Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 41 days ago

Ethical Hacker / Penetration Tester

MKS2 Technologies39 open roles

Pay
$120,000 a year
Where
Albany, NY
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowEthical Hacker / Penetration TesterMKS2 Technologies · Albany, NY

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on MKS2 Technologies's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. MKS2 Technologies postings stay open a median of 15 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 41 days ago

MKS2 Technologies median: 15 days open

The posting

MKS2 Technologies, LLC, an award-winning high growth small business, creates innovative and customer-centric technology solutions in the areas of Cyber Security, Instructional Design and Training, Software Engineering and IT Support Services to improve the security and well-being of our clients. Our commitment to excellence and our “Mission First” orientation has resulted in steady growth and an expanding client base across government agencies. We have employees nationwide and for the past three consecutive years were named one of the fastest growing Veteran-owned companies in the nation. Please take a moment to browse through our website and learn more about what it means to serve with MKS2.

Ethical Hacker / Penetration Tester Principal

Location: Hybrid (Remote with travel to Albany, NY twice per month) Job Type: Full-Time Program: NYSoH Hours: 40 hours per week Travel: Two trips per month to Albany, NY Clearance Required: None Citizenship Requirement: None Salary: $120,000

Overview

We are seeking an experienced Ethical Hacker / Penetration Tester Principal to join a high-impact cybersecurity team supporting a large-scale enterprise application environment. This role focuses on identifying, exploiting, assessing, and remediating vulnerabilities within Java-based applications and supporting infrastructure. The ideal candidate possesses deep expertise in application security, penetration testing, secure coding practices, and DevSecOps methodologies.

This position requires collaboration with development, testing, and security teams to proactively identify security weaknesses and strengthen application defenses throughout the Software Development Life Cycle (SDLC).

Key Responsibilities

  • Conduct penetration testing and vulnerability assessments of Java applications, APIs, and supporting infrastructure.
  • Perform manual and automated security testing to identify application vulnerabilities.
  • Develop and execute custom exploits to simulate real-world attacker techniques.
  • Analyze application architecture and code to identify security risks and attack vectors.
  • Collaborate with development teams to integrate security early in the SDLC.
  • Partner with QA and automation teams to incorporate security testing into release processes.
  • Review source code and provide secure coding guidance for remediation efforts.
  • Assess browser tokens, session management, caching, and authentication mechanisms.
  • Manipulate URLs, query parameters, browser data, and application workflows to identify exploitation opportunities.
  • Assist in incident response activities related to security vulnerabilities and published CVEs.
  • Create detailed reports outlining findings, risk levels, business impacts, and remediation recommendations.
  • Present security findings to both technical and non-technical stakeholders.
  • Contribute to security standards, policies, and secure development practices.
  • Stay current on emerging threats, attack techniques, and industry best practices.
  • Apply methodologies aligned with the MITRE ATT&CK Framework and OWASP guidelines.

Required Qualifications

  • Bachelor's degree in Computer Science, Information Security, Software Engineering, or a related technical field.
  • Minimum of 6 years of software development and security experience.
  • Prior experience in a DevSecOps, Application Security, Security Engineering, or Penetration Testing role.
  • Strong hands-on Java development experience.
  • Experience supporting large-scale enterprise applications.
  • Knowledge of secure coding principles and application security best practices.
  • Experience performing penetration testing against web applications and services.
  • Strong understanding of OWASP Top 10 vulnerabilities and mitigation techniques.
  • Experience with security testing tools such as: Burp Suite Metasploit Web Proxy Tools Vulnerability Assessment Platforms
  • Experience using Static and Dynamic Application Security Testing tools, including: Fortify on Demand (SAST) Fortify on Demand (DAST)
  • Knowledge of common web vulnerabilities including: SQL Injection Cross-Site Scripting (XSS) Authentication & Authorization Flaws Session Management Vulnerabilities API Security Risks
  • Strong understanding of cryptography and secure communications protocols (SSL/TLS).
  • Excellent analytical, troubleshooting, and problem-solving skills.
  • Strong written and verbal communication abilities.
  • Demonstrated professionalism, ethics, and confidentiality.

Preferred Qualifications

  • OSCP (Offensive Security Certified Professional)
  • GWAPT (GIAC Web Application Penetration Tester)
  • GXPN (GIAC Exploit Researcher and Advanced Penetration Tester)
  • GPEN (GIAC Penetration Tester)
  • LPT (Licensed Penetration Tester)
  • CEH (Certified Ethical Hacker)
  • CISSP (Certified Information Systems Security Professional)
  • Experience with Python, Bash, or other scripting languages.
  • Experience performing secure code reviews for Java applications.
  • Knowledge of cloud security testing methodologies.
  • Mobile application penetration testing experience.
  • Experience conducting API security assessments.
  • Familiarity with HIPAA and regulated environments.
  • Knowledge of vulnerability management and CVE remediation processes.

Desired Technical Expertise

  • Java Security
  • Secure Coding Practices
  • Application Security
  • Penetration Testing
  • Vulnerability Assessments
  • OWASP
  • MITRE ATT&CK Framework
  • SAST/DAST
  • DevSecOps
  • Web Application Security
  • API Security Testing
  • Threat Modeling
  • Risk Assessment

Why Join Us?

  • Work on mission-critical enterprise applications.
  • Collaborate with a highly skilled cybersecurity team.
  • Influence secure development practices across large-scale environments.
  • Exposure to advanced security testing technologies and methodologies.
  • Opportunity to make a direct impact on application security and cyber resilience.

Apply today if you're passionate about offensive security, ethical hacking, and helping organizations build secure applications from the ground up.

Diversity creates a healthier atmosphere: MKS2 Technologies is proud to be an Equal Employment Opportunity / Affirmative Action employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against MKS2 Technologies's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on MKS2 Technologies's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    MKS2 Technologies's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.