Senior Offensive Security Engineer - Pentester

Bank of America; Charlotte (NC); On-site; USD 160,000 - 205,000; Full time

Benefits offered by this job

Annual discretionary award

Paid time off

Industry-leading benefits

Job summary

A leading financial institution is hiring a Senior Full Stack Pentester to join their offensive security team. The role involves performing penetration testing assessments, adapting methods to emerging threats, and mentoring junior engineers. Ideal candidates have over 5 years of offensive security experience and proficiency with tools like Burp Suite. The position offers a competitive salary range of $160,000 to $205,000 annually, reflective of experience, with additional benefits.

Qualifications

• Minimum 5+ years of professional offensive security experience.
• Proficient with common penetration testing tools like Burp Suite and Metasploit.
• Strong understanding of voice and data networks, major operating systems, and ability to learn new technologies.

Responsibilities

• Lead and perform penetration testing assessments on bank technologies.
• Adapt testing methods to emerging threats and conduct research.
• Coordinate with senior leadership and mentor junior engineers.

Skills

Offensive security experience

Penetration testing tools (Burp Suite, Metasploit, nmap)

Coding skills in Python, Java, C#

Understanding of voice and data networks

Job description

Overview

Bank of America is hiring a Senior Full Stack Pentester to join our world-class offensive security team. The role focuses on hunting high-risk vulnerabilities across our global technology environment and providing actionable insight to senior leadership and business partners.

Responsibilities

• Lead and perform penetration testing assessments on bank technologies, applications, and controls.
• Adapt testing methods to emerging threats and conduct research to identify misconfigurations and vulnerabilities.
• Coordinate with senior leadership on development projects and mentor junior engineers.
• Assist with monitoring, detection, and response functions to improve team capability to respond to realistic threat actors.

Qualifications

• Minimum 5+ years of professional offensive security experience.
• Proficient with common penetration testing tools (Burp Suite, Metasploit, nmap, etc.).
• Strong understanding of voice and data networks, major operating systems, AD, and ability to learn new technologies.
• Knowledge of tactics, techniques, and procedures of malicious activity and ability to chain vulnerabilities for advanced exploitation.
• Effective coding skills in Python, Java, C#, etc.
• Excellent report delivery and technical documentation of vulnerabilities.

Desirable Skills

• Certifications: OSCP, GPEN, GXPN, OSED, OSEP, OSWE, OSCE, GWAPT.
• Ability to work remotely if/when necessary.
• Previous experience in the financial industry.
• Experience with hardware hacking, embedded systems analysis, and IoT hacking.

Shift

1st shift (United States of America)

Hours Per Week

40

Pay and Benefits

Annualized salary: $160,000.00 – $205,000.00, adjustable based on experience, education, and skill set.

Employees are eligible for an annual discretionary award and industry-leading benefits that include paid time off, resources, and support to make a genuine impact.