FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Manual Ethical Hacker
Bank of America. Perform application security assessments of the bank’s technologies, applications, and cybersecurity controls .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in application security assessments, vulnerability identification, and threat analysis while providing practical risk management advice. Possesses strong technical and leadership skills, mentoring junior assessors and collaborating with security partners.
Highest-signal resume keywords
Application Security AssessmentsPenetration TestingVulnerability IdentificationManual Code ReviewsSAST Tools
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security EngineeringApplication ArchitectureAuthentication ProtocolsSQL InjectionXSS AttacksExploit AutomationProgramming SkillsBinary AnalysisMobile Application AnalysisThreat Analysis
Soft Skills
MentoringCommunicationCollaboration
Tools & Technologies
IBM AppScanBurpSQL MapSAST ToolsUNIX/LINUX
Certifications & Qualifications
CISSPCEHOSCPOSWEGPENPenTest+
Industry Keywords
Cybersecurity ControlsThreat ActorsOffensive SecurityRisk ManagementInformation Systems
Tech Stack
Tools & technologiesCyber SecurityLinuxSQLTCP/IPUnix
About the role
Key responsibilities & impact- Perform application security assessments of the bank’s technologies, applications, and cybersecurity controls
- Adapt testing methods to evolving and emerging threats
- Research and understand the bank’s security policies
- Work with appropriate partners to complete assessments and simulations
- Identify misconfigurations and vulnerabilities and report associated risk
- Analyze internal and external threats on information systems and predict future threat behavior
- Incorporate threat actors’ tactics, techniques, and procedures into offensive security testing
- Assess the security, effectiveness, and practicality of multiple technology systems
- Introduce innovative ideas to offensive security processes or products
- Prepare and present detailed technical information in documents, reports, and notifications
- Provide clear and practical advice regarding managed risks
- Develop advanced technical and leadership skills
- Mentor junior assessors in technical tradecraft and soft skills
- Partner with security partners, CIO clients, and multiple lines of business
Requirements
What you’ll need- Minimum of 4 years of professional pentesting, application security or ethical hacking experience, preferably in a large, complex, enterprise environment
- Detailed technical knowledge in at least 3 of: security engineering; application architecture; authentication and security protocols; application session management; applied cryptography; common communication protocols; mobile frameworks; single sign-on technologies; exploit automation platforms; RESTful web services
- Ability to perform SQL injection/XSS attacks without the use of tools
- Experience performing manual code reviews for security-relevant issues
- Experience working with SAST tools to identify vulnerabilities
- Ability to manually identify and reproduce findings, discuss remediation concepts, develop PoCs for vulnerabilities, use scripting/coding techniques, execute common penetration testing tools, triage and support incidents, and produce high-value findings
- Experience performing manual web application assessments
- Knowledge of network and web-related protocols/technologies, including UNIX/LINUX, TCP/IP, and Cookies
- Experience with vulnerability assessment tools and penetration testing techniques
- Solid programming/debugging skills
- Experience using tools including IBM AppScan, Burp, and SQL Map
- CISSP, CEH, OSCP, OSWE, GPEN, PenTest+ or similar desired
- Strong programming/scripting skills desired
- Mobile application analysis desired
- Frida desired
- Binary analysis/disassembly skills desired
Benefits
Comp & perks- Annual discretionary incentive plan eligibility
- Benefits eligibility
- Paid time off
- Resources and support for employees
- Opportunities to learn, grow, and make an impact
- Commitment to teammates’ physical, emotional, and financial wellness
- Recognition and reward for performance
- In-office flexibility based on role-specific considerations