Offensive Security Professional II A

Bank of America
Chennai, Mumbai, Hyderabad
Workplace: OnsiteFull timeFunction: Solutions Engineering & Sales EngineeringExperience: 10+ yearsEducation: mastersSkills: ["Communication","Interpersonal skills","Independent work","Security vulnerability analysis","Penetration testing"]

Conduct manual penetration tests and source code reviews for internal and external web, mobile, and web API services, using both manual and automated techniques to identify and report security vulnerabilities. Partner with application developers and senior stakeholders to explain complex findings and associated business risks. Work independently in a large enterprise environment, collaborating with peer teams while applying deep expertise across authentication, session management, cryptography, SSO, and exploitation/automation practices.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Bank of America
Bank of America
2 months ago

Offensive Security Professional II A

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 24 days agoStatus: Live

Job Summary

Conduct manual penetration tests and source code reviews for internal and external web, mobile, and web API services, using both manual and automated techniques to identify and report security vulnerabilities. Partner with application developers and senior stakeholders to explain complex findings and associated business risks. Work independently in a large enterprise environment, collaborating with peer teams while applying deep expertise across authentication, session management, cryptography, SSO, and exploitation/automation practices.
Location: Chennai, Mumbai, Hyderabad
Workplace: Onsite
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Conduct comprehensive manual penetration tests to uncover security vulnerabilities across web, API, mobile, services, platforms, systems, and networks.
  • •Perform source code reviews of internal and external applications to identify security issues.
  • •Use automated and manual techniques, including advanced penetration testing tools and methods, to validate and report findings.
  • •Communicate complex security vulnerabilities and business risks to application developers and senior managers.
  • •Collaborate with peer team members while working independently in a large-scale enterprise setting.

Key Requirements

  • •B.E./B.Tech or M.E./M.Tech education.
  • •10+ years of experience.
  • •Strong hands-on experience performing manual penetration tests and source code reviews across web, API, and mobile applications.
  • •Solid experience using security testing tools such as Invicti, SoapUI, Burp Suite Pro, Checkmarx, Kali Linux, and Metasploit.
  • •Strong programming/debugging skills in one or more of: Java, JavaScript, HTML, XML, PHP, ASP.NET, AJAX, JSON, Python, Perl, Shell script, Objective-C, and SOAP/REST web APIs.
Experience:10+ yearsPenetration testingApplication securityEnterprise security
Education:Master's
Skills:CommunicationInterpersonal skillsIndependent workSecurity vulnerability analysisPenetration testing
Certifications:GWAPTCEHOSCPSANS
Tech Stack:InvictiSoapUIBurp Suite ProCheckmarxKali LinuxMetasploitLinuxWindowsWeb proxiesPacket capture analysisBrowser extensionsIOSAndroidJavaJavaScriptHTMLXMLPHPASP.NETAJAX

Company Brief

Bank of America
One of the largest banking institutions in the United States, providing consumer and commercial banking, wealth management, investment banking, and financial services to individuals, businesses, and institutions globally.
Industry: Banking
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Charlotte, United States
Founded: 1904
WebsiteLinkedIn