Java Application Security Engineer

Data Staff Inc. is seeking a Java Application Security Engineer for a long-term contract opportunity with one of our direct clients in Albany, NY

* This position is primarily remote, with on-site attendance required for the first 3 weeks. After the initial 3-week period, you will be required to be on-site 2 days per quarter.

You'll join our talented Development Team. Our project is built on a multi-tier architecture including service-oriented architecture, multi-tier web applications using Java and various other COTS products.

• Work closely with development teams to diagnose, document, and remediate application security vulnerabilities and identify appropriate security checkpoints in SDLC.
• Perform risk-based, technical assessments/penetration tests of applications, using dynamic and static scanning tools, and audits ensuring compliance with industry standards
• Consult with Development leadership on application development training.
• Research new attack vectors and stay current with cybersecurity news and trends

Bachelor's degree in Computer Science, or related technical field, OR equivalent combination of education and experience

• 8+ years of Information Technology experience.
• Hands-on experience designing and executing a repeatable process to aggressively prioritize issue dispositions and remediations of security findings - while providing clear, concise status updates and risk reporting to leadership and stakeholders.
• Hands-on experience integrating AI-driven code analysis platforms into CI/CD pipelines to identify vulnerabilities and insecure coding patterns before deployment.
• Hands-on experience assessing new code commits, pull requests, and architecture changes for vulnerabilities, misconfigurations, and compliance risks.
• 3+years with Application Security Engineering conducting assessments, penetration testing, implementing tools for dynamic /automated code review, dynamic and static application scanning (Fortify, Sonar Qube); consulting on security designs of applications, potential vulnerabilities, and remediation, and creating training materials on key security concepts.
• Java/Web development with a strong secure coding background in RHEL and JBoss.
• 5+ years in a software development role as a Developer or Architect

• Strong oral and written communication skills, with a demonstrated ability to communicate complex topics to colleagues and management
• Critical thinking and creative problem solving
• Identify and resolve problems in a timely manner; gather and analyze information skillfully; develop alternative solutions
• Strong analytical skills.
• Demonstrated collaboration and teaching abilities.

CISSP, CEH, CISA, OSCP, OSCE, or OSWE Certifications

This opportunity is available as a W2 position with a competitive benefits package. Data Staff offers medical, dental, and vision coverage options as well as paid vacation, sick, and holiday leave. As many of our opportunities are long-term, we also have a 401k program available for employees after 6 months of employment.