Bank of America
Manual Ethical Hacker
$117K–$148K
Denver +2 · Full-time · Posted Oct 15, 2026
- Location
- Denver
Washington
Chicago - Experience
- Minimum 4 years of professional pentesting, application security, or ethical hacking experience.
About the job
Performs manual application security assessments and offensive security testing to identify vulnerabilities, evaluate risk, and advise partners on remediation.
What you'll do
- Analyze threats and incorporate threat actors’ tactics, techniques, and procedures into security testing.
- Assess technology systems and applications, identify and reproduce vulnerabilities, and report associated risks.
- Prepare technical reports and advice; collaborate with partners and mentor junior assessors.
What they ask for
- At least 4 years of professional penetration testing, application security, or ethical hacking experience.
- Detailed technical knowledge in at least 3 listed areas, such as application architecture, authentication and security protocols, or RESTful web services.
- Ability to perform manual code reviews and web application assessments, identify and reproduce findings, and develop vulnerability PoCs.
- Experience with SAST tools, vulnerability assessment tools, penetration testing techniques, and programming/debugging.
Nice to have
- CISSP, CEH, OSCP, OSWE, GPEN, PenTest+ or similar certification.
- Mobile application analysis, Frida, binary analysis, or strong programming/scripting skills.
Pay
$117,000.00 - $147,700.00 USD annualized base salary
Tools
IBM AppScan, Burp, SQL Map, SAST, Frida, UNIX/LINUX, TCP/IP, RESTful web services
Model-written summary · the original posting is authoritative