Senior Offensive Security Engineer - Manual AppSec

Bank of America; Denver (CO); On-site; USD 160,000 - 205,000; Full time

Job summary

Bank of America is seeking an experienced Senior Ethical Hacker to lead and conduct offensive security assessments across applications, cloud, and infrastructure. You will simulate threats, develop PoCs, and report risk to CIO partners, while mentoring junior assessors and collaborating with security stakeholders.

The role emphasizes manual testing, strong coding skills, and knowledge of OWASP Top 10, with opportunities to grow technical leadership within the Cyber Security Assurance Offensive

Qualifications

• Minimum of 5+ years of professional pentesting, application security or ethical hacking experience, preferably in a large, complex enterprise environment.
• Ability to simulate OWASP Top 10 vulnerabilities manually without the use of tools.
• Experience performing manual code reviews for security relevant issues.
• Experience working with DAST and SAST tools to identify vulnerabilities.
• Solid programming/debugging skills, development frameworks, CVE and CWE research/reproduction.

Responsibilities

• Perform assigned analysis of internal and external threats on information systems and predict future threat behavior.
• Incorporate threat actors’ tactics, techniques, and procedures into offensive security testing to identify high-value vulnerabilities/chained attacks.
• Developing Proof-of-concepts for exploitation.
• Perform assessments of the security, effectiveness, and practicality of multiple technology systems.
• Leverage innovative thinking to help solve problems or introduce new ideas to processes or products applicable to offensive security.
• Prepare and present detailed technical information for various media including documents, reports, and notifications.
• Provide clear and practical advice regarding managing risks.
• Learn and develop advanced technical and leadership skills, mentor Junior and Intermediate assessors in technical tradecraft and soft skills.
• Respond to security incidents and provide technical assistance to leadership across the Information Security organization.

Skills

Professional pentesting

Application security

Ethical hacking

Threat modelling

Scripting & PoC development

DAST/SAST tooling

Tools

DAST tools

SAST tools

Penetration testing tooling

Frida

Job description

Bank of America is seeking an experienced Senior Ethical Hacker to lead and conduct offensive security assessments across applications, cloud, and infrastructure. You will simulate threats, develop PoCs, and report risk to CIO partners, while mentoring junior assessors and collaborating with security stakeholders.

The role emphasizes manual testing, strong coding skills, and knowledge of OWASP Top 10, with opportunities to grow technical leadership within the Cyber Security Assurance Offensive