Senior Java App Penetration Tester

The Amatriot Group; City of Rensselaer (NY); On-site; USD 90,000 - 105,000; Full time

Job summary

The Amatriot Group is seeking a Penetration Tester focused on Java application security to identify and exploit vulnerabilities, and support remediation efforts. You will work closely with developers and security teams to strengthen Java-based applications and infrastructure.

Responsibilities include conducting tests, identifying flaws, and creating exploits to simulate attacker tactics, while collaborating to improve secure development practices and reporting risks to technical and

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 6+ years of development or security experience.
• Experience in penetration testing or ethical hacking with a focus on Java application security.
• Experience with penetration testing tools such as Burp Suite and Metasploit.
• Familiarity with Fortify on Demand SAST and DAST tools.

Responsibilities

• Conduct penetration tests and vulnerability assessments for Java applications and infrastructure.
• Identify security flaws in Java code using automated and manual methods.
• Create and use custom exploits to test application security, simulating attacker tactics.
• Collaborate with development teams to understand architecture and remediate weaknesses.
• Prepare clear reports detailing findings, risk, and recommended mitigations.

Skills

Java security

Scripting

OWASP

Web vulnerabilities

Cryptography

Problem solving

Communication

Ethics

MITRE ATT&CK

Education

Bachelor's degree in CS/InfoSec

Tools

Burp Suite

Metasploit

Fortify on Demand SAST

Fortify on Demand DAST

Job description

The Amatriot Group is seeking a Penetration Tester focused on Java application security to identify and exploit vulnerabilities, and support remediation efforts. You will work closely with developers and security teams to strengthen Java-based applications and infrastructure.

Responsibilities include conducting tests, identifying flaws, and creating exploits to simulate attacker tactics, while collaborating to improve secure development practices and reporting risks to technical and