Manual App Security Penetration Tester

Bank of America; Denver (CO); On-site; USD 117,000 - 148,000; Full time

Benefits offered by this job

Benefits

Paid time off

Job summary

Bank of America is seeking an experienced professional to perform manual security assessments of its applications and technologies, adapting testing approaches to evolving threats. You will identify misconfigurations, report risks, and collaborate with security partners and CIO clients.

You will mentor junior assessors, work with various lines of business, and help advance our offensive security program from an in-office posture.

Qualifications

• Minimum of 4 years of professional pentesting, application security or ethical hacking experience.
• Detailed knowledge in security engineering, app architecture, or related areas.
• Experience with manual code reviews for security issues.
• Experience with SAST tools and offensive security testing techniques.

Responsibilities

• Perform analysis of internal and external threats on information systems.
• Incorporate threat actor tactics into offensive security testing.
• Assess security and practicality of multiple tech systems.
• Present detailed technical information for reports and notifications.
• Mentor junior assessors in tradecraft and soft skills.

Skills

Security engineering

Application architecture

Authentication & security protocols

Application session management

Applied cryptography

RESTful web services

SAST tools

Burp Suite

SQL Map

Penetration testing tools

Threat analysis

Technical documentation

Tools

IBM AppScan

Burp

SQL Map

Job description

Bank of America is seeking an experienced professional to perform manual security assessments of its applications and technologies, adapting testing approaches to evolving threats. You will identify misconfigurations, report risks, and collaborate with security partners and CIO clients.

You will mentor junior assessors, work with various lines of business, and help advance our offensive security program from an in-office posture.