Senior Java Application Security Tester

Amatriot Group, LLC; Hampton Park (NY); On-site; USD 90,000 - 105,000; Full time

Job summary

Amatriot Group, LLC is seeking a Penetration Tester focused on Java application security to identify, exploit, and help remediate vulnerabilities in Java-based systems. You will assess security controls and simulate attacker techniques to strengthen defenses.

The role requires 6+ years of development or security experience, expertise with Burp Suite, Metasploit, and Fortify on Demand, and a solid understanding of Java security principles and the MITRE ATT&CK framework.

Qualifications

• Bachelor’s degree in CS or related field.
• 6+ years of development or security experience.
• Experience in Java security and penetration testing.
• Proficiency with Burp Suite and Metasploit.
• Familiarity with Fortify on Demand SAST/DAST.
• Knowledge of MITRE ATT&CK.

Responsibilities

• Conduct penetration tests and vulnerability assessments for Java applications.
• Identify security flaws in Java code using automated and manual methods.
• Create exploits to test application security and simulate attack tactics.
• Collaborate with development teams to remediate security weaknesses.
• Document findings with risk assessments and recommendations.
• Apply MITRE ATT&CK knowledge to assessments.

Skills

Java security

Penetration testing

Web security

Security incident response

Threat modeling

MITRE ATT&CK

OWASP

Education

Bachelor’s degree in Computer Science, Information Security, or a related field

Tools

Burp Suite

Metasploit

Fortify on Demand

Job description

Amatriot Group, LLC is seeking a Penetration Tester focused on Java application security to identify, exploit, and help remediate vulnerabilities in Java-based systems. You will assess security controls and simulate attacker techniques to strengthen defenses.

The role requires 6+ years of development or security experience, expertise with Burp Suite, Metasploit, and Fortify on Demand, and a solid understanding of Java security principles and the MITRE ATT&CK framework.