Description

You will perform penetration testing and vulnerability assessments focused on Java applications and large-scale enterprise infrastructure.

This role is hybrid.

Responsibilities

• Conduct penetration tests and vulnerability assessments for Java applications and infrastructure.
• Identify security flaws in Java code using automated and manual methods.
• Create and use custom exploits to simulate attacker tactics.
• Collaborate with development and testing teams to integrate security into the SDLC.
• Document technical findings, risk assessments, and remediation guidance for technical and non-technical staff.

Required Skills

• 6+ years of experience in Development or Security roles.
• Bachelor's degree in Computer Science, Information Security, or a related field.
• Core Java coding experience and strong knowledge of Java security practices.
• Experience with penetration testing and ethical hacking for Java applications.
• Proficiency in web application security principles and OWASP.
• Hands-on experience with Burp Suite and Metasploit.
• Familiarity with Fortify on Demand (SAST and DAST).
• Understanding of cryptography and secure communication protocols like SSL/TLS.
• Familiarity with the MITRE ATT&CK Framework.

Preferred Skills

• Security certifications including OSCP, GWAPT, GXPN, GPEN, LPT, or CEH.
• Scripting experience with Python or Bash.
• Experience with secure code review for Java, API testing, or mobile application penetration testing.

Key Skills

Education

Bachelor's degree