Senior Offensive Security Engineer - Pentester jobs in United States
cer-icon
Apply on Employer Site
company-logo

Bank of America · 1 week ago

Senior Offensive Security Engineer - Pentester

Bank of America is committed to helping make financial lives better through the power of every connection. They are seeking a Senior Offensive Security Engineer to lead and perform assessments of the bank's technologies, applications, and cybersecurity controls, focusing on identifying high-risk vulnerabilities and collaborating with various partners.

Asset ManagementBankingFinanceFinancial ServicesFinTech
check
H1B Sponsor Likelynote

Responsibilities

Diligently hunt for high-risk vulnerabilities across the bank’s global technology environment
Lead and participate in collaborative, technical assessments
Leverage a wide range of penetration testing techniques
Identify and prove the concept of high-risk vulnerabilities across a variety of technologies
Lead and perform research
Understand the bank's security policy
Work with appropriate partners to complete assessments
Identify misconfigurations and vulnerabilities to achieve security impact
Report on the associated risk
Coordinate with senior leadership on development projects
Mentor junior engineers
Assist with monitoring and response functions

Qualification

Offensive security experiencePenetration testing toolsNetwork security knowledgeVulnerability exploitationProgramming skillsSecurity certificationsTechnical documentationProblem-solving skillsMentoring abilityCollaboration skills

Required

Minimum of 5+ years of professional offensive security experience
Must be able to critically examine an organization and system through the perspective of a threat actor and articulate risk in clear, precise terms to technical and non-technical audiences
Must be very proficient with the common tools associated with penetration testing (Burp Suite, Metasploit, nmap, etc.)
Must have a solid understanding of voice and data networks, major operating systems, active directory, their associated peripherals, and a strong desire to learn new technologies and skill sets
Must demonstrate knowledge of tactics, techniques, and procedures associated with malicious activity, an understanding of industry classifications and frameworks, and the ability to chain vulnerabilities in the advanced exploitation of systems
Must be proficient in report delivery and technical documentation of vulnerabilities
Must be able to effectively code in a programming or scripting language (Python, Java, C#, etc.)

Preferred

Certifications: OSCP, GPEN, GXPN, OSED, OSEP, OSWE, OSCE, GWAPT
Ability to work remotely if/when necessary
Previous experience working in the financial industry
Experience with hardware hacking, embedded systems analysis, and IoT hacking

Company

Bank of America

company-logo
Bank of America is a financial institution that offers credit cards, home loans, and auto loan services.

H1B Sponsorship

Bank of America has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (780)
2024 (546)
2023 (590)
2022 (759)
2021 (715)
2020 (931)

Funding

Current Stage
Public Company
Total Funding
$3.59B
Key Investors
Berkshire Hathaway
2025-02-20Post Ipo Debt· $386.79M
2024-11-26Post Ipo Debt· $2B
2020-07-28Post Ipo Equity· $400M

Leadership Team

leader-logo
Charissa Messer
Senior Vice President, Creative Agency Executive (Enterprise Creative Solutions)
linkedin
leader-logo
Rami Salem
SVP Strategic Competitive Intelligence
linkedin
Company data provided by crunchbase