Senior Offensive Security Engineer - Manual Pen Testing

Koitecc Solutions; Jersey City (NJ); On-site; USD 160,000 - 205,000; Full time

Benefits offered by this job

Discretionary incentive

Benefits eligibility

Job summary

Bank of America in Jersey City is seeking a Senior Ethical Hacker to lead ethical hacking assessments of applications, cloud environments, and security controls. You will collaborate with security partners, CIO clients, and business lines to identify misconfigurations and vulnerabilities, reporting risk with actionable remediation.

This in-office role emphasizes hands-on testing, mentorship of junior staff, and clear technical documentation to support responsible growth and robust security

Qualifications

• Minimum of 5+ years of professional pentesting, application security or ethical hacking experience.
• Ability to reproduce findings and develop PoCs for vulnerabilities.
• Experience performing manual web application assessments and code reviews.
• Experience with DAST/SAST tools and vulnerability assessment.
• Knowledge of UNIX/LINUX, TCP/IP, cookies; strong programming/debugging skills.

Responsibilities

• Lead and perform offensive security assessments across web, mobile, and cloud.
• Develop PoCs and remediation recommendations.
• Prepare detailed technical reports and communicate risk to stakeholders.
• Mentor junior assessors in technical tradecraft and soft skills.
• Respond to security incidents and provide guidance to leadership.

Skills

Senior pentesting / ethical hacking

Web APIs

Cloud environments

OWASP Top 10

Threat modeling

Tools

Frida

DAST tools

SAST tools

Job description

Bank of America in Jersey City is seeking a Senior Ethical Hacker to lead ethical hacking assessments of applications, cloud environments, and security controls. You will collaborate with security partners, CIO clients, and business lines to identify misconfigurations and vulnerabilities, reporting risk with actionable remediation.

This in-office role emphasizes hands-on testing, mentorship of junior staff, and clear technical documentation to support responsible growth and robust security