Manual Ethical Hacker - Web Applications

About the Role and Company

Bank of America invites applications for the position of Manual Ethical Hacker, located in Central Park, Leopardstown, Dublin, and Chester. This role, reporting up to Vice President level, is part of our global cybersecurity assurance efforts aimed at enhancing application security and maintaining robust defenses against cyber threats.

We embrace a culture of responsible growth, diversity, and inclusion, providing comprehensive benefits to support well-being. Our Dublin office features modern amenities including a gym and staff restaurant with convenient transport options and benefits like tax saver tickets. The Chester office offers a picturesque setting combining a global career opportunity with cultural and historic surroundings.

Role Responsibilities

• Comprehend application requirements and usage context to effectively target security testing.
• Execute penetration testing on various applications using multiple tools to uncover vulnerabilities and mitigate potential risks.
• Stay informed on security standards through monitoring of relevant groups and set processes.
• Conduct meetings to report findings, assess risks, and agree on remediation timelines.
• Offer expert technical support during risk evaluations and implementation of security measures.
• Serve as a subject matter expert, providing guidance to minimize vulnerabilities during application development.
• Deliver training sessions to both technical and non-technical personnel to share security knowledge.

Candidate Requirements

• Demonstrated professional experience in ethical hacking or related cybersecurity fields.
• Advanced technical expertise in at least three of these domains: information security, security engineering, application architecture, authentication protocols, session management, cryptography, common communication protocols, mobile frameworks, single sign-on technologies, exploit automation, and RESTful web services.
• Strong ability to manually detect, reproduce, and develop proof of concept for vulnerabilities, including proficiency in scripting, coding, and penetration testing tools, along with incident triage and reporting.
• Specific experience performing manual web application penetration tests including simulating attacks such as SQL injection and cross-site scripting without reliance on automated tools.
• Solid knowledge of network and web protocols including UNIX/Linux, TCP/IP, and cookies.
• Familiarity with vulnerability assessment tools and penetration testing techniques, including experience with Invicti, Burp Suite, and SQL Map.
• Robust programming and debugging skills, alongside the ability to apply critical thinking and multitask across various projects.
• Effective written and verbal communication abilities.

Benefits and Additional Information

• Comprehensive private healthcare coverage for employees and their families, including annual health screening with optional partner inclusion.
• Competitive pension scheme, life insurance, and income protection in case of disability or health issues.
• Access to 20 days of backup childcare and 20 days of backup adult care support annually.
• Flexible benefit options tailored to individual needs covering wellbeing accounts, travel insurance, critical illness cover, and more.
• Employee Assistance Program offering confidential support, counseling, virtual GP services, and mental health resources.
• Opportunities to contribute to charities with matched bank donations.
• Cultural engagement through corporate membership programs with discounts to prominent Irish cultural venues.
• Community involvement opportunities through volunteering to foster new experiences and skills.

Equal Opportunity and Conduct Standards

Bank of America is committed to upholding high standards of integrity, accountability, and inclusive employment practices. We provide equal employment opportunities without discrimination based on gender, ethnicity, age, disability, sexual orientation, or any other protected characteristic. Recruitment decisions prioritize skills, qualifications, and experience. We encourage candidates to inform us about any accommodation needs to ensure accessible recruitment processes.