Senior Red Team Developer - Adaptive Threat Simulation

Bank of America

3.2

(114)

Multiple Locations

Why you should apply for a job to Bank of America:

  • 57% say women are treated fairly and equally to men
  • 74% say the CEO supports gender diversity
  • Ratings are based on anonymous reviews by Fairygodboss members.
  • A competitive benefits and programs have earned us recognition by Working Mother magazine for more than 30 years.
  • Employee Financial Services offers U.S. employees financial education and special access to financial products, services and expertise.
  • Offers comprehensive domestic partner benefits to U.S. employees and incorporate sexual orientation into non-discrimination policies.
  • #JR-25023769

    Position summary

    ment and adversary emulation to join our Cyber Threat Hunt, Intelligence and Defense organization. This role is centered around building and deploying advanced offensive security capabilities through R&D, custom tooling, and red team operations. The ideal candidate will have a deep understanding of modern endpoint detection and response (EDR) technologies, experience with low-level programming languages, and a passion for offensive security.

    Required Skills

    • 7+ years of IT experience with at least 5 years of experience in offensive security.

    • Experience with designing and developing custom implants, loaders, and post-exploitation tools for red team engagements.

    • Comprehensive knowledge of command-and-control frameworks like Cobalt Strike, Mythic, Havoc, and Sliver.

    • Experience with researching and implementing EDR evasion techniques, including userland and kernel-level bypasses, in-memory execution, and telemetry disruption.

    • Must demonstrate knowledge of tactics, techniques, and procedures associated with malicious insider activity, organized crime/fraud groups and both state and non-state sponsored threat actors.

    • Must be able to critically examine an organization and system through the perspective of a threat actor and articulate risk in clear, precise terms.

    • Must be able to both work independently as well as effectively work in teams with individuals with a variety of skills and backgrounds

    • Able to collaborate with other teams and communicate security concepts effectively.

    • Must have a strong background using low-level languages (C/C++).

    • Must have experience with PE file format and low-level Windows internals.

    • Must have experience with reverse engineering and Windows debugging (IDA, Ghidra and WinDBG).

    Skills:

    • Advisory

    • Innovative Thinking

    • Technical Documentation

    • Technology System Assessment

    • Threat Analysis

    • Adaptability

    • Collaboration

    • Executive Presence

    • Scenario Planning and Analysis

    • Test Engineering

    This job will be open and accepting applications for a minimum of seven days from the date it was posted.

    Shift:
    1st shift (United States of America)

    Hours Per Week:
    40

    Learn more about this role

    Why you should apply for a job to Bank of America:

  • 57% say women are treated fairly and equally to men
  • 74% say the CEO supports gender diversity
  • Ratings are based on anonymous reviews by Fairygodboss members.
  • A competitive benefits and programs have earned us recognition by Working Mother magazine for more than 30 years.
  • Employee Financial Services offers U.S. employees financial education and special access to financial products, services and expertise.
  • Offers comprehensive domestic partner benefits to U.S. employees and incorporate sexual orientation into non-discrimination policies.