Ethical Hacker

Bank of America

. Perform application security assessments of the bank’s technologies, applications, and cybersecurity controls .

Posted 10/15/2026full-timeUnited StatesMid-LevelSenior💰 $117,000 - $147,700 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security assessments, vulnerability identification, and penetration testing within complex enterprise environments. Proficient in leveraging advanced technical skills and innovative problem-solving to enhance security processes and mentor junior assessors.

Highest-signal resume keywords

Application Security AssessmentsPenetration TestingVulnerability IdentificationManual Code ReviewsSAST Tools

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SQL InjectionXSS AttacksSecurity EngineeringApplication ArchitectureAuthentication ProtocolsApplied CryptographyExploit AutomationProgramming SkillsManual Web Application AssessmentsBinary Analysis

Soft Skills

MentoringProblem SolvingCommunication

Tools & Technologies

IBM AppScanBurpSQL MapSAST ToolsUNIX/LINUXTCP/IPFrida

Certifications & Qualifications

CISSPCEHOSCPOSWEGPENPenTest+

Industry Keywords

Cybersecurity ControlsThreat AssessmentOffensive SecurityRisk ManagementSecurity Protocols

Tech Stack

Tools & technologies

Cyber SecurityLinuxSQLTCP/IPUnix

About the role

Key responsibilities & impact

Perform application security assessments of the bank’s technologies, applications, and cybersecurity controls
Research internal and external threats and predict future threat behavior
Incorporate threat actors’ tactics, techniques, and procedures into offensive security testing
Assess the security, effectiveness, and practicality of multiple technology systems
Adapt testing methods to evolving and emerging threats
Work with security partners, CIO clients, and multiple lines of business to complete assessments and simulations
Identify misconfigurations and vulnerabilities and report associated risk
Leverage innovative thinking to solve problems and improve offensive security processes or products
Prepare and present detailed technical information through documents, reports, and notifications
Provide clear, practical advice regarding managed risks
Learn and develop advanced technical and leadership skills
Mentor junior assessors in technical tradecraft and soft skills

Requirements

What you’ll need

Minimum of 4 years of professional pentesting, application security or ethical hacking experience, preferably in a large, complex, enterprise environment
Detailed technical knowledge in at least 3 specified areas: security engineering; application architecture; authentication and security protocols; application session management; applied cryptography; common communication protocols; mobile frameworks; single sign-on technologies; exploit automation platforms; RESTful web services
Ability to perform SQL injection/XSS attacks without tools
Experience performing manual code reviews for security-relevant issues
Experience working with SAST tools to identify vulnerabilities
Ability to manually identify and reproduce findings, discuss remediation concepts, develop vulnerability PoCs, use scripting/coding techniques, execute common penetration testing tools, triage and support incidents, and produce high-value findings
Experience performing manual web application assessments
Knowledge of network and web-related protocols/technologies, including UNIX/LINUX, TCP/IP, and Cookies
Experience with vulnerability assessment tools and penetration testing techniques
Solid programming/debugging skills
Experience using IBM AppScan, Burp, SQL Map, and similar tools
Desired: CISSP, CEH, OSCP, OSWE, GPEN, PenTest+ or similar
Desired: Strong programming/scripting skills
Desired: Mobile application analysis
Desired: Frida
Desired: Binary analysis/disassembly skills

Benefits

Comp & perks

Annual discretionary incentive award based on individual, line of business/group, and Company performance
Industry-leading benefits
Paid time off
Resources and support to make an impact and contribute to sustainable growth
40 hours per week
1st shift