Talent.com
Bank of America
Manual Ethical HackerBank of America • Chicago
Manual Ethical Hacker

Manual Ethical Hacker

Bank of America • Chicago
30+ days ago
Salary
$117,000.00 yearly
Job type
  • Full-time
Job description

Description

:

Manual Ethical Hacking is part of the Application Development Security Framework Program within Bank of America’s Cyber Security Assurance Offensive Security group. The program provides services to assess the vulnerability of the bank’s applications to malicious hacking activity.

This intermediate technical role is responsible for performing application security assessments of the bank's technologies, applications, and cyber security controls while adapting testing methods to evolving and emerging threats. Key responsibilities include performing research, understanding the bank’s security policies, working with the appropriate partners to complete assessments and simulations, identifying misconfigurations and vulnerabilities, and reporting on associated risk. These individuals partner closely with security partners, CIO clients and multiples lines of business.

Key Responsibilities in order of importance:

  • Perform assigned analysis of internal and external threats on information systems and predict future threat behavior
  • Incorporate threat actors' tactics, techniques, and procedures into offensive security testing
  • Perform assessments of the security, effectiveness, and practicality of multiple technology systems
  • Leverage innovative thinking to help solve problems or introduce new ideas to processes or products applicable to offensive security.
  • Prepare and present detailed technical information for various media including documents, reports, and notifications
  • Provide clear and practical advice regarding managed risks
  • Learn and develop advanced technical and leadership skills, Mentor Junior assessors in technical tradecraft and soft skills

Required Skills:

  • Minimum of 4 years of professional pentesting, application security or ethical hacking experience, preferably in a large, complex, enterprise environment
  • Detailed technical knowledge in at least 3 of the following areas: security engineering; application architecture; authentication and security protocols; application session management; applied cryptography; common communication protocols; mobile frameworks; single sign-on technologies; exploit automation platforms; RESTful web services
  • SQL injection/XSS attack without the use of tools
  • Experience performing manual code reviews for security relevant issues
  • Experience working with SAST tools to identify vulnerabilities
  • Able to manually identify and reproduce findings, discuss remediation concepts, develop PoCs for vulnerabilities, use scripting/coding techniques, proficiently execute common penetration testing tools, triage, and support incidents, and produce high value findings
  • Experience performing manual web application assessments i.e., must be able to simulate a
  • Knowledge of network and Web related protocols/technologies (e.g., UNIX/LINUX, TCP/IP, Cookies)
  • Experience with vulnerability assessment tools and penetration testing techniques
  • Solid programming/debugging skills
  • Experience of using a variety of tools, included, but not limited to, IBM AppScan, Burp and SQL Map
  • Threat Analysis
  • Innovative Thinking
  • Technology Systems Assessment
  • Technical Documentation
  • Advisory

Desired:

  • CISSP, CEH, OSCP, OSWE, GPEN, PenTest+ or similar
  • Strong programming/scripting skills
  • Mobile application analysis
  • Frida
  • Binary analysis (disassembly skills)

Skills:

  • Advisory
  • Innovative Thinking
  • Technical Documentation
  • Technology System Assessment
  • Threat Analysis
  • Adaptability
  • Collaboration
  • Executive Presence
  • Scenario Planning and Analysis
  • Test Engineering
  • Controls Management
  • Information Systems Management
  • Issue Management
  • Mentoring
  • Presentation Skills

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Shift:

1st shift (United States of America)

Hours Per Week:

40

Pay Transparency details

US - CO - Denver - 1144 15th St - Denver Gis (CO9926), US - DC - Washington - 1800 K St NW - 1800 K Street NW (DC1842), US - IL - Chicago - 540 W Madison St - Bank Of America Plaza (IL4540), US - MA - Boston - 100 Federal St - 100 Federal St Lp (MA5100), US - NJ - Jersey City - 101 Hudson St - 101 Hudson (NJ2101), US - WA - Seattle - 401 Union St - Rainier Square (WA1510)Pay and benefits informationPay range$117,000.00 - $147,700.00 annualized salary, offers to be determined based on experience, education and skill set.Discretionary incentive eligibleThis role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.BenefitsThis role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.
Create a job alert for this search

Manual Ethical Hacker • Chicago

Similar jobs

Staff Software Engineer - Applied AI

Ironclad Inc.Chicago, IL, United States
Full-time

Every dollar earned, relationship formed, and advantage gained comes down to the contract that makes it real.But getting a contract done is more complicated than it should be.And when contract data... Show more

 • Promoted

Global Merchant Support Engineer

AdyenChicago, IL, United States
Full-time

A leading financial technology platform in Chicago is seeking a Technical Support Engineer to enhance the merchant support experience.The role involves providing guidance on the Adyen platform and ... Show more

 • Promoted

Staff Presales Technical Engineer/FAE

SupermicroChicago, Illinois, United States
Full-time

Supermicro is a Top Tier provider of advanced server, storage, and networking solutions for Data Center, Cloud Computing, Enterprise IT, Hadoop/ Big Data, Hyperscale, HPC and IoT/Embedded customers... Show more

 • Promoted

Tool & Model Maker - P

S&C Electric CompanyChicago, Illinois, United States
Full-time

Sign-On Bonus | 1st & 2nd Shift.Your work will directly support projects that strengthen the power grid, improve reliability, and enable clean energy.Work that truly makes a difference.Stable sched... Show more

 • Promoted

Hybrid Digital Merchandising Optimization Analyst

ViziRecruiter,LLC.Chicago, IL, United States
Full-time

A leading grocery brand in the USA is seeking a Merchandising Optimization Analyst who will analyze and implement innovative merchandising strategies that enhance customer engagement and commercial... Show more

 • Promoted

Corporate MRO Buyer

Mi-Jack ProductsMarkham, IL, United States
Full-time

The most complete lifting company in the world, Lanco represents four iconic, world-class heavy equipment manufacturers, mobile crane dealerships across US and Canada, the largest parts and service... Show more

 • Promoted

Advertising Paid Search Strategist - Ecommerce

Rithum LinkedIn BoardChicago, IL, United States
Full-time

Advertising Paid Search Strategist - Ecommerce.Rithum is the world's most trusted commerce network, accelerating how brands, suppliers, and retailers work together to deliver seamless e-commerce ex... Show more

 • Promoted

Senior Java Engineer - Identity & Security (Onsite Chicago)

ManpowerGroupChicago, IL, United States
Full-time

A prominent staffing firm is seeking a Senior Java Developer in Chicago, IL to join their Global Information Security team.The role involves designing and developing large scale Java applications, ... Show more

 • Promoted

Manager, Investment, Programmatic

RiseChicago, IL, US
Full-time

We create omnichannel experiences using our proprietary tech stack and advanced analytics capabilities to help solve the unique struggles brands face today.We offer "Risers" the opportunity to work... Show more

 • Promoted

Head of Blockchain Engineering

ConfidentialChicago, IL, United States
Full-time

Head of Blockchain Engineering.Well-funded blockchain technology company.Information Technology and Services.The Company is in search of a Head of Blockchain Engineering to take on a pivotal role i... Show more

 • Promoted

Corporate MRO Buyer

LancoMarkham, IL, United States
Full-time

The most complete lifting company in the world, Lanco represents four iconic, world-class heavy equipment manufacturers, mobile crane dealerships across US and Canada, the largest parts and service... Show more

 • Promoted

Marklogic Developer

VDart IncChicago, IL, United States
Full-time

VDart is an emerging global information technology staffing provider with expertise in Enterprise Resource Planning (Oracle/SAP), SMAC (Social, Mobile, Cloud, Analytics), Business Intelligence & In... Show more

 • Promoted

Options Market Maker

Maven SecuritiesChicago, IL, United States
Full-time

Maven is a market-leading proprietary trading firm deploying its own capital across discretionary, systematic, and market-making strategies.Backed by deep expertise in trading, technology, and rese... Show more

 • Promoted

Staff Search Engineer

RelativityChicago, Illinois, United States
Full-time

We are seeking a Staff Search Engineer to join the Retrieval Engineering group at.This role is ideal for a deeply technical leader in information retrieval who thrives on designing large-scale sear... Show more

 • Promoted

Enterprise Solutions Architect (Hardware)

MolexChicago, IL, United States
Full-time

Enterprise Solutions Architect (Hardware).We are expanding within our Copper Solutions Business Unit and are seeking an Backplane Solutions Architect to join our Enterprise Solutions team.This is a... Show more

 • Promoted

Lead Blockchain Software Developer

Request Technology, LLCChicago, IL, United States
Full-time

Lead Blockchain Software Developer.Location: Chicago, IL or Coppell, TX.Hybrid: 3 days onsite, 2 days remote.This role is open to H1B transfer*.Experience with Akka or other actor-based systems.Exp... Show more

 • Promoted

Managing Director - GTM Technology Advisory (Private Equity)

ResultantChicago, IL, United States
Full-time

Managing Director - GTM Technology Advisory (Private Equity).Join an entrepreneurial and innovative team at Liberty, a Resultant Company, where we solve the most complex problems in the M&A market ... Show more

 • Promoted

Staff ML Engineer - Search & GenAI (Mentor & Scale)

ZocdocChicago, IL, United States
Full-time

A leading healthcare technology company is seeking a Staff Machine Learning Engineer to enhance their core search product.This role involves building scalable solutions to improve the healthcare se... Show more

 • Promoted

IIoT Solution Architect - Remote | Drive Industrial Automation

TechDigital GroupChicago, IL, United States
Remote
Full-time

An established industry player is seeking a seasoned professional with extensive experience in factory devices and automation.This role involves leading design efforts for data acquisition and anal... Show more

 • Promoted

Healthcare Enterprise Architect — Hybrid, Modern IT Strategy

Revolution TechnologiesChicago, IL, United States
Full-time

A leading technology solutions provider is seeking an Enterprise Architect for a hybrid remote role in Chicago, IL.The ideal candidate will have 10 years of experience in developing enterprise tech... Show more