Senior Adaptive Threat Simulation Red Teamer

94-1687665 Bank of America, National Association; Denver (CO); On-site; USD 160,000 - 205,000; Full time

Job summary

Bank of America is seeking an experienced security professional to lead AI security testing engagements in a capabilities-driven role from Denver. You will define scopes, guardrails, and test approaches for emerging AI technologies while coordinating with security and risk teams across lines of business.

You will perform covert, objective-based red team operations, assess AI-enabled systems for adversarial risks, and communicate findings to executives and technical staff with clear remediation

Qualifications

• Lead AI security testing engagements, define scope, test approach, and safe testing guardrails.
• Plan and execute covert red team operations emulating advanced threat actors.
• Understand AI/LLM security concepts and risks like prompt injection and data leakage.
• Evaluate AI-enabled systems from adversarial perspectives and identify attack paths.
• Demonstrate knowledge of MITRE ATT&CK TTPs and network/AD basics.
• Proficient with red team/pen testing tools (Metasploit, Burp Suite, Cobalt Strike).

Responsibilities

• Lead AI security testing engagements with defined scope and guardrails.
• Conduct red team operations emulating advanced threat actors.
• Explain risk and remediation steps to non-technical stakeholders.

Skills

AI/LLM security

Red Teaming

Penetration Testing

Threat Modeling

Python scripting

Communication

Adversarial thinking

Tools

Metasploit

Burp Suite

Cobalt Strike

Job description

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates' physical, emotional, and financial wellness through affordable, competitive and flexible benefits. We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve. Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact.

As an experienced professional, performs research, analysis, and testing of computer/network vulnerabilities via vulnerability assessments, penetration testing, red team operations, and/or social engineering across a wide variety of platforms and systems. Clearly outlines and documents the risk and business impact of test findings in reports. Assists Lines of Business with questions regarding vulnerabilities and remediation efforts. The successful candidate will be a team-oriented individual with excellent communication skills and the ability to explain the "so what?" of a vulnerability or security issue to a non-technical audience. The individual will be expected to work with other members of Global Information Security, technical stakeholders, risk partners, and executive leadership to ensure that risk is identified, communicated, and remediated across a variety of Lines of Business. They should also have working knowledge of artificial intelligence (AI) and large language model (LLM) technologies, associated security risks, and emerging AI-enabled attack techniques. This includes an understanding of how threat actors may leverage AI to support reconnaissance, social engineering, vulnerability research, payload development, and other offensive activities, as well as security risks introduced by AI-enabled applications and systems.

Required Qualifications

• Lead AI security testing engagements, including defining scope, test approach, and safe testing guardrails for emerging AI technologies.
• Experience planning and executing covert, objective-based red team operations that emulate advanced threat actors while avoiding detection.
• Must have an understanding of AI/LLM security concepts and attack techniques, including risks such as prompt injection, insecure tool or plugin usage, sensitive information disclosure, excessive agency, model/system manipulation, and abuse of AI-enabled applications.
• Must understand how generative AI may be leveraged by threat actors and red teams to augment reconnaissance, social engineering, vulnerability research, code development, and other phases of an offensive operation.
• Ability to evaluate AI-enabled systems from an adversarial perspective and identify potential attack paths, control weaknesses, and opportunities for abuse.
• Must have experience and be highly proficient with common tools associated with red teaming and penetration testing (Metasploit, Burp Suite, Cobalt Strike, etc.).
• Must have experience developing implants and techniques for evading common security controls and detection technologies.
• Must have a solid understanding of voice and data networks, major operating systems, Active Directory, and their associated peripherals, along with MITRE ATT&CK tactics, techniques, and procedures (TTPs).
• Must demonstrate knowledge of tactics, techniques, and procedures associated with malicious insider activity, organized crime/fraud groups, and both state- and non-state-sponsored threat actors.
• Must be able to critically examine an organization and its systems from the perspective of a threat actor and articulate risk in clear, precise terms.
• Must be able to work both independently and effectively as part of a team with individuals from a variety of technical and professional backgrounds.
• Ability to effectively code in a scripting or programming language (Python, C#, PowerShell, C, etc.).

Desired Qualifications

• Previous experience working in the financial industry is a plus.
• Experience performing security assessments of free and open-source software (FOSS), including identifying vulnerabilities and supply chain risk.
• Desirable certifications: OSCP, GPEN, OSCE.

Skills

Advisory Innovative Thinking Technical Documentation Technology System Assessment Threat Analysis Adaptability Collaboration Executive Presence Scenario Planning and Analysis Test Engineering Controls Management Information Systems Management Issue Management Mentoring Presentation Skills

Shift

1st shift (United States of America)

Hours Per Week

40

Pay Transparency details

• US - CO - Denver - 1144 15th St - Denver Gis (CO9926)
• US - DC - Washington - 1800 K St NW - 1800 K Street NW (DC1842)
• US - IL - Chicago - 540 W Madison St - Bank Of America Plaza (IL4540)
• US - MA - Boston - 100 Federal St - 100 Federal St Lp (MA5100)
• US - NJ - Jersey City - 101 Hudson St - 101 Hudson (NJ2101)

Pay and benefits information

Pay range $160,000.00 - $205,000.00 annualized salary, offers to be determined based on experience, education and skill set. Discretionary incentive eligible This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.

Privacy Statement

https://careers.bankofamerica.com/en-us/privacy-notice

Company Culture

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization. Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference.

Partnering Locally

Learn about some of the ways Bank of America is making a difference in the communities we serve.

Global Impact

Learn about the six areas that guide Bank of America's efforts to help make financial lives better for customers, clients, communities and our teammates.

Opportunity and Inclusion

Each employee brings unique skills, background and opinions. We see opportunity and inclusion as our platform for innovation and a key component in our success.

Our Values

Learn about our four values that represent what we believe.

Pay Transparency

https://careers.bankofamerica.com/en-us/pay-transparency