Senior Java Security Penetration Tester

Amatriot Group, LLC; City of Rensselaer (NY); On-site; USD 90,000 - 105,000; Full time

Job summary

Amatriot Group, LLC is seeking a seasoned Penetration Tester focused on Java application security. You will identify, exploit, and help remediate vulnerabilities in Java applications to guard against cyber threats. The role requires deep experience in security testing and collaboration with development teams.

Ideal candidates have 6+ years of relevant work, expertise with Burp Suite, Metasploit, and Fortify on Demand, and strong knowledge of Java security practices.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field.
• Minimum of 6 years of development or security experience.
• Experience in penetration testing or ethical hacking focusing on Java application security.
• Experience with penetration testing tools such as Burp Suite and Metasploit.
• Familiarity with Fortify on Demand SAST and DAST tools.

Responsibilities

• Conduct penetration tests and vulnerability assessments for Java applications and infrastructure.
• Identify security flaws in Java code using automated and manual methods.
• Create and use custom exploits to test application security, simulating attacker tactics.
• Assist in responding to security incidents related to Java vulnerabilities and current published NIST CVEs.
• Collaborate with development teams to understand application architecture and identify security weaknesses early.
• Provide guidance on secure coding and vulnerability remediation.
• Contribute to security policies for Java development and deployment.

Skills

Java security

Penetration testing

Scripting

OWASP

MITRE ATT&CK

Problem solving

Confidentiality

Threat awareness

Education

Bachelor’s degree in Computer Science, Information Security, or related field

Tools

Burp Suite

Metasploit

Fortify on Demand SAST/DAST

Job description

Amatriot Group, LLC is seeking a seasoned Penetration Tester focused on Java application security. You will identify, exploit, and help remediate vulnerabilities in Java applications to guard against cyber threats. The role requires deep experience in security testing and collaboration with development teams.

Ideal candidates have 6+ years of relevant work, expertise with Burp Suite, Metasploit, and Fortify on Demand, and strong knowledge of Java security practices.