

Client is looking for someone that is local to the Albany, NY area

Per client requirements: must be US Citizen or Green Card Holder status

Overview:

• You'll join client's talented Development Team. The project is built on a multi-tier architecture including Service Oriented architecture, multi-tier web applications using Java and various other COTS products.
• Work closely with development teams to diagnose, document, and remediate application security vulnerabilities and identify appropriate security checkpoints in SDLC.
• Perform risk-based, technical assessments/penetration tests of applications, using dynamic and static scanning tools, and audits ensuring compliance with industry standards
• Consult with Development leadership on application development training.
• Research new attack vectors and stay current with cybersecurity news and trends.

Requirement:

• 8+ years Information Technology.
• 5+ years in software development role as a Developer, or Architect
• Bachelor's degree in Computer Science, or related technical field, OR equivalent combination of education and experience
• Java/Web development with strong secure coding background in RHEL and JBoss.
• 3+years with Application Security Engineering conducting assessments, penetration testing, implementing tools for dynamic /automated code review, dynamic and static application scanning (Fortify, SonarQube); consulting on security designs of applications, potential vulnerabilities, and remediation, and creating training materials on key security concepts.
• Hands-on experience assessing new code commits, pull requests, and architecture changes for vulnerabilities, misconfigurations, and compliance risks.
• Hands-on experience integrating AI-driven code analysis platforms into CI/CD pipelines to identify vulnerabilities and insecure coding patterns before deployment.
• Hands-on experience designing and executing a repeatable process to aggressively prioritize issue dispositions and remediations of security findings - while providing clear, concise status updates and risk reporting to leadership and stakeholders.
• Strong oral and written communication skills, with a demonstrated ability to communicate complex topics to colleagues, and management.
• Demonstrated collaboration and teaching abilities.Strong analytical skills.
• Identify and resolve problems in a timely manner; gather and analyze information skillfully; develop alternative solutions.
• Critical thinking and creative problem solving

Plus: CISSP, CEH, CISA, OSCP, OSCE, or OSWE Certifications