Senior Full-Stack Pentester (Remote Optional)

Bank of America; Chicago (IL); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Remote work possible

Industry certifications: OSCP, GPEN,GX

Job summary

Bank of America in Chicago is seeking a Senior Full Stack Pentester to join the Cyber Security Assurance Division. You will lead offensive security assessments across the bank’s technology environments, applying a hacker mindset to identify exploitable vulnerabilities and demonstrate risk in clear terms.

This highly technical role requires broad knowledge of threats, the ability to mentor junior engineers, and collaboration with security partners, CIO clients, and multiple business lines to

Qualifications

• Minimum of 5+ years of professional offensive security experience.
• Ability to assess organization/system from a threat actor perspective and communicate risk clearly to technical and non-technical audiences.
• Proficient with penetration testing tools such as Burp Suite, Metasploit, and nmap.
• Solid understanding of voice and data networks, major operating systems, active directory, and related peripherals.
• Ability to document vulnerabilities and deliver reports with actionable findings.
• Able to code in Python, Java, or C#.

Responsibilities

• Lead and perform security assessments of bank technologies and applications.
• Identify misconfigurations and high-risk vulnerabilities with impact reporting.
• Coordinate with security partners, CIO clients, and lines of business.
• Mentor junior engineers and share knowledge with the team.
• Support monitoring and response functions to improve threat readiness.

Skills

Offensive security

Threat modeling

Penetration testing tools

Networking & OS knowledge

Programming/scripting (Python, Java, C

Tools

Burp Suite

Metasploit

nmap

Job description

Bank of America in Chicago is seeking a Senior Full Stack Pentester to join the Cyber Security Assurance Division. You will lead offensive security assessments across the bank’s technology environments, applying a hacker mindset to identify exploitable vulnerabilities and demonstrate risk in clear terms.

This highly technical role requires broad knowledge of threats, the ability to mentor junior engineers, and collaboration with security partners, CIO clients, and multiple business lines to