Manual Ethical Hacker
Company: Disability Solutions
Location: Denver
Posted on: September 28, 2024
Job Description:
Job Description:At Bank of America, we are guided by a common
purpose to help make financial lives better through the power of
every connection. Responsible Growth is how we run our company and
how we deliver for our clients, teammates, communities and
shareholders every day.One of the keys to driving Responsible
Growth is being a great place to work for our teammates around the
world. We're devoted to being a diverse and inclusive workplace for
everyone. We hire individuals with a broad range of backgrounds and
experiences and invest heavily in our teammates and their families
by offering competitive benefits to support their physical,
emotional, and financial well-being.Bank of America believes both
in the importance of working together and offering flexibility to
our employees. We use a multi-faceted approach for flexibility,
depending on the various roles in our organization.Working at Bank
of America will give you a great career with opportunities to
learn, grow and make an impact, along with the power to make a
difference. Join us!Job Description:Manual Ethical Hacking is part
of the Application Development Security Framework Program within
Bank of America's Cyber Security Assurance Offensive Security
group. The program provides services to assess the vulnerability of
the bank's applications to malicious hacking activity.This
intermediate technical role is responsible for performing
application security assessments of the bank's technologies,
applications, and cyber security controls while adapting testing
methods to evolving and emerging threats. Key responsibilities
include performing research, understanding the bank's security
policies, working with the appropriate partners to complete
assessments and simulations, identifying misconfigurations and
vulnerabilities, and reporting on associated risk. These
individuals partner closely with security partners, CIO clients and
multiples lines of business. Key Responsibilities in order of
importance:
- Perform assigned analysis of internal and external threats on
information systems and predict future threat behavior
- Incorporate threat actors' tactics, techniques, and procedures
into offensive security testing
- Perform assessments of the security, effectiveness, and
practicality of multiple technology systems
- Leverage innovative thinking to help solve problems or
introduce new ideas to processes or products applicable to
offensive security.
- Prepare and present detailed technical information for various
media including documents, reports, and notifications
- Provide clear and practical advice regarding managed risks
- Learn and develop advanced technical and leadership skills,
Mentor Junior assessors in technical tradecraft and soft
skillsRequired Skills:
- Minimum of 4 years of professional pentesting, application
security or ethical hacking experience, preferably in a large,
complex, enterprise environment
- Detailed technical knowledge in at least 3 of the following
areas: security engineering; application architecture;
authentication and security protocols; application session
management; applied cryptography; common communication protocols;
mobile frameworks; single sign-on technologies; exploit automation
platforms; RESTful web services
- SQL injection/XSS attack without the use of tools
- Experience performing manual code reviews for security relevant
issues
- Experience working with SAST tools to identify
vulnerabilities
- Able to manually identify and reproduce findings, discuss
remediation concepts, develop PoCs for vulnerabilities, use
scripting/coding techniques, proficiently execute common
penetration testing tools, triage, and support incidents, and
produce high value findings
- Experience performing manual web application assessments i.e.,
must be able to simulate a
- Knowledge of network and Web related protocols/technologies
(e.g., UNIX/LINUX, TCP/IP, Cookies)
- Experience with vulnerability assessment tools and penetration
testing techniques
- Solid programming/debugging skills
- Experience of using a variety of tools, included, but not
limited to, IBM AppScan, Burp and SQL Map
- Threat Analysis
- Innovative Thinking
- Technology Systems Assessment
- Technical Documentation
- AdvisoryDesired:
- CISSP, CEH, OSCP, OSWE, GPEN, PenTest+ or similar
- Strong programming/scripting skillsThis job will be open and
accepting applications for a minimum of seven days from the date it
was posted.Shift:1st shift (United States of America)Hours Per
Week: 40Pay Transparency detailsUS - CO - Denver - 1144 15th St
(CO9926), US - DC - Washington - 1800 K St NW - 1800 K Street NW
(DC1842), US - NJ - Jersey City - 101 Hudson St - 101 Hudson
(NJ2101), US - WA - Seattle - 401 Union St - Rainier Square
(WA1510)Pay and benefits informationPay range$125,000.00 -
$145,000.00 annualized salary, offers to be determined based on
experience, education and skill set.Discretionary incentive
eligibleThis role is eligible to participate in the annual
discretionary plan. Employees are eligible for an annual
discretionary award based on their overall individual performance
results and behaviors, the performance and contributions of their
line of business and/or group; and the overall success of the
Company.BenefitsThis role is currently benefits eligible. We
provide industry-leading benefits, access to paid time off,
resources and support to our employees so they can make a genuine
impact and contribute to the sustainable growth of our business and
the communities we serve.
Keywords: Disability Solutions, Denver , Manual Ethical Hacker, Other , Denver, Colorado
Didn't find what you're looking for? Search again!
Loading more jobs...