> Markdown version of [/jobs/ext/1971060-manual-ethical-hacker](https://www.wearedevelopers.com/jobs/ext/1971060-manual-ethical-hacker). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Manual Ethical Hacker

- **Company:** Bank of America
- **Location:** Denver, CO, United States
- **Experience:** Experienced
- **Salary:** $117,000.0 - $147,700.0
- **Contract:** Permanent contract
- **Skills:** Applications Architecture, Software System Penetration Testing, User Authentication, Code Review, Communications Protocols, Information Systems, Computer Programming, Software Debugging, Mobile Application Software, Automation of Marketing, Comptia Pentest+ CE, Session Management, Single Sign-On, SQL Injection, SQL Databases, TCP/IP, Web Applications, Scripting, Software Security, Cross-Site Scripting (XSS), Appscan, Software Coding, Restful APIs, Static Application Security Testing, Vulnerability Analysis
- **Published:** August 7, 2026
- **Apply:** https://ghr.wd1.myworkdayjobs.com/Lateral-US/job/Denver/Manual-Ethical-Hacker_26000923

## About the Role

* Minimum of 4 years of professional pentesting, application security or ethical hacking experience, preferably in a large, complex, enterprise environment
 * Detailed technical knowledge in at least 3 of the following areas: security engineering; application architecture; authentication and security protocols; application session management; applied cryptography; common communication protocols; mobile frameworks; single sign-on technologies; exploit automation platforms; RESTful web services
 * SQL injection/XSS attack without the use of tools
 * Experience performing manual code reviews for security relevant issues
 * Experience working with SAST tools to identify vulnerabilities
 * Able to manually identify and reproduce findings, discuss remediation concepts, develop PoCs for vulnerabilities, use scripting/coding techniques, proficiently execute common penetration testing tools, triage, and support incidents, and produce high value findings
 * Experience performing manual web application assessments i.e., must be able to simulate a
 * Knowledge of network and Web related protocols/technologies (e.g., UNIX/LINUX, TCP/IP, Cookies)
 * Experience with vulnerability assessment tools and penetration testing techniques
 * Solid programming/debugging skills
 * Experience of using a variety of tools, included, but not limited to, IBM AppScan, Burp and SQL Map
 * Threat Analysis
 * Innovative Thinking
 * Technology Systems Assessment
 * Technical Documentation
 * Advisory

Desired:

 * CISSP, CEH, OSCP, OSWE, GPEN, PenTest+ or similar
 * Strong programming/scripting skills
 * Mobile application analysis
 * Frida
 * Binary analysis (disassembly skills)

Skills:

 * Advisory
 * Innovative Thinking
 * Technical Documentation
 * Technology System Assessment
 * Threat Analysis
 * Adaptability
 * Collaboration
 * Executive Presence
 * Scenario Planning and Analysis
 * Test Engineering
 * Controls Management
 * Information Systems Management
 * Issue Management
 * Mentoring
 * Presentation Skills

## Description

* Perform assigned analysis of internal and external threats on information systems and predict future threat behavior
 * Incorporate threat actors' tactics, techniques, and procedures into offensive security testing
 * Perform assessments of the security, effectiveness, and practicality of multiple technology systems
 * Leverage innovative thinking to help solve problems or introduce new ideas to processes or products applicable to offensive security.
 * Prepare and present detailed technical information for various media including documents, reports, and notifications
 * Provide clear and practical advice regarding managed risks
 * Learn and develop advanced technical and leadership skills, Mentor Junior assessors in technical tradecraft and soft skills


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)
- [Getting under the skin: The Social Engineering techniques](https://www.wearedevelopers.com/videos/38-getting-under-the-skin-the-social-engineering-techniques)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Top 6 Hackathons for Developers in 2023](https://www.wearedevelopers.com/magazine/263-top-6-hackathons-for-developers-in-2023)
- [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)