Senior Adaptive Threat Replication Engineer

6 days ago


Boston, United States Bank of America Full time

Senior Adaptive Threat Replication Engineer

Locations: Denver, Colorado; Seattle, Washington; Addison, Texas; Richmond, Virginia; Jersey City, New Jersey; Boston, Massachusetts; Charlotte, North Carolina; Washington, District of Columbia; Jacksonville, Florida; Chicago, Illinois

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities, and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow, and make an impact, along with the power to make a difference. Join us

Position Overview:

The Cyber Security Assurance Division is looking for a Senior Adaptive Threat Replication Engineer (AKA Red Team, Penetration Testing, Advanced Vulnerability Assessments Engineer) to join a team of world-class offensive security professionals. In this role, you will diligently hunt for high-risk vulnerabilities across the bank’s global technology environment. Understanding security policy and compliance is important, but your focus will be to identify exploitable vulnerabilities.

This is a highly technical role that requires broad technical knowledge and a deep understanding of threats and threat TTPs. You will lead and participate in advanced technical assessments that leverage red team, penetration testing, and vulnerability assessment tools and techniques to identify high-risk vulnerabilities across a variety of technologies.

You will coordinate with senior leadership on development projects, share your knowledge and experience by mentoring junior engineers, and assist the monitoring and response functions to practice and improve their capability to respond and recover against a realistic threat actor.

Required Skills:

  1. 5+ years of professional offensive security experience
  2. Ability to critically examine an organization and system from the perspective of a threat actor and articulate risk in clear, precise terms to technical and non-technical audiences.
  3. Proficient with common tools associated with red teaming, penetration testing, and vulnerability assessments (Metasploit, Burp Suite, Cobalt Strike, Kali, etc.).
  4. Solid understanding of voice and data networks, major operating systems, Active Directory, their associated peripherals, and a strong desire to learn new technologies and skill sets.
  5. Knowledge of tactics, techniques, and procedures associated with malicious insider activity, organized crime/fraud groups, and both state and non-state sponsored threat actors, including knowledge of the MITRE ATT&CK framework.
  6. Ability to effectively code in a scripting language (Python, Perl, etc.).
  7. Advisory and innovative thinking skills.
  8. Technical documentation capabilities.
  9. Technology system assessment and threat analysis skills.

Desirable Skills:

  1. Certifications: OSCP, GPEN, GXPN, OSCE, GWAPT.
  2. Ability to work remotely if/when necessary.
  3. Previous experience working in the financial industry.
  4. Typically has 5-10 years of experience in technology and offensive security assessments.

This senior technical role is responsible for leading and performing assessments of the bank's technologies, applications, and cybersecurity controls while adapting testing methods to evolving and emerging threats. Key responsibilities include leading and performing research, understanding the bank's security policy, working with appropriate partners to complete assessments and simulations, identifying misconfigurations and vulnerabilities, and reporting on associated risk.

Shift: 1st shift (United States of America)

Hours Per Week: 40

#J-18808-Ljbffr
  • QA Engineer

    4 months ago


    Boston, United States Threat Stack, Inc Full time

    At Threat Stack, we're building a continuous monitoring platform specifically targeted at the challenges of cloud security for elastic infrastructure. Our platform gives our customers deep visibility into the behaviors of their systems and helps to identify potentially anomalous actions of users and processes. The QA Engineer will join our growing...


  • Boston, United States CATALOG Full time

    Write the next chapter of computing with usWe are building a commercial end-to-end DNA computing platform that will allow humanity to solve computational challenges previously intractable, and tap into insights previously hidden in data.Who We're Looking ForYou are both intellectually rigorous and enthusiastic, with patience and determination.You work well...


  • Boston, United States DraftKings Full time

    We’re defining what it means to build and deliver the most extraordinary sports and entertainment experiences. Our global team is trailblazing new markets, developing cutting-edge products, and shaping the future of responsible gaming. Here, “impossible” isn’t part of our vocabulary. You’ll face some of the toughest but most rewarding challenges of...


  • Boston, United States DraftKings Full time

    We’re defining what it means to build and deliver the most extraordinary sports and entertainment experiences. Our global team is trailblazing new markets, developing cutting-edge products, and shaping the future of responsible gaming. Considering making an application for this job Check all the details in this job description, and then click on...


  • Boston, United States DraftKings Full time

    We’re defining what it means to build and deliver the most extraordinary sports and entertainment experiences. Our global team is trailblazing new markets, developing cutting-edge products, and shaping the future of responsible gaming. Here, “impossible” isn’t part of our vocabulary. You’ll face some of the toughest but most rewarding challenges of...


  • Boston, United States DraftKings Full time

    We’re defining what it means to build and deliver the most extraordinary sports and entertainment experiences. Our global team is trailblazing new markets, developing cutting-edge products, and shaping the future of responsible gaming.Are you ready to apply Make sure you understand all the responsibilities and tasks associated with this role before...


  • Boston, United States Ensono Full time

    Job Summary:This role requires that you be in the office in Princeton, NJ. Relocation is an option.The Senior NAS Storage Engineer function ensures the stability, integrity, and efficient operation of NAS arrays, out-of-band managed storage arrays, as well as any array or appliance-based replication.Role DescriptionsDuties and Responsibilities of the Senior...


  • Boston, MA, United States DraftKings Full time

    We’re defining what it means to build and deliver the most extraordinary sports and entertainment experiences. Our global team is trailblazing new markets, developing cutting-edge products, and shaping the future of responsible gaming. Here, “impossible” isn’t part of our vocabulary. You’ll face some of the toughest but most rewarding challenges of...


  • boston, United States Motion Recruitment Full time

    Boston, MassachusettsHybridFull Time$170k - $220kDirector of EngineeringCompany Overview Our client is transforming security imaging with groundbreaking desktop scanners that provide x-ray-like images in real-time and 3D, without the risks associated with traditional x-rays. Their innovative systems are supported by advanced AI software and 24/7 expert...


  • Boston, United States Motion Recruitment Partners LLC Full time

    Director of EngineeringCompany OverviewOur client is transforming security imaging with groundbreaking desktop scanners that provide x-ray-like images in real-time and 3D, without the risks associated with traditional x-rays. Their innovative systems are supported by advanced AI software and 24/7 expert assistance, and are trusted by major Fortune 500...


  • Boston, MA, United States DraftKings Full time

    We’re defining what it means to build and deliver the most extraordinary sports and entertainment experiences. Our global team is trailblazing new markets, developing cutting-edge products, and shaping the future of responsible gaming. Here, “impossible” isn’t part of our vocabulary. You’ll face some of the toughest but most rewarding challenges of...


  • Boston, United States Cisco Systems, Inc. Full time

    Alphretta GA, Austin TX, Fulton MD, Philadelphia PA, RTP NC or US Remote EST only Compensation Range: 140000 USD - 197700 USD Job Type: Professional Job Id: 1430453 Application window has been extended and is expected to close on November 20, 2024.Please note location preferences/requirements above. Cisco is the worldwide leader in IT, networking, and...


  • Boston, United States WHOOP Full time

    At WHOOP, we're on a mission to unlock human performance. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives.WHOOP is seeking an Information Security Engineer to join our team, reporting to our Lead Security Engineer. In this role you will design, implement, administer, and monitor security...


  • Boston, United States WHOOP Full time

    At WHOOP, we're on a mission to unlock human performance. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives.WHOOP is seeking an Information Security Engineer to join our team, reporting to our Lead Security Engineer. In this role you will design, implement, administer, and monitor security...

  • Senior Civil Engineer

    3 weeks ago


    Boston, United States IMEG Corporation Full time

    Are you Ready to Engineer Your Career? At IMEG, one of the largest design consulting firms in the U.S., we strive to provide exciting and rewarding career opportunities to our team members. We work hard and are passionate about what we do but also love to have fun along the way. We celebrate the ability to be a firm of over 2600 employees in the US and...


  • Boston, United States Grand Circle Full time

    Title: Senior Software Engineer Location: Boston, MA (3 days onsite) Rate: DOE Senior Software Engineer We are excited to be expanding our creative and technical digital teams to support our ever-growing and ever-evolving website and online presence. We are looking for a Sr. Software Engineer who wants to play an integral role in positioning our brands and...

  • Sybase DBA

    4 months ago


    Boston, United States Syntricate Technologies Full time

    Required Skills: Experience in Sybase DB Engineering/Administrator, Migration experience, AWS Cloud Good to have Knowledge of Oracle, MS/SQL, Postgres, RedShift, Replication Proficiency in Engineering and Managing Replication


  • Boston, Massachusetts, United States whoop Full time

    Unlock Human PerformanceAt WHOOP, we're on a mission to empower individuals to perform at their best. As a Senior Backend Software Engineer, you'll play a crucial role in developing the core infrastructure for our e-commerce platform, ensuring seamless order fulfillment and subscription management. You'll collaborate closely with our systems team to design...


  • Boston, United States Wasabi Full time

    Role Description: Senior Machine Learning Engineer Role Purpose: Wasabi is seeking an experienced Senior Software Engineer with a solid background in machine learning and software development to contribute to Wasabi AiR. In the spirit of our disruptive approach to cloud storage our AI/ML product, Wasabi AiR resets the paradigm of how cloud storage and...


  • Boston, United States WHOOP Full time

    At WHOOP, we're on a mission to unlock human performance. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives. WHOOP is seeking an Information Security Engineer to join our team, reporting to our Lead Security Engineer. In this role you will design, implement, administer, and monitor security...