Penetration Tester

Amatriot Group, LLC; Hampton Park (NY); On-site; USD 90,000 - 105,000; Full time

Job summary

Amatriot Group, LLC is seeking a Penetration Tester focused on Java application security to identify, exploit, and help remediate vulnerabilities in Java-based systems. You will assess security controls and simulate attacker techniques to strengthen defenses.

The role requires 6+ years of development or security experience, expertise with Burp Suite, Metasploit, and Fortify on Demand, and a solid understanding of Java security principles and the MITRE ATT&CK framework.

Qualifications

• Bachelor’s degree in CS or related field.
• 6+ years of development or security experience.
• Experience in Java security and penetration testing.
• Proficiency with Burp Suite and Metasploit.
• Familiarity with Fortify on Demand SAST/DAST.
• Knowledge of MITRE ATT&CK.

Responsibilities

• Conduct penetration tests and vulnerability assessments for Java applications.
• Identify security flaws in Java code using automated and manual methods.
• Create exploits to test application security and simulate attack tactics.
• Collaborate with development teams to remediate security weaknesses.
• Document findings with risk assessments and recommendations.
• Apply MITRE ATT&CK knowledge to assessments.

Skills

Java security

Penetration testing

Web security

Security incident response

Threat modeling

MITRE ATT&CK

OWASP

Education

Bachelor’s degree in Computer Science, Information Security, or a related field

Tools

Burp Suite

Metasploit

Fortify on Demand

Job description

Career Opportunities with Amatriot Group, LLC

A great place to work.

Share with friends or Subscribe!

Are you ready for new challenges and new opportunities?

Join our team!

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Location: Albany, NY
Security Clearance: None
Job Type: Full-Time

Target Salary Range*:$90,000 - $105,000

*This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview

A Penetration Tester with a focus on Java application security identifies, exploits, and supports remediation of vulnerabilities in Java applications to help guard against cyber threats.

Key Responsibilities

Penetration Testing and Vulnerability Assessment

• Conduct penetration tests and vulnerability assessments for Java applications and infrastructure.
• Identify security flaws in Java code using automated and manual methods.
• Create and use custom exploits to test application security, simulating attacker tactics.
• Assist in responding to security incidents related to Java vulnerabilities and current published NIST CVEs.

Secure Development and Remediation Support

• Collaborate with development teams to understand application architecture and identify security weaknesses early.
• Collaborate with testing teams to integrate security testing with manual and automated testing.
• Provide guidance on secure coding and vulnerability remediation.
• Contribute to security policies for Java development and deployment.

Reporting, Communication, and Threat Awareness

• Clearly document and report findings, including technical details, risk assessments and recommended solutions.
• Communicate findings and recommendations to both technical and non-technical staff.
• Stay updated on Java security threats and best practices.
• Apply familiarity with the MITRE ATT&CK Framework.

Qualifications

Education

• Bachelor’s degree in Computer Science, Information Security, or a related field.

Experience

• Minimum of 6 years of development or security experience. [Required]
• Experience in penetration testing or ethical hacking with a focus on Java application security.
• Experience with penetration testing tools such as Burp Suite and Metasploit.
• Familiarity with Fortify on Demand SAST and DAST tools.

Skills

• Strong knowledge of Java programming and Java security practices.
• Scripting experience.
• Proficiency in web application security principles, including OWASP.
• Knowledge of common web vulnerabilities, including SQL injection and cross-site scripting, and exploit techniques.
• Strong understanding of cryptography and secure communication protocols, including SSL/TLS.
• Excellent problem-solving and analytical skills.
• High ethical standards and confidentiality.
• Familiarity with the MITRE ATT&CK Framework.

Preferred Qualifications

• Certifications such as OSCP, GWAPT, GXPN, GPEN, LPT, CEH, CISSP, or other industry security certifications.
• Experience with scripting languages, such as Python or Bash.
• Experience with secure code review for Java.
• Familiarity with cloud security testing.
• Experience with mobile application penetration testing.