{"id":2402108,"url":"https://alion.io/job/mks2-llc-ethical-hacker-penetration-tester","title":"Ethical Hacker / Penetration Tester","company":{"id":678597,"name":"MKS2 Technologies","domain":"mks2.com","url":"https://alion.io/company/mks2","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Albany, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":120000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"Fortify","optional":false},{"name":"Java","optional":false},{"name":"Metasploit","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SQL","optional":false},{"name":"CVE","optional":true},{"name":"HIPAA","optional":true},{"name":"Python","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-09-15T03:20:32Z","employer_posted_date":"2026-09-28","last_verified_at":"2026-10-20T01:13:16Z","board_verified":true,"closed_at":null,"days_open":35,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":35},"description":"MKS2 Technologies, LLC, an award-winning high growth small business, creates innovative and customer-centric technology solutions in the areas of Cyber Security, Instructional Design and Training, Software Engineering and IT Support Services to improve the security and well-being of our clients. Our commitment to excellence and our “Mission First” orientation has resulted in steady growth and an expanding client base across government agencies. We have employees nationwide and for the past three consecutive years were named one of the fastest growing Veteran-owned companies in the nation. Please take a moment to browse through our website and learn more about what it means to serve with MKS2.\nEthical Hacker / Penetration Tester Principal\nLocation: Hybrid (Remote with travel to Albany, NY twice per month) \nJob Type: Full-Time\nProgram: NYSoH\nHours: 40 hours per week\nTravel: Two trips per month to Albany, NY\nClearance Required: None\nCitizenship Requirement: None\nSalary: $120,000\nOverview\nWe are seeking an experienced Ethical Hacker / Penetration Tester Principal to join a high-impact cybersecurity team supporting a large-scale enterprise application environment. This role focuses on identifying, exploiting, assessing, and remediating vulnerabilities within Java-based applications and supporting infrastructure. The ideal candidate possesses deep expertise in application security, penetration testing, secure coding practices, and DevSecOps methodologies.\nThis position requires collaboration with development, testing, and security teams to proactively identify security weaknesses and strengthen application defenses throughout the Software Development Life Cycle (SDLC).\nKey Responsibilities\nConduct penetration testing and vulnerability assessments of Java applications, APIs, and supporting infrastructure.\nPerform manual and automated security testing to identify application vulnerabilities.\nDevelop and execute custom exploits to simulate real-world attacker techniques.\nAnalyze application architecture and code to identify security risks and attack vectors.\nCollaborate with development teams to integrate security early in the SDLC.\nPartner with QA and automation teams to incorporate security testing into release processes.\nReview source code and provide secure coding guidance for remediation efforts.\nAssess browser tokens, session management, caching, and authentication mechanisms.\nManipulate URLs, query parameters, browser data, and application workflows to identify exploitation opportunities.\nAssist in incident response activities related to security vulnerabilities and published CVEs.\nCreate detailed reports outlining findings, risk levels, business impacts, and remediation recommendations.\nPresent security findings to both technical and non-technical stakeholders.\nContribute to security standards, policies, and secure development practices.\nStay current on emerging threats, attack techniques, and industry best practices.\nApply methodologies aligned with the MITRE ATT&CK Framework and OWASP guidelines.\nRequired Qualifications\nBachelor's degree in Computer Science, Information Security, Software Engineering, or a related technical field.\nMinimum of 6 years of software development and security experience.\nPrior experience in a DevSecOps, Application Security, Security Engineering, or Penetration Testing role.\nStrong hands-on Java development experience.\nExperience supporting large-scale enterprise applications.\nKnowledge of secure coding principles and application security best practices.\nExperience performing penetration testing against web applications and services.\nStrong understanding of OWASP Top 10 vulnerabilities and mitigation techniques.\nExperience with security testing tools such as:Burp Suite\nMetasploit\nWeb Proxy Tools\nVulnerability Assessment Platforms\n\nExperience using Static and Dynamic Application Security Testing tools, including:Fortify on Demand (SAST)\nFortify on Demand (DAST)\n\nKnowledge of common web vulnerabilities including:SQL Injection\nCross-Site Scripting (XSS)\nAuthentication & Authorization Flaws\nSession Management Vulnerabilities\nAPI Security Risks\n\nStrong understanding of cryptography and secure communications protocols (SSL/TLS).\nExcellent analytical, troubleshooting, and problem-solving skills.\nStrong written and verbal communication abilities.\nDemonstrated professionalism, ethics, and confidentiality.\nPreferred Qualifications\nOSCP (Offensive Security Certified Professional)\nGWAPT (GIAC Web Application Penetration Tester)\nGXPN (GIAC Exploit Researcher and Advanced Penetration Tester)\nGPEN (GIAC Penetration Tester)\nLPT (Licensed Penetration Tester)\nCEH (Certified Ethical Hacker)\nCISSP (Certified Information Systems Security Professional)\nExperience with Python, Bash, or other scripting languages.\nExperience performing secure code reviews for Java applications.\nKnowledge of cloud security testing methodologies.\nMobile application penetration testing experience.\nExperience conducting API security assessments.\nFamiliarity with HIPAA and regulated environments.\nKnowledge of vulnerability management and CVE remediation processes.\nDesired Technical Expertise\nJava Security\nSecure Coding Practices\nApplication Security\nPenetration Testing\nVulnerability Assessments\nOWASP\nMITRE ATT&CK Framework\nSAST/DAST\nDevSecOps\nWeb Application Security\nAPI Security Testing\nThreat Modeling\nRisk Assessment\nWhy Join Us?\nWork on mission-critical enterprise applications.\nCollaborate with a highly skilled cybersecurity team.\nInfluence secure development practices across large-scale environments.\nExposure to advanced security testing technologies and methodologies.\nOpportunity to make a direct impact on application security and cyber resilience.\nApply today if you're passionate about offensive security, ethical hacking, and helping organizations build secure applications from the ground up.\nDiversity creates a healthier atmosphere: MKS2 Technologies is proud to be an Equal Employment Opportunity / Affirmative Action employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.","description_format":"text","description_chars":6346,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Government","Application Security","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-12T23:49:55Z"}],"visa":[],"liveness":{"score":35,"band":"fade","label":"Fading","p_open":1,"p_active":0.643,"p_room":0.55,"age_days":34,"expected_fill_days":30,"reasons":["conf:0","velocity","win:tail"],"computed_at":"2026-10-19T05:45:15Z"},"pay":{"stated_usd_annual":120000,"is_top_pay":false},"html_url":"https://alion.io/job/mks2-llc-ethical-hacker-penetration-tester","json_url":"https://alion.io/job/mks2-llc-ethical-hacker-penetration-tester.json","meta":{"generated_at":"2026-10-20T03:20:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3594,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678597},"rest":"https://alion.io/mcp/rest/get_company?id=678597"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmks2-llc-ethical-hacker-penetration-tester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmks2-llc-ethical-hacker-penetration-tester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmks2-llc-ethical-hacker-penetration-tester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mks2-llc-ethical-hacker-penetration-tester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmks2-llc-ethical-hacker-penetration-tester"}]}