Lead offensive security testing and source code reviews for internal and external web, mobile, and API applications within Bank of America’s Global Information Security team.
Locations (2)
Mumbai, Maharashtra, India
Chennai, Tamil Nadu, India
Responsibilities
Performs assigned analysis of internal and external threats on information systems
Incorporates threat actors' tactics, techniques, and procedures into offensive security testing
Performs assessments of the security, effectiveness, and practicality of multiple technology systems
Leverages innovative thinking to help solve problems or introduce new ideas to processes or products applicable to offensive security
Prepares and presents detailed technical information for various media including documents, reports, and notifications
Requirements
B.E. / B. Tech
M.E. / M. Tech
Nice to have: penetration testing and source code reviews on web API and mobile platforms
Responsible for performing hands‑on penetration tests and offensive security assessments for local and global clients.
Responsibilities
Perform hands‑on offensive security assessments across a wide range of technologies and engagement types, including Red Team, Purple Team, external and internal network testing, web and mobile applications, thick client applications, web3 environments, and additional offensive security domains.
Deliver end‑to‑end penetration testing engagements, including preparation, execution, documentation of findings, risk‑based recommendations, and professional client‑facing reporting.
Collaborate with client technical teams to validate security gaps, explain findings clearly, support remediation discussions, and ensure practical, business‑relevant security improvements.
Participate in client meetings throughout the engagement lifecycle, including kickoff, scoping, technical walkthroughs, and final report presentation.