Java Application Security Engineer

DataStaff, Inc.; City of Albany (NY); Hybrid; USD 140,000 - 210,000; Full time

Job summary

DataStaff Inc. is seeking a Java Application Security Engineer to join our team in Albany, NY. This long-term contract role is primarily remote, with on-site attendance required initially for 3 weeks, then 2 days on-site per quarter.

You will work with a multi-tier Java/SOA stack, performing vulnerability assessments, secure coding reviews, and CI/CD integration to preempt security issues before deployment.

Qualifications

• Bachelor's degree in Computer Science or related field, or equivalent experience.

Responsibilities

• Diagnose, document, and remediate application security vulnerabilities in SDLC.
• Perform risk-based assessments and penetration tests of applications using dynamic/static tools.
• Consult with development leadership on security training and best practices.
• Research new attack vectors and cybersecurity trends.

Skills

Security mindset

Communication skills

Problem solving

Collaborative teamwork

Ability to prioritize risk

Education

Bachelor's degree in Computer Science or related field

Tools

Fortify

SonarQube

Job description

DataStaff Inc. is seeking a Java Application Security Engineer for a long-term contract opportunity with one of our direct clients in Albany, NY

* This position is primarily remote, with on-site attendance required for the first 3 weeks. After the initial 3-week period, you will be required to be on-site 2 days per quarter.

Job Description

You'll join our talented Development Team. Our project is built on a multi-tier architecture including service-oriented architecture, multi-tier web applications using Java and various other COTS products.

Responsibilities

• Work closely with development teams to diagnose, document, and remediate application security vulnerabilities and identify appropriate security checkpoints in SDLC.
• Perform risk-based, technical assessments/penetration tests of applications, using dynamic and static scanning tools, and audits ensuring compliance with industry standards
• Consult with Development leadership on application development training.
• Research new attack vectors and stay current with cybersecurity news and trends

WHAT YOU'LL NEED TO SUCCEED

Education

Bachelor's degree in Computer Science, or related technical field, OR equivalent combination of education and experience

Required Experience

• 8+ years of Information Technology experience.
• Hands-on experience designing and executing a repeatable process to aggressively prioritize issue dispositions and remediations of security findings - while providing clear, concise status updates and risk reporting to leadership and stakeholders.
• Hands-on experience integrating AI-driven code analysis platforms into CI/CD pipelines to identify vulnerabilities and insecure coding patterns before deployment.
• Hands-on experience assessing new code commits, pull requests, and architecture changes for vulnerabilities, misconfigurations, and compliance risks.
• 3+years with Application Security Engineering conducting assessments, penetration testing, implementing tools for dynamic /automated code review, dynamic and static application scanning (Fortify, SonarQube); consulting on security designs of applications, potential vulnerabilities, and remediation, and creating training materials on key security concepts.
• Java/Web development with a strong secure coding background in RHEL and JBoss.
• 5+ years in a software development role as a Developer or Architect

Skills

• Strong oral and written communication skills, with a demonstrated ability to communicate complex topics to colleagues and management
• Critical thinking and creative problem solving
• Identify and resolve problems in a timely manner; gather and analyze information skillfully; develop alternative solutions
• Strong analytical skills.
• Demonstrated collaboration and teaching abilities.

Nice to have

CISSP, CEH, CISA, OSCP, OSCE, or OSWE Certifications

This opportunity is available as a W2 position with a competitive benefits package. DataStaff offers medical, dental, and vision coverage options as well as paid vacation, sick, and holiday leave. As many of our opportunities are long-term, we also have a 401k program available for employees after 6 months of employment.