Description

You will perform penetration testing and vulnerability assessments focused on Java applications and large-scale enterprise infrastructure.

Responsibilities

• Conduct penetration tests and vulnerability assessments for Java applications and infrastructure.
• Identify security flaws in Java code using automated and manual methods.
• Create and use custom exploits to simulate attacker tactics.
• Collaborate with development and testing teams to integrate security into the SDLC.
• Document technical findings, risk assessments, and remediation guidance for technical and non-technical staff.
• Manipulate URLs, query parameters, browser data, tokens, and cache to identify penetration avenues.
• Assist in responding to security incidents related to Java vulnerabilities and NIST CVEs.

Required Skills

• 6+ years of experience in Development or Security roles.
• Bachelor's degree in Computer Science, Information Security, or a related field.
• Core Java coding experience and strong knowledge of Java security practices.
• Experience with penetration testing and ethical hacking for Java applications.
• Proficiency in web application security principles and OWASP.
• Knowledge of common vulnerabilities like SQL injection and XSS.
• Hands-on experience with Burp Suite and Metasploit.
• Familiarity with Fortify on Demand (SAST and DAST).
• Understanding of cryptography and secure communication protocols like SSL/TLS.
• Familiarity with the MITRE ATT&CK Framework.

Preferred Skills

• Security certifications including OSCP, GWAPT, GXPN, GPEN, LPT, or CEH.
• Scripting experience with Python or Bash.
• Experience with secure code review for Java, API testing, or mobile application penetration testing.
• Familiarity with cloud security testing and HIPAA regulations.

Key Skills

Education

Bachelor's degree