Manual Ethical Hacker
Core
Perform manual application security assessments, identify vulnerabilities, and report on risks for Bank of America's technologies and applications.
Role type
Intermediate manual ethical hacker (application security)
Builds
Security assessments and simulations for the bank's application portfolio
Domain
Cybersecurity / Application Security
Required skills
Manual pentesting, SQL injection/XSS without tools, manual code reviews, SAST tool usage, scripting/coding, manual web app assessment, network/Web protocols, vulnerability assessment tools, exploit automation platforms, RESTful web services, mobile frameworks, SSO technologies, applied cryptography, authentication protocols, application architecture, security engineering
Preferred skills
CISSP, CEH, OSCP, OSWE, GPEN, PenTest+, Frida, binary analysis, mobile application analysis
Technologies
IBM AppScan, Burp, SQL Map, UNIX/LINUX, TCP/IP
Responsibilities
Perform assigned analysis of internal and external threats on information systems and predict future threat behavior; Incorporate threat actors' tactics, techniques, and procedures into offensive security testing; Perform assessments of the security, effectiveness, and practicality of multiple technology systems; Prepare and present detailed technical information for various media including documents, reports, and notifications; Provide clear and practical advice regarding managed risks; Mentor Junior assessors in technical tradecraft and soft skills
Seniority
Intermediate, hands-on IC
