Senior Manual Ethical Hacker — Application Security Lead

Koitecc Solutions; Charlotte, Northern (NC, KY); Hybrid; USD 160,000 - 205,000; Full time

Benefits offered by this job

Benefits

Discretionary incentive plan

Job summary

Bank of America is seeking a senior ethical hacker to lead offensive security assessments across web, mobile, and cloud environments. You will perform manual testing, code reviews, and threat modeling while mentoring junior team members and presenting findings to leadership.

The role emphasizes deep technical expertise, collaboration with multiple stakeholders, and ongoing adaptation to emerging threats. In-office culture with role-specific attendance expectations.

Qualifications

• Minimum 5+ years of professional pentesting or ethical hacking in enterprise environments.
• Hands-on skills across multiple security domains and testing methods.
• Experience with manual web app assessments and code reviews.
• Familiarity with network/web protocols and security tooling.

Responsibilities

• Lead and perform ethical hacking assessments of Bank of America's applications and controls.
• Integrate threat actor tactics into offensive security tests and report findings.
• Develop PoCs for vulnerabilities and present remediation guidance.
• Collaborate with security partners and CIO clients across lines of business.
• Mentor junior assessors and contribute to security program improvements.
• Respond to incidents and provide technical leadership to governance teams.
• Prepare detailed technical reports and notifications for stakeholders.
• Stay current on evolving threats and testing methodologies.

Skills

Pentesting experience

Application security

Ethical hacking

Web APIs

Cloud environments

Threat modelling

DAST/SAST tools

Tools

Frida

DAST tools

SAST tools

Penetration testing tools

Job description

Bank of America is seeking a senior ethical hacker to lead offensive security assessments across web, mobile, and cloud environments. You will perform manual testing, code reviews, and threat modeling while mentoring junior team members and presenting findings to leadership.

The role emphasizes deep technical expertise, collaboration with multiple stakeholders, and ongoing adaptation to emerging threats. In-office culture with role-specific attendance expectations.