Bank of America Logo

Bank of America

Senior Adaptive Threat Replication Engineer

Job Posted 9 Days Ago Reposted 9 Days Ago
Be an Early Applicant
In-Office
10 Locations
160K-200K Annually
Senior level
In-Office
10 Locations
160K-200K Annually
Senior level
The Senior Adaptive Threat Replication Engineer will lead advanced assessments to identify vulnerabilities, mentor junior engineers, and improve security responses.
The summary above was generated by AI

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Job Description:

Senior Adaptive Threat Replication Engineer
(AKA Red Team, Penetration Testing, Advanced Vulnerability Assessments Engineer)

Are you passionate about cyber security and looking to work with some of the best information security professionals in the world and in challenging environments? Bank of America is hiring top talent to join our team. You bring your talent and passion and we’ll provide you with an opportunity to shine and grow.

The Cyber Security Assurance Division is looking for a Senior Adaptive Threat Replication Engineer to join a team of world-class offensive security professionals. In this role you will diligently hunt for hi-risk vulnerabilities across the bank’s global technology environment. Understanding security policy and compliance is important but in this role your focus is to identify exploitable vulnerabilities; ones that can bring about that “nightmare scenario.”
 
This is a highly technical role that requires broad technical knowledge and a deep understanding of threats and threat TTPs. You will lead and participate in advanced technical assessments that leverage red team, penetration testing, and vulnerability assessment tools and techniques to identify hi-risk vulnerabilities across a variety of technologies. 
 
You will coordinate with senior leadership on development projects, share your knowledge and experience by mentoring junior engineers, and assist the monitoring and response functions so those functions can practice and improve their capability to respond and recover against a realistic threat actor. 

Required Skills:

  • 5+ years of professional offensive security experience
  • Must be able to critically examine an organization and system through the perspective of a threat actor and articulate risk in clear, precise terms to technical and non-technical audience.
  • Must be very proficient with the common tools associated with red teaming, penetration testing, and vulnerability assessments (Metasploit, Burp Suite, Cobalt Strike, Kali, etc.).
  • Must have a solid understanding of voice and data networks, major operating systems, active directory, their associated peripherals, and strong desire to learn new technologies and skill sets.
  •  Must demonstrate knowledge of tactics, techniques, and procedures associated with malicious insider activity, organized crime/fraud groups, and both state and non-state sponsored threat actors. Knowledge of MITRE ATT@CK framework.
  • Ability to effectively code in a scripting language (Python, Perl, etc.)
  • Advisory
  • Innovative Thinking
  • Technical Documentation
  • Technology System Assessment
  • Threat Analysis

Desirable Skills: 

  • Certifications: OSCP, GPEN, GXPN, OSCE, GWAPT,
  • Ability to work remotely if/when necessary,
  • Previous experience working in the financial industry,
  • Typically has 5-10 years of experience in technology and offensive security assessments

This senior technical role is responsible for leading and performing assessments of the bank's technologies, applications, and cyber security controls while adapting testing methods to evolving and emerging threats. Key responsibilities include leading and performing research, understanding the bank's security policy, working with appropriate partners to complete assessments and simulations, identifying misconfigurations and vulnerabilities and reporting on associated risk. These individuals partner closely with security partners, CIO clients and multiples lines of business.

Shift:

1st shift (United States of America)

Hours Per Week: 

40

Pay Transparency details

US - CO - Denver - 1144 15th St - Denver Gis (CO9926), US - DC - Washington - 1800 K St NW - 1800 K Street NW (DC1842), US - IL - Chicago - 540 W Madison St - Bank Of America Plaza (IL4540), US - NJ - Jersey City - 101 Hudson St - 101 Hudson (NJ2101), US - WA - Seattle - 401 Union St - Rainier Square (WA1510)

Pay and benefits information

Pay range$160,000.00 - $200,000.00 annualized salary, offers to be determined based on experience, education and skill set.

Discretionary incentive eligible

This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.

Top Skills

Burp Suite
Cobalt Strike
Kali
Metasploit
Perl
Python

Similar Jobs

11 Hours Ago
Hybrid
Centennial, CO, USA
24-31
Junior
24-31
Junior
AdTech • Cloud • Digital Media • Information Technology • News + Entertainment • App development
The Post Support Technician provides operational support for post-production workflows, including media management and troubleshooting for editors and production staff.
Top Skills: 3Ds MaxAdobe PremiereAfter EffectsAirtableAvid Media ComposerCinema 4DFrame.IoInterplay AccessMayaMedia Central ClouduxOrange LogicPhotoshop
11 Hours Ago
Hybrid
Centennial, CO, USA
24-31
Junior
24-31
Junior
AdTech • Cloud • Digital Media • Information Technology • News + Entertainment • App development
The Post Support Technician provides operational and technical support in post production, including media management, editing services, and workflow automation.
Top Skills: 3Ds MaxAdobe PremiereAfter EffectsAirtableAvid Media ComposerCinema 4DFrame.IoInterplay AccessMayaMedia Central ClouduxOrange LogicPhotoshop
11 Hours Ago
Easy Apply
Remote or Hybrid
9 Locations
Easy Apply
157K-235K
Expert/Leader
157K-235K
Expert/Leader
Fintech • HR Tech
The Senior Machine Learning Engineer will build and maintain ML infrastructure, develop MLOps solutions, and collaborate on API-enabled services and deployments.
Top Skills: AWSAws SagemakerJavaKubeflowMlflowPythonRuby

What you need to know about the Seattle Tech Scene

Home to tech titans like Microsoft and Amazon, Seattle punches far above its weight in innovation. But its surrounding mountains, sprinkled with world-famous hiking trails and climbing routes, make the city a destination for outdoorsy types as well. Established as a logging town before shifting to shipbuilding and logistics, the Emerald City is now known for its contributions to aerospace, software, biotech and cloud computing. And its status as a thriving tech ecosystem is attracting out-of-town companies looking to establish new tech and engineering hubs.

Key Facts About Seattle Tech

  • Number of Tech Workers: 287,000; 13% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Amazon, Microsoft, Meta, Google
  • Key Industries: Artificial intelligence, cloud computing, software, biotechnology, game development
  • Funding Landscape: $3.1 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Madrona, Fuse, Tola, Maveron
  • Research Centers and Universities: University of Washington, Seattle University, Seattle Pacific University, Allen Institute for Brain Science, Bill & Melinda Gates Foundation, Seattle Children’s Research Institute
By clicking Apply you agree to share your profile information with the hiring company.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account