Manual Ethical Hacker; Pen Tester

Job Description

Job Title:
Manual Ethical Hacker
Corporate

Title:

Up to Vice President
Location:
Central Park, Leopardstown, Dublin

Location:
Chester

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Our Central Park office in Leopardstown, boasts modern facilities based in Dublin s premium business park. With an onsite gym and staff restaurant, all your daily needs are conveniently catered for. Travel options include the LUAS network and the Central Park shuttle service between Dublin City Centre and Central Park. We also provide tax saver tickets as part of our award-winning benefits package, which means getting to work has never been so easy.

Chester

Find us in the city of Chester, a destination renowned for its culture, history, and beauty. Working at Bank of America Chester offers a far-reaching global career for a world-renowned organisation, whilst being ideally situated against the backdrop of the rolling North Wales hills and the banks of the serene River Dee.

As an Ethical Hacker:
You ll Play a vital role in our Cybersecurity Assurance Program. Your mission? Safeguarding our applications from potential threats. In this role you ll assess our application security by conducting penetration tests. Think of it as a digital detective work to uncover vulnerabilities. You ll evaluate both internal and external web, mobile, and web service applications. Your goal? To stay ahead of malicious hackers by collaborating with our team to strengthen our defence by identifying and reporting security weaknesses.

• Understanding the requirements of our applications and why/how we use them.
• Testing applications using a variety of tools to identify vulnerabilities that could expose the Bank to risk.
• Monitoring existing and proposed security standard setting groups.
• Conducting meetings to communicate the findings and implications and set realistic timescales for remediation.
• Providing technical support to clients, management and staff throughout risk assessments and the implementation of appropriate data security procedures and products.
• Acting as a SME, providing guidance and knowledge to reduce the vulnerabilities and risk when apps are being created.
• Sharing knowledge with technical and non-technical colleagues through training sessions.

• Proven professional experience in Ethical Hacking or Cyber Security.
• Expert level experience and very detailed technical knowledge in at least 3 of the following areas: general information security; security engineering; application architecture; authentication and security protocols; applications session management; applied cryptography; common communication protocols; mobile frameworks; single sign-on technologies; exploit automation platforms; RESTful web services.
• Able to manually identify and reproduce findings, discuss remediation concepts, develop PoCs for vulnerabilities, can use scripting/coding techniques, proficiently execute common penetration testing tools, triage and support incidents, and produce high-value findings.
• Experience in conducting web application ethical hacking assessments.
• Ability to demonstrate manual web application testing experience i.e. must be able to simulate a SQL inject/Cross-site script attack without the use of tool.
• Knowledge of network and Web related protocols/technologies (e.g. UNIX/LINUX, TCP/IP, Cookies).
• Experience with vulnerability assessment tools and penetration testing techniques.
• Solid programming/debugging skills.
• Experience of using a variety of tools, included, but not limited to, Invicti, Burp and SQL Map.
• Ability to learn and apply critical thinking in a variety of situations.
• Effective written and oral communication skills.
• Ability to multitask and handle multiple projects.

• Private healthcare for you and your family plus an annual health screen to help you manage your physical wellness with the option to purchase a screen for your…