Principal Ethical Hacker & App Security Lead

Cybersecurity Jobs; New York (NY); Hybrid; USD 102,000 - 138,000; Full time

Job summary

MKS2 Technologies seeks an experienced Ethical Hacker / Penetration Tester Principal to secure a large-scale Java-based enterprise environment. You will identify, exploit, and remediate vulnerabilities across applications and supporting infrastructure, partnering with teams across the SDLC and DevSecOps lifecycle.

Responsibilities include performing penetration tests, manual and automated security testing, and developing custom exploits to simulate real-world attackers.

Qualifications

• Bachelor's degree in CS, InfoSec, or related field.
• Minimum 6 years of software development and security experience.
• Experience in DevSecOps, App Security, Security Engineering, or Penetration Testing.

Responsibilities

• Perform penetration testing and vulnerability assessments for Java applications, APIs, and infrastructure.
• Execute manual and automated security testing to uncover vulnerabilities.
• Develop and run custom exploits to model attacker behavior.
• Review architecture and source code to identify security risks and attack vectors.
• Collaborate with development teams to integrate security earlier in the SDLC.
• Support incident response activities related to vulnerabilities and CVEs.
• Create detailed reports with findings, risk levels, and remediation recommendations.

Skills

Penetration testing

Security assessments

Java development

Threat modeling

CI/CD collaboration

Communication skills

Education

Bachelor's degree in Computer Science or related field

Tools

Burp Suite

Metasploit

Fortify on Demand (SAST)

Fortify on Demand (DAST)

Web proxy tools

Vulnerability assessment platforms

Job description

MKS2 Technologies seeks an experienced Ethical Hacker / Penetration Tester Principal to secure a large-scale Java-based enterprise environment. You will identify, exploit, and remediate vulnerabilities across applications and supporting infrastructure, partnering with teams across the SDLC and DevSecOps lifecycle.

Responsibilities include performing penetration tests, manual and automated security testing, and developing custom exploits to simulate real-world attackers.