Penetration Tester (Java/ Ethical Hacking focus) - Hybrid - Contract to Hire Job at Experienced Recruiting Partners, Albany, NY

VGlpMFdIQkRNL21JMFFPMDViVXB6QTgzRUE9PQ==
  • Experienced Recruiting Partners
  • Albany, NY

Job Description

Onsite role in Albany, NY – two days per week Wednesday/Thursday + every other Friday

Overview:

A Penetration Tester with a focus on Java application security is sought to identify, exploit, and fix vulnerabilities in Java applications to guard against cyber threats.

Key Responsibilities:

  • Conduct penetration tests and vulnerability assessments for Java applications and infrastructure.
  • Identify security flaws in Java code using automated and manual methods.
  • Create and use custom exploits to test application security, simulating attacker tactics.
  • Collaborate with Development teams to understand application architecture and find security weaknesses early.
  • Collaborate with Testing teams to integrate with manual and automation testing.
  • Provide guidance on secure coding and how to fix vulnerabilities.
  • Stay updated on Java security threats and best practices.
  • Help improve secure development processes (SDLC).
  • Assist in responding to security incidents related to Java vulnerabilities, current published NIST CVE.
  • Clearly document and report findings, including technical details, risk assessment, and recommended solutions.
  • Communicate findings and recommendations to both technical and non-technical staff.
  • Contribute to security policies for Java development and deployment.
  • Manipulate URLs, query parameters and Application browser data to look for penetration avenues. Validate and asses’ browser tokens and cache manipulation and Production vs. none prod architecture.
  • Familiar with MITRE ATT&CK Framework.

REQUIREMENTS:

  • Bachelor's degree in Computer Science, Information Security, or a related field.
  • Minimum of 6 years of Development/Security experience
  • Experience in Penetration Testing/Ethical Hacking with a focus on Java application security.
  • Strong knowledge of Java programming and its security practices as well as scripting experience.
  • Core Java coding experience.
  • Previous job background as an engineer and Dev Sec position on a large scale public enterprise scale application.
  • Proficiency in web application security principles (e.g., OWASP).
  • Knowledge of common web vulnerabilities (e.g., SQL injection, XSS) and exploit techniques.
  • Experience with penetration testing tools like Burp Suite, Metasploit.
  • Familiarity with Fortify on Demand SAST and DAST tools.
  • Strong understanding of cryptography and secure communication protocols (e.g., SSL/TLS).
  • Excellent problem-solving and analytical skills.
  • Strong communication skills.
  • High ethical standards and confidentiality.

Preferred Qualifications:

  • Certifications such as OSCP, GWAPT, GXPN, GPEN, LPT, CEH, CISSP or other industry security certifications.
  • Experience with scripting languages (e.g., Python, Bash).
  • Experience with secure code review for Java.
  • Familiarity with cloud security testing.
  • Experience with mobile application penetration testing.
  • Knowledge of regulations like HIPAA.
  • Experience with API testing

Job Tags

Contract work, 2 days per week

Similar Jobs

Essel

Electrician - Trainee and Assistant Job at Essel

 ...best performers earn opportunities to work on bigger projects with more pay!** ~ Ideal opportunity for a mid-level Trainee or Apprentice looking to gain additional experience working as part of a team Requirements Related experience is required, from... 

OnPoint Building Services

Day Porter / Day time Janitorial Cleaner Job at OnPoint Building Services

 ...| Virginia Beach Shift: Mon, Tue, Thu, Fri, Sat 7:00am-4:00pm General Purpose: Ensuring the accurate and timely cleaning of a commercial office facility. You will need a clean background check and the ability to pass a drug screen. Essential Duties and Responsibilities... 

BBA Afterschool Inc

SOCCER COACH (PGC) Job at BBA Afterschool Inc

 ...URGENT HIRING SOCCER COACH (Prince George's County Area) BBA Afterschool Inc. | Part-Time | Elementary Schools Pay: $25.00 $30.00/hr ($37.50 per session) The Opportunity After-school only no full-day commitment Sessions: 1.5 hours each Schedule: Monday... 

PG&E Corporation

Expert Risk Analyst - Location Flexible Job at PG&E Corporation

 ...Whitmore; Willits; Willow Creek; Willows; Windsor; Winters; Woodland; Yuba City Department Overview: The Electric Risk Management (ERM) team plays a pivotal role in the evaluation, regulatory reporting, and investment planning process for PG&Es key and most... 

GE Renewable Energy Power and Aviation

LEAP Manufacturing Programs Leader Job at GE Renewable Energy Power and Aviation

 ...which provides power to commercial narrowbody aircraft produced at Boeing and Airbus. Manufacturing is key to our work at GE Aerospace...  ...need to relax and rejuvenate Generous 401(k) plan with a company match Tuition reimbursement Life insurance and disability...