Manual Ethical Hacker (Web Applications)

Job Title

Manual Ethical Hacker

Corporate Title

Up to Vice President

Location

Central Park, Leopardstown, Dublin

Chester, United Kingdom

Location Overview - Central Park

Our Central Park office in Leopardstown boasts modern facilities based in Dublin's premium business park with an onsite gym and staff restaurant. Travel options include the LUAS network and the Central Park shuttle service between Dublin City Centre and Central Park.

Location Overview - Chester

Located in the city of Chester, offering a far-reaching global career within a culturally rich environment, surrounded by rolling North Wales hills and the River Dee.

Role Description

As an Ethical Hacker, you'll play a vital role in our Cybersecurity Assurance Program. Your mission is to safeguard our applications from potential threats. In this role you will assess our application security by conducting penetration tests, evaluating both internal and external web, mobile, and web service applications. Your goal is to stay ahead of malicious hackers by collaborating with our team to strengthen our defence by identifying and reporting security weaknesses.

Responsibilities

• Understanding the requirements of our applications and why/how we use them.
• Testing applications using a variety of tools to identify vulnerabilities that could expose the Bank to risk.
• Monitoring existing and proposed security standard setting groups.
• Conducting meetings to communicate the findings and implications and set realistic timescales for remediation.
• Providing technical support to clients, management and staff throughout risk assessments and the implementation of appropriate data security procedures and products.
• Acting as an SME, providing guidance and knowledge to reduce the vulnerabilities and risk when apps are being created.
• Sharing knowledge with technical and non-technical colleagues through training sessions.

What we are looking for

• Proven professional experience in Ethical Hacking or Cyber Security.
• Expert level experience and very detailed technical knowledge in at least 3 of the following areas: general information security; security engineering; application architecture; authentication and security protocols; applications session management; applied cryptography; common communication protocols; mobile frameworks; single sign-on technologies; exploit automation platforms; RESTful web services.
• Able to manually identify and reproduce findings, discuss remediation concepts, develop PoCs for vulnerabilities, use scripting/coding techniques, proficiently execute common penetration testing tools, triage and support incidents, and produce high-value findings.
• Experience in conducting web application ethical hacking assessments.
• Ability to demonstrate manual web application testing experience (must be able to simulate a SQL injection/Cross-site script attack without the use of tool).
• Knowledge of network and web related protocols/technologies (e.g., UNIX/LINUX, TCP/IP, Cookies).
• Experience with vulnerability assessment tools and penetration testing techniques.
• Solid programming/debugging skills.
• Experience using a variety of tools, included, but not limited to, Invicti, Burp and SQL Map.
• Ability to learn and apply critical thinking in a variety of situations.
• Effective written and oral communication skills.
• Ability to multitask and handle multiple projects.

Benefits of working at Bank of America

• Private healthcare for you and your family plus an annual health screen.
• Competitive pension plan, life assurance and group income protection cover.
• 20 days of back up childcare and 20 days of back up adult care per annum.
• Flexible benefits including wellbeing account, travel insurance, critical illness etc.
• Employee Assistance Program for confidential support and help for everyday matters.
• Free counselling and virtual GP services via private health care plan.
• Charity donation matching by the bank.
• Access to an Arts & Culture corporate membership program.
• Opportunities to volunteer in the local community.

Equal Opportunities Employer

Bank of America is an equal opportunities employer and ensures that no applicant is subject to less favourable treatment on the grounds of gender, gender identity or gender reassignment, marital or civil partner status, race, religion or belief, colour, nationality, ethnic or national origins, membership of the Traveller community, age, sexual orientation, pregnancy or maternity, civil status, socio economic background, family status or physical or mental disability. The Bank selects candidates for interview based on their skills, qualifications and experience. We strive to ensure that our recruitment processes are accessible for all candidates and encourage any candidates to tell us about any adjustment requirements.