Talent.com
Bank of America
Manual Ethical HackerBank of America • Seattle
Manual Ethical Hacker

Manual Ethical Hacker

Bank of America • Seattle
30+ days ago
Salary
$117,000.00 yearly
Job type
  • Full-time
Job description

Description

:

Manual Ethical Hacking is part of the Application Development Security Framework Program within Bank of America’s Cyber Security Assurance Offensive Security group. The program provides services to assess the vulnerability of the bank’s applications to malicious hacking activity.

This intermediate technical role is responsible for performing application security assessments of the bank's technologies, applications, and cyber security controls while adapting testing methods to evolving and emerging threats. Key responsibilities include performing research, understanding the bank’s security policies, working with the appropriate partners to complete assessments and simulations, identifying misconfigurations and vulnerabilities, and reporting on associated risk. These individuals partner closely with security partners, CIO clients and multiples lines of business.

Key Responsibilities in order of importance:

  • Perform assigned analysis of internal and external threats on information systems and predict future threat behavior
  • Incorporate threat actors' tactics, techniques, and procedures into offensive security testing
  • Perform assessments of the security, effectiveness, and practicality of multiple technology systems
  • Leverage innovative thinking to help solve problems or introduce new ideas to processes or products applicable to offensive security.
  • Prepare and present detailed technical information for various media including documents, reports, and notifications
  • Provide clear and practical advice regarding managed risks
  • Learn and develop advanced technical and leadership skills, Mentor Junior assessors in technical tradecraft and soft skills

Required Skills:

  • Minimum of 4 years of professional pentesting, application security or ethical hacking experience, preferably in a large, complex, enterprise environment
  • Detailed technical knowledge in at least 3 of the following areas: security engineering; application architecture; authentication and security protocols; application session management; applied cryptography; common communication protocols; mobile frameworks; single sign-on technologies; exploit automation platforms; RESTful web services
  • SQL injection/XSS attack without the use of tools
  • Experience performing manual code reviews for security relevant issues
  • Experience working with SAST tools to identify vulnerabilities
  • Able to manually identify and reproduce findings, discuss remediation concepts, develop PoCs for vulnerabilities, use scripting/coding techniques, proficiently execute common penetration testing tools, triage, and support incidents, and produce high value findings
  • Experience performing manual web application assessments i.e., must be able to simulate a
  • Knowledge of network and Web related protocols/technologies (e.g., UNIX/LINUX, TCP/IP, Cookies)
  • Experience with vulnerability assessment tools and penetration testing techniques
  • Solid programming/debugging skills
  • Experience of using a variety of tools, included, but not limited to, IBM AppScan, Burp and SQL Map
  • Threat Analysis
  • Innovative Thinking
  • Technology Systems Assessment
  • Technical Documentation
  • Advisory

Desired:

  • CISSP, CEH, OSCP, OSWE, GPEN, PenTest+ or similar
  • Strong programming/scripting skills
  • Mobile application analysis
  • Frida
  • Binary analysis (disassembly skills)

Skills:

  • Advisory
  • Innovative Thinking
  • Technical Documentation
  • Technology System Assessment
  • Threat Analysis
  • Adaptability
  • Collaboration
  • Executive Presence
  • Scenario Planning and Analysis
  • Test Engineering
  • Controls Management
  • Information Systems Management
  • Issue Management
  • Mentoring
  • Presentation Skills

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Shift:

1st shift (United States of America)

Hours Per Week:

40

Pay Transparency details

US - CO - Denver - 1144 15th St - Denver Gis (CO9926), US - DC - Washington - 1800 K St NW - 1800 K Street NW (DC1842), US - IL - Chicago - 540 W Madison St - Bank Of America Plaza (IL4540), US - MA - Boston - 100 Federal St - 100 Federal St Lp (MA5100), US - NJ - Jersey City - 101 Hudson St - 101 Hudson (NJ2101), US - WA - Seattle - 401 Union St - Rainier Square (WA1510)Pay and benefits informationPay range$117,000.00 - $147,700.00 annualized salary, offers to be determined based on experience, education and skill set.Discretionary incentive eligibleThis role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.BenefitsThis role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.
Create a job alert for this search

Manual Ethical Hacker • Seattle

Similar jobs

Senior ML Engineer: End-to-End Production & Impact

Calendly, LLCSeattle, WA, United States
Full-time

A leading productivity solutions company is seeking a Machine Learning Engineer to drive innovative data and analytics solutions.The role involves owning ML features from design to deployment, coll... Show more

 • Promoted

Impact-Driven Staff Software Engineer, Justice & Corrections

Out in Science, Technology, Engineering, and MathematicsSeattle, WA, United States
Full-time

A leading technology firm in Seattle is seeking a Staff Software Engineer for its Justice and Corrections team.This role involves building cloud solutions to improve the criminal justice system's e... Show more

 • Promoted

Technical Recruiter

AxonSeattle, WA, United States
Full-time

Seattle, Washington, United States.At Axon, we're on a mission to Protect Life.We're explorers, pursuing society's most critical safety and justice issues with our ecosystem of devices and cloud so... Show more

 • Promoted

ML Graduate: E‑Commerce Governance & Fraud AI

ByteDanceSeattle, WA, United States
Full-time

A leading technology company in Seattle is seeking a skilled AI specialist to lead innovative projects in e-commerce optimization.The ideal candidate will posiadać expertise in Python, C++, and mac... Show more

 • Promoted

Staff Engineer - Applied AI (Java)

AccellorSeattle, WA, United States
Full-time

Accellor is an AI-first digital transformation partner built for the next generation of enterprise.We help global organizations turn cloud, data, and AI into real, measurable business outcomes at s... Show more

 • Promoted

Senior Mobile Engineer, React Native Ad Tech & Monetization

Dotdash MeredithSeattle, WA, United States
Full-time

A prominent media company in Seattle is looking for a Senior Software Engineer 1, specializing in mobile development using React Native.The role involves building scalable mobile ad experiences and... Show more

 • Promoted

Staff Software Engineer, Android

Menlo VenturesSeattle, WA, United States
Full-time

Anthropic’s mission is to create reliable, interpretable, and steerable AI systems.We want AI to be safe and beneficial for our users and for society as a whole.Our team is a quickly growing group ... Show more

 • Promoted

Senior ML Engineer: Local Search & Knowledge for Maps

Apple Inc.Seattle, WA, United States
Full-time

A major technology company in Seattle is seeking an experienced Machine Learning Engineer to enhance search and recommendation systems.The role includes ownership of the ML development cycle, leadi... Show more

 • Promoted

Technical Recruiter

IntegrateSeattle, WA, United States
Permanent

Integrate is a Seattle-based company building multiplayer project management software for the world's most ambitious machines.We focus on the hardest coordination problems in deep tech like rocket ... Show more

 • Promoted

Technical Recruiter

EnduranceSeattle, WA, United States
Full-time

Endurance is pioneering a new category of energy by building the world's first modular seafloor geothermal power plants.In order to succeed, we need a full time technical recruiter on the team.You ... Show more

 • Promoted

Technical Recruiter (Remote)

RM Staffing B.V.Seattle, WA, US
Remote
Full-time

Reboot Monkey is a global datacenter services provider headquartered in Haarlem, Netherlands, operating.We deliver colocation, IP transit, smart hands, remote hands, and managed datacenter services... Show more

ML Engineer: Risk & Fraud Detection

TikTokSeattle, WA, United States
Full-time

A leading social media platform is seeking a Machine Learning Engineer to build and enhance solutions that mitigate business risks.Responsibilities include improving modeling infrastructures and de... Show more

 • Promoted

Staff Software Engineer - Conversion Visibility (Hybrid)

SMS Superior Maintenance SolutionsSeattle, WA, United States
Full-time

A leading social media company in Seattle is seeking a senior engineer to architect and optimize data pipelines.The ideal candidate has over 8 years of experience, strong knowledge of SKAdNetwork f... Show more

 • Promoted

Technical Recruiter, Specialized

AnthropicSeattle, WA, United States
Full-time

Technical Recruiter, Specialized/h2pSan Francisco, CA | Seattle, WA/ph3About Anthropic/h3pAnthropics mission is to create reliable, interpretable, and steerable AI systems.We want AI to be safe and... Show more

 • Promoted

Head of Blockchain Engineering

ConfidentialSeattle, WA, United States
Full-time

Head of Blockchain Engineering.Well-funded blockchain technology company.Information Technology and Services.The Company is in search of a Head of Blockchain Engineering to take on a pivotal role i... Show more

 • Promoted

Senior Software Engineer, SDK React Native

DittoSeattle, WA, United States
Full-time

Ditto is redefining how data moves at the edge.Our mission is to make it seamless for developers to build resilient, real‑time applications, regardless of network conditions.Whether you’re in a sta... Show more

 • Promoted

Ambient AI Mobile Engineer (Android & React Native)

AmazonSeattle, WA, United States
Full-time

A leading technology company in Seattle is seeking a Sr Software Development Engineer specialized in Android and React Native.The candidate will design, develop, and ship mobile app features that i... Show more

 • Promoted

Director, Strategic Solutions Design for Localization & Multilingual AI

International Recruiting LLCSeattle, Washington, US
Full-time
Quick Apply

Director, Strategic Solutions Design for Localization & Multilingual AI.The hiring company is a frontier AI data foundry that curates diverse, high-quality data, using our purpose-built technology ... Show more

Solutions Architect - (Machine Learning)

JobotSeattle, WA, United States
Full-time

Design, deploy, and scale machine learning systems that power modern data platforms.This Jobot Job is hosted by: Robert Donohue.Easy Apply now by clicking the "Easy Apply" button and sending us you... Show more

 • Promoted

MLOps Engineer (Remote from Serbia, Poland, Croatia, Portugal)

AkvelonBellevue, WA, United States
Remote
Full-time

An international SaaS company with a strong focus on AI-driven enterprise solutions is expanding its R&D presence in Europe.The company builds large-scale cloud and AI platforms for global clie... Show more