Manual Ethical Hacker (Web Applications)

About Bank of America

Bank of America is dedicated to improving financial lives through every connection, focusing on Responsible Growth to benefit clients, employees, communities, and shareholders alike. We prioritize diversity, inclusion, and employee well-being by offering comprehensive benefits and promoting a collaborative workplace environment. Our dynamic offices in Dublin's Central Park, Leopardstown, and Chester combine modern facilities with convenient amenities like gyms, staff restaurants, and multiple transport options including LUAS and shuttle services.

Role Summary

As a Manual Ethical Hacker focusing on Web Applications, you will be a critical member of our Cybersecurity Assurance Program. Your role is to proactively protect our application environments by executing penetration tests on internal and external web, mobile, and web service applications. By uncovering vulnerabilities and collaborating closely with our teams, you’ll help reinforce our security posture against evolving threats.

Key Responsibilities

• Gain a thorough understanding of our applications and their usage context.
• Perform vulnerability testing using diverse tools to identify security risks facing the Bank.
• Stay informed of and monitor security standard-setting groups and emerging regulations.
• Conduct meetings to present findings clearly, discuss implications, and coordinate realistic remediation timelines.
• Offer technical assistance during risk assessments and guide the deployment of appropriate data security measures and technologies.
• Serve as a subject matter expert by advising on application development to minimize risks and vulnerabilities.
• Deliver training sessions to both technical and non-technical colleagues to disseminate knowledge and enhance organizational security awareness.

Qualifications and Skills

• Proven professional experience in ethical hacking or cybersecurity domains.
• Deep technical expertise in at least three areas: general information security, security engineering, application architecture, authentication/security protocols, session management, cryptography, communication protocols, mobile frameworks, single sign-on technologies, exploit automation platforms, or RESTful web services.
• Ability to manually identify vulnerabilities, reproduce findings, develop proofs of concept, discuss remediation strategies, utilize scripting/coding, proficiently employ penetration testing tools, triage incidents, and produce valuable security insights.
• Hands-on experience in ethical hacking specifically targeting web applications, including simulating attacks like SQL injection and cross-site scripting without reliance on automated tools.
• Understanding of network and web protocols and technologies (e.g., UNIX/Linux, TCP/IP, cookies).
• Experienced with vulnerability assessment tools and penetration testing methodologies.
• Strong programming and debugging capabilities.
• Familiarity with tools such as Invicti, Burp Suite, and SQL Map.
• Critical thinking and effective communication skills, both verbal and written.
• Capability to manage multiple projects and tasks concurrently.

Benefits

• Private healthcare coverage for employees and their families, including an annual health screening with options for partner screening.
• Competitive pension plans along with life insurance and group income protection for disability or health-related circumstances.
• Access to backup childcare and adult care services, 20 days annually each.
• Flexible benefits packages adaptable to individual needs, including wellbeing accounts, travel insurance, and critical illness coverage.
• Confidential support via an Employee Assistance Program offering counseling and virtual GP services.
• Opportunity to participate in charitable giving with matching contributions from the Bank.
• Involvement in corporate arts and culture memberships offering discounted access to Ireland's cultural events and institutions.
• Community volunteering opportunities facilitating skill development and social contribution.

Equal Opportunity and Conduct

Bank of America is committed to maintaining a respectful workplace where fair treatment is guaranteed regardless of gender, identity, marital status, race, religion, ethnicity, age, disability, or other protected categories. Candidates are selected solely based on skills, qualifications, and experience. We encourage applicants to communicate any accessibility needs to facilitate an inclusive recruitment process.