Java Application Security Engineer
DataStaff Inc. is seeking a Java Application Security Engineer for a long-term contract opportunity with one of our direct clients in Albany, NY
* This position is primarily remote, with on-site attendance required for the first 3 weeks. After the initial 3-week period, you will be required to be on-site 2 days per quarter.
Job Description:
You’ll join our talented Development Team. Our project is built on a multi-tier architecture including service-oriented architecture, multi-tier web applications using Java and various other COTS products.
Responsibilities:
- Work closely with development teams to diagnose, document, and remediate application security vulnerabilities and identify appropriate security checkpoints in SDLC.
- Perform risk-based, technical assessments/penetration tests of applications, using dynamic and static scanning tools, and audits ensuring compliance with industry standards
- Consult with Development leadership on application development training.
- Research new attack vectors and stay current with cybersecurity news and trends
WHAT YOU’LL NEED TO SUCCEED:
Education:
Bachelor’s degree in Computer Science, or related technical field, OR equivalent combination of education and experience
Required Experience:
- 8+ years of Information Technology experience.
- Hands-on experience designing and executing a repeatable process to aggressively prioritize issue dispositions and remediations of security findings — while providing clear, concise status updates and risk reporting to leadership and stakeholders.
- Hands-on experience integrating AI-driven code analysis platforms into CI/CD pipelines to identify vulnerabilities and insecure coding patterns before deployment.
- Hands-on experience assessing new code commits, pull requests, and architecture changes for vulnerabilities, misconfigurations, and compliance risks.
- 3+years with Application Security Engineering conducting assessments, penetration testing, implementing tools for dynamic /automated code review, dynamic and static application scanning (Fortify, SonarQube); consulting on security designs of applications, potential vulnerabilities, and remediation, and creating training materials on key security concepts.
- Java/Web development with a strong secure coding background in RHEL and JBoss.
- 5+ years in a software development role as a Developer or Architect
Skills:
- Strong oral and written communication skills, with a demonstrated ability to communicate complex topics to colleagues and management
- Critical thinking and creative problem solving
- Identify and resolve problems in a timely manner; gather and analyze information skillfully; develop alternative solutions
- Strong analytical skills.
- Demonstrated collaboration and teaching abilities.
Nice to have:
CISSP, CEH, CISA, OSCP, OSCE, or OSWE Certifications
This opportunity is available as a W2 position with a competitive benefits package. DataStaff offers medical, dental, and vision coverage options as well as paid vacation, sick, and holiday leave. As many of our opportunities are long-term, we also have a 401k program available for employees after 6 months of employment.