B

Bank of America

Runs a US consumer bank, brokerage and investment bank

Manual Ethical Hacker - Web Applications

Offensive Security & TestingConfirmed live in the last 24 hours
Full-timeNo salary listedIn-person

About the Job

Requirements

  • Proven professional experience in ethical hacking or cybersecurity.
  • Expert-level experience and detailed technical knowledge in at least three of the following areas: general information security, security engineering, application architecture, authentication and security protocols, application session management, applied cryptography, common communication protocols, mobile frameworks, single sign-on technologies, exploit automation platforms, or RESTful web services.
  • Ability to manually identify and reproduce findings, discuss remediation concepts, develop proofs of concept for vulnerabilities, use scripting and coding techniques, execute common penetration testing tools proficiently, triage and support incidents, and produce high-value findings.
  • Experience conducting web application ethical hacking assessments.
  • Ability to demonstrate manual web application testing, including simulating a SQL injection or cross-site scripting attack without using a tool.
  • Knowledge of network and web-related protocols and technologies, such as UNIX/Linux, TCP/IP, and cookies.
  • Experience with vulnerability assessment tools and penetration testing techniques.
  • Solid programming and debugging skills.
  • Experience using a variety of tools, including Invicti, Burp, and SQLmap.
  • Ability to learn and apply critical thinking in a variety of situations.
  • Effective written and oral communication skills.
  • Ability to multitask and handle multiple projects.

Responsibilities

  • Understand application requirements and the reasons and methods for using the applications.
  • Test applications with a variety of tools to identify vulnerabilities that could expose the Bank to risk.
  • Monitor existing and proposed security standard-setting groups.
  • Conduct meetings to communicate findings and implications and establish realistic remediation timescales.
  • Provide technical support to clients, management, and staff during risk assessments and implementation of appropriate data security procedures and products.
  • Act as a subject matter expert, providing guidance and knowledge to reduce vulnerabilities and risk during application development.
  • Share knowledge with technical and non-technical colleagues through training sessions.
  • Conduct penetration tests and assess internal and external web, mobile, and web service applications to identify and report security weaknesses.

About the Company

Bank of America

Runs a US consumer bank, brokerage and investment bank

Bank of America runs one of the largest US banks, serving consumers, small businesses, wealthy families, corporations and institutional investors. Alongside checking accounts, credit cards, mortgages and business loans, it owns the Merrill brokerage, a private bank for wealthy clients and a global investment bank that advises on deals and trades stocks and bonds. Customers reach it through thousands of branches and ATMs and its mobile banking app. It earns money mainly from the gap between what it charges on loans and pays on deposits, plus fees from advice, asset management, deal work and trading. It grew from a San Francisco bank founded in 1904 and is headquartered in Charlotte, North Carolina.

Company size
10,001+
Company stage
IPO
Headquarters
Charlotte, NC
Founded
1904

Recently Posted Jobs

Explore more opportunities at Bank of America

See more jobs