4667 IT & Software Developer jobs in the US
Penetration Tester - Cybersecurity Specialist
$133,120 - 153,440
TEKsystems c/o Allegis Group
Racquet Road, Rensselaer
$133,120 - 153,440
Requirements
Must:
- Bachelors degree in Computer Science, Information Security, or a relevant field
- A minimum of 6 years experience in Development and Security roles
- Core Java programming experience
- Proven work history in a large-scale public enterprise application as an engineer or in a Dev Sec role
- Expertise in penetration testing and ethical hacking focused on Java application security
- Solid understanding of web application security principles (e.g., OWASP)
- Familiarity with common web vulnerabilities and exploitation techniques (e.g., SQL injection, XSS)
- Experience with penetration testing tools such as Burp Suite and Metasploit
- Knowledge of SAST and DAST tools like Fortify on Demand
- Strong grasp of cryptography and secure communication protocols (e.g., SSL/TLS)
- Excellent analytical and problem-solving abilities
- Exceptional communication skills
- High ethical standards and commitment to confidentiality
- Preferred: Relevant industry certifications (e.g., OSCP, CEH, CISSP)
- Preferred: Scripting experience with languages such as Python or Bash
- Preferred: Experience in secure code reviews for Java
- Preferred: Familiarity with cloud security testing and mobile application penetration testing
- Preferred: Understanding of regulations like HIPAA and experience with API testing
Responsibilities
- Conduct penetration tests and vulnerability assessments focused on Java applications and infrastructure
- Identify security weaknesses in Java code using both automated and manual testing approaches
- Develop and implement custom exploits to simulate attacker methodologies testing application security
- Collaborate with Development teams to gain insights into application architecture and identify security concerns early
- Work alongside Testing teams to integrate security with both manual and automated testing efforts
- Advise on secure coding practices and effective vulnerability remediation
- Stay informed about Java security threats and industry best practices
- Contribute to enhancing secure development lifecycle (SDLC) processes
- Assist in managing security incidents related to Java vulnerabilities, including current published NIST CVEs
- Accurately document and report findings with detailed technical information, risk evaluation, and proposed solutions
- Present findings and recommendations to both technical and non-technical personnel
- Contribute to the establishment of security policies for Java development and deployment
- Examine URLs, query parameters, and application browser data to discover potential penetration opportunities; validate and assess browser tokens and cache manipulations
- Familiarize oneself with the MITRE ATT&CK Framework
Description
We are seeking a skilled Penetration Tester with a focus on Java application security to join our team in Albany, NY. This is a hybrid position requiring two days a week in-office presence and every other Friday. We offer competitive pay ranging from $64.00 to $74.00 per hour along with a comprehensive benefits package that includes medical, dental, vision, life insurance, a 401(k) retirement plan, and generous time-off policies. Our team is committed to fostering an inclusive environment and we prioritize ethical behavior in all our operations. As part of our organization, you will join a dynamic team that values collaboration and innovation.
Something wrong or incorrect with this job? Tell us in the chat 💬 on the right ➡️
You can find QA, Test Engineer salaries in the United States here.
How many QA, Test Engineer jobs are in the United States?
Currently, there are 4667 QA, Test openings. Check also: Selenium jobs, Cypress jobs, Cucumber jobs - all with salary brackets.
Is the US a good place for QA, Test Engineers?
The US is one of the best countries to work as a QA, Test Engineer. It has a vibrant startup community, growing tech hubs and, most important: lots of interesting jobs for people who work in tech.
Which companies are hiring for QA, Test Engineer jobs in the United States?
GE Aerospace, Ekxpert Placement Services, D3 Security Management Systems, Rotolo Consultants Inc, Liberty Vote, Axiom Technologies, Annexus Group among others, are currently hiring for QA, Test roles in the United States.
The company with most openings is Judge Group, Inc. as they are hiring for 366 different QA, Test Engineer jobs in the United States. They are probably quite committed to find good QA, Test Engineers.
The company with most openings is Judge Group, Inc. as they are hiring for 366 different QA, Test Engineer jobs in the United States. They are probably quite committed to find good QA, Test Engineers.