layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

Ethical Hacker / Penetration Tester at MKS2 Technologies, LLC | LAYIQ

Conduct penetration testing and vulnerability assessments of Java applications, APIs, and supporting infrastructure.
Perform manual and automated security testing to identify application vulnerabilities.
Develop and execute custom exploits to simulate real-world attacker techniques.
Analyze application architecture and code to identify security risks and attack vectors.
Collaborate with development teams to integrate security early in the SDLC.
Partner with QA and automation teams to incorporate security testing into release processes.
Review source code and provide secure coding guidance for remediation efforts.
Assess browser tokens, session management, caching, and authentication mechanisms.
Manipulate URLs, query parameters, browser data, and application workflows to identify exploitation opportunities.
Assist in incident response activities related to security vulnerabilities and published CVEs.
Create detailed reports outlining findings, risk levels, business impacts, and remediation recommendations.
Present security findings to both technical and non-technical stakeholders.
Contribute to security standards, policies, and secure development practices.
Stay current on emerging threats, attack techniques, and industry best practices.
Apply methodologies aligned with the MITRE ATT&CK Framework and OWASP guidelines.
Required Qualifications
Bachelor's degree in Computer Science, Information Security, Software Engineering, or a related technical field.
Minimum of 6 years of software development and security experience.
Prior experience in a DevSecOps, Application Security, Security Engineering, or Penetration Testing role.
Strong hands-on Java development experience.
Experience supporting large-scale enterprise applications.
Knowledge of secure coding principles and application security best practices.
Experience performing penetration testing against web applications and services.
Strong understanding of OWASP Top 10 vulnerabilities and mitigation techniques.
Experience with security testing tools such as: Burp Suite
Metasploit
Web Proxy Tools
Vulnerability Assessment Platforms
Experience using Static and Dynamic Application Security Testing tools, including: Fortify on Demand (SAST)
Fortify on Demand (DAST)
Knowledge of common web vulnerabilities including: SQL Injection
Cross-Site Scripting (XSS)
Authentication & Authorization Flaws
Session Management Vulnerabilities
API Security Risks
Strong understanding of cryptography and secure communications protocols (SSL/TLS).
Excellent analytical, troubleshooting, and problem-solving skills.
Strong written and verbal communication abilities.
Demonstrated professionalism, ethics, and confidentiality.

Ethical Hacker / Penetration Tester

Employer job description

Location:

Job Type:

Program:

Hours:

Travel:

Clearance Required:

Citizenship Requirement:

Key Responsibilities

Preferred Qualifications

About this listing