Senior Offensive Security Engineer - Pentester

Bank of America; Jersey City (NJ); On-site; USD 160,000 - 205,000; Full time

Benefits offered by this job

Annual discretionary award

Paid time off

Industry-leading benefits

Job summary

A leading financial institution is seeking a Senior Full Stack Pentester in Jersey City, NJ. In this role, you will lead penetration testing assessments, adapt testing methods to new threats, and provide insights to senior leadership. Candidates should have a minimum of 5 years of offensive security experience and proficiency with tools like Burp Suite and Metasploit. This position offers a competitive salary ranging from $160,000 to $205,000 based on experience along with industry-leading benefits.

Qualifications

• Minimum 5+ years of professional offensive security experience.
• Proficient with common penetration testing tools.
• Effective coding skills in Python, Java, C#.

Responsibilities

• Lead and perform penetration testing assessments.
• Adapt testing methods to emerging threats.
• Coordinate with senior leadership on development projects.

Skills

Offensive security experience

Penetration testing tools

Understanding of networks and operating systems

Knowledge of malicious tactics

Coding skills in Python, Java, C#

Technical documentation skills

Tools

Burp Suite

Metasploit

nmap

Job description

Overview

Bank of America is hiring a Senior Full Stack Pentester to join our world-class offensive security team. The role focuses on hunting high-risk vulnerabilities across our global technology environment and providing actionable insight to senior leadership and business partners.

Responsibilities

• Lead and perform penetration testing assessments on bank technologies, applications, and controls.
• Adapt testing methods to emerging threats and conduct research to identify misconfigurations and vulnerabilities.
• Coordinate with senior leadership on development projects and mentor junior engineers.
• Assist with monitoring, detection, and response functions to improve team capability to respond to realistic threat actors.

Qualifications

• Minimum 5+ years of professional offensive security experience.
• Proficient with common penetration testing tools (Burp Suite, Metasploit, nmap, etc.).
• Strong understanding of voice and data networks, major operating systems, AD, and ability to learn new technologies.
• Knowledge of tactics, techniques, and procedures of malicious activity and ability to chain vulnerabilities for advanced exploitation.
• Effective coding skills in Python, Java, C#, etc.
• Excellent report delivery and technical documentation of vulnerabilities.

Desirable Skills

• Certifications: OSCP, GPEN, GXPN, OSED, OSEP, OSWE, OSCE, GWAPT.
• Ability to work remotely if/when necessary.
• Previous experience in the financial industry.
• Experience with hardware hacking, embedded systems analysis, and IoT hacking.

Shift

1st shift (United States of America)

Hours Per Week

40

Pay and Benefits

Annualized salary: $160,000.00 – $205,000.00, adjustable based on experience, education, and skill set.

Employees are eligible for an annual discretionary award and industry-leading benefits that include paid time off, resources, and support to make a genuine impact.