Penetration Tester (Java Application Security)

Penetration Tester (Java Application Security) at JMD Technologies Inc. Penetration Tester (Java Application Security) at JMD Technologies Inc. in GLENMONT, New York Posted in 4 days ago.

Type:

full-time

Job Description:

About the job

Title:

Penetration Tester (Java Application Security)

Location:

Albany, NY (Travel Required - Twice Monthly)

Employment Type:

Contract (6+ Months)

Status:

Accepting Candidates About the role Join a cybersecurity team responsible for identifying, testing, and strengthening enterprise application security across Java-based systems and web applications. This role focuses on penetration testing, vulnerability assessments, secure code analysis, and supporting secure application development initiatives. The ideal candidate will have strong hands-on penetration testing experience, expertise in Java application security, and a deep understanding of web application vulnerabilities and remediation strategies. Key Responsibilities Conduct penetration testing and vulnerability assessments for enterprise applications Perform security testing for Java-based systems and web applications Evaluate applications against industry security standards and vulnerability frameworks Identify and exploit common web vulnerabilities including: Injection attacks Cross-site scripting (XSS) Authentication and session vulnerabilities Utilize penetration testing tools to simulate real-world attack scenarios Perform secure code reviews and application security assessments Assess encryption methods and secure communication protocols Provide detailed security reports including: Vulnerabilities identified Risk analysis Remediation recommendations Collaborate with development and engineering teams to improve application security posture Support security testing for: APIs Web services Enterprise application environments Assist with security best practices and secure development guidance Qualifications 3+ years of experience in penetration testing or application security Strong experience with: Java application security Web application penetration testing Vulnerability assessments Hands-on experience identifying and exploiting: SQL Injection Cross-Site Scripting (XSS) CSRF Authentication vulnerabilities Experience with penetration testing tools such as: Burp Suite

OWASP ZAP

Nmap Metasploit Strong understanding of: OWASP Top 10 Secure SDLC Application security best practices Experience performing secure code reviews and security analysis

Knowledge of:

Encryption standards Secure communication protocols API security testing Strong analytical, documentation, and communication skills Preferred Qualifications Experience with cloud application security Knowledge of secure coding practices for Java applications Experience supporting enterprise-scale security programs Security certifications such as:

CEH OSCP GWAPT

Experience working in regulated or government environments