Remote Java Penetration Tester — Secure Coding Expert

DataStaff, Inc.; City of Albany (NY); Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid vacation, sick, and holiday leave

401k program after 6 months

Job summary

DataStaff Inc. is seeking a Penetration Tester focused on Java application security for a long-term contract opportunity in Albany, NY. The role is primarily remote with on-site attendance required for the first 3 weeks, then on-site 2 days per month.

You will identify, exploit and fix vulnerabilities in Java apps, and work with development and testing teams to improve security. The ideal candidate has 6+ years in a DevSec role, a Bachelor's in CS or InfoSec, and hands-on experience with Burp

Qualifications

• 6+ years in a DevSec role with focus on Java security.
• Experience in Penetration Testing/Ethical Hacking for Java apps.
• Strong knowledge of Java, web security, and scripting.
• Familiarity with OWASP and common vulnerabilities.

Responsibilities

• Conduct penetration tests and vulnerability assessments for Java applications and infrastructure.
• Identify security flaws in Java code using automated and manual methods.
• Create and use custom exploits to test application security.
• Collaborate with Development teams to understand architecture and fix weaknesses.
• Collaborate with Testing teams to integrate manual and automated testing.
• Provide guidance on secure coding and how to fix vulnerabilities.
• Stay updated on Java security threats and best practices.
• Assist in responding to security incidents related to Java vulnerabilities.
• Document findings with risk assessments and recommended solutions.
• Communicate findings to technical and non-technical staff.
• Contribute to security policies for Java development and deployment.
• Familiar with MITRE ATT&CK Framework

Skills

Java security

OWASP

Burp Suite

Metasploit

Python scripting

Security testing

Vulnerability assessment

Education

Bachelor's degree in Computer Science or Information Security

Tools

Burp Suite

Metasploit

Fortify on Demand

Job description

DataStaff Inc. is seeking a Penetration Tester focused on Java application security for a long-term contract opportunity in Albany, NY. The role is primarily remote with on-site attendance required for the first 3 weeks, then on-site 2 days per month.

You will identify, exploit and fix vulnerabilities in Java apps, and work with development and testing teams to improve security. The ideal candidate has 6+ years in a DevSec role, a Bachelor's in CS or InfoSec, and hands-on experience with Burp