Manual Ethical Hacker
Boston, MA · On-site
... GPEN, PenTest+ or similar • Strong programming/scripting skills • Mobile application analysis • Frida • Binary analysis (disassembly skills) Company : Bank of America is a financial ...
Manual Ethical Hacker
Boston, MA · On-site
... GPEN, PenTest+ or similar • Strong programming/scripting skills • Mobile application analysis • Frida • Binary analysis (disassembly skills) Company : Bank of America is a financial ...
Preferred CySa+, Security+, PenTest+ certification Job Experience: * 2-5 years of cybersecurity experience working in a global organization. * 2-3 years in medical environment is preferred. Skills ...
Preferred CySa+, Security+, PenTest+ certification Job Experience: * 2-5 years of cybersecurity experience working in a global organization. * 2-3 years in medical environment is preferred. Skills ...
IT Security Intern
Chicopee, MA · On-site
Preferred CySa+, Security+, PenTest+ certification Job Experience: * 2-5 years of cybersecurity experience working in a global organization. * 2-3 years in medical environment is preferred. Skills ...
IT Security Intern
Chicopee, MA · On-site
Preferred CySa+, Security+, PenTest+ certification Job Experience: * 2-5 years of cybersecurity experience working in a global organization. * 2-3 years in medical environment is preferred. Skills ...
CISSP, CEH, OSCP, OSWE, GPEN, PenTest+ or similar * Strong programming/scripting skills * Mobile application analysis * Frida * Binary analysis (disassembly skills) Skills: * Advisory * Innovative ...
CISSP, CEH, OSCP, OSWE, GPEN, PenTest+ or similar * Strong programming/scripting skills * Mobile application analysis * Frida * Binary analysis (disassembly skills) Skills: * Advisory * Innovative ...
IT Security Intern
Brimfield, MA · On-site
Preferred CySa+, Security+, PenTest+ certification Job Experience: * 2-5 years of cybersecurity experience working in a global organization. * 2-3 years in medical environment is preferred. Skills ...
IT Security Intern
Brimfield, MA · On-site
Preferred CySa+, Security+, PenTest+ certification Job Experience: * 2-5 years of cybersecurity experience working in a global organization. * 2-3 years in medical environment is preferred. Skills ...
Manual Ethical Hacker
Boston, MA · On-site
CISSP, CEH, OSCP, OSWE, GPEN, PenTest+ or similar * Strong programming/scripting skills * Mobile application analysis * Frida * Binary analysis (disassembly skills) Skills: * Advisory * Innovative ...
Manual Ethical Hacker
Boston, MA · On-site
CISSP, CEH, OSCP, OSWE, GPEN, PenTest+ or similar * Strong programming/scripting skills * Mobile application analysis * Frida * Binary analysis (disassembly skills) Skills: * Advisory * Innovative ...
Preferred CySa+, Security+, PenTest+ certification Job Experience: * 2-5 years of cybersecurity experience working in a global organization. * 2-3 years in medical environment is preferred. Skills ...
Preferred CySa+, Security+, PenTest+ certification Job Experience: * 2-5 years of cybersecurity experience working in a global organization. * 2-3 years in medical environment is preferred. Skills ...
Preferred Qualifications: • Master's degree in Cybersecurity, computer science, or related field. • Pentest +, CEH, CISSP, or additional certifications beyond IAT Level II Certification • ...
Preferred Qualifications: • Master's degree in Cybersecurity, computer science, or related field. • Pentest +, CEH, CISSP, or additional certifications beyond IAT Level II Certification • ...
Preferred Qualifications: • Master's degree in Cybersecurity, computer science, or related field. • Pentest +, CEH, CISSP, or additional certifications beyond IAT Level II Certification • ...
Preferred Qualifications: • Master's degree in Cybersecurity, computer science, or related field. • Pentest +, CEH, CISSP, or additional certifications beyond IAT Level II Certification • ...
Pentest information
See Massachusetts salary details
$12.60 - $14.70
3% of jobs
$14.70 - $16.80
5% of jobs
$16.80 - $18.90
4% of jobs
$18.90 - $21
12% of jobs
$21.07 is the 25th percentile. Wages below this are outliers.
$21 - $23.10
16% of jobs
The median wage is $24.82 / hr.
$23.10 - $25.20
12% of jobs
$25.20 - $27.30
17% of jobs
$28.35 is the 75th percentile. Wages above this are outliers.
$27.30 - $29.40
12% of jobs
$29.40 - $31.50
7% of jobs
$31.50 - $33.60
6% of jobs
$33.60 - $35.70
5% of jobs
$12
$25
$35
How much do pentest jobs pay per hour?
As of May 28, 2026, the average hourly pay for pentest in Massachusetts is $25.23, according to ZipRecruiter salary data. Most workers in this role earn between $21.01 and $28.89 per hour, depending on experience, location, and employer.
What are the key skills and qualifications needed to thrive as a Penetration Tester, and why are they important?
To thrive as a Penetration Tester, you need strong knowledge of computer networks, operating systems, cybersecurity principles, and typically a degree in computer science or a related field. Familiarity with tools such as Metasploit, Burp Suite, Nmap, and certifications like CEH or OSCP are commonly required. Analytical thinking, attention to detail, and effective communication are crucial soft skills for accurately identifying vulnerabilities and reporting findings to clients or teams. These skills and qualifications are vital for uncovering security weaknesses and helping organizations strengthen their defenses against cyber threats.
What are some common challenges pentesters face when conducting security assessments in large organizations?
Pentesters in large organizations often encounter challenges such as navigating complex network architectures, obtaining appropriate permissions, and coordinating with multiple departments to minimize disruption. They must also balance thoroughness with tight deadlines and ensure clear communication of findings to both technical and non-technical stakeholders. Adaptability and strong collaboration skills are crucial for overcoming these obstacles and ensuring a successful assessment.
What are Pentesters?
Pentesters, also known as penetration testers, are cybersecurity professionals who simulate cyberattacks on computer systems, networks, or applications. Their goal is to identify vulnerabilities that malicious hackers could exploit. Pentesters use a variety of tools and techniques to assess security controls and provide recommendations for improving an organization's defenses. The results of their tests help organizations understand and mitigate potential risks. Pentesting is an essential part of maintaining robust cybersecurity.
How much does a pentester get paid?
Pentesters typically earn between $70,000 and $130,000 annually, depending on experience, certifications, and location. Entry-level roles may start around $60,000, while experienced professionals with advanced skills and certifications like OSCP or CISSP can earn over $150,000. Salary also varies based on the complexity of the testing environment and industry demand.
What jobs make $3,000 a month without a degree?
A penetration tester (pentest) can earn around $3,000 or more per month with relevant skills, certifications like OSCP or CEH, and experience, often working freelance or for small firms. Other roles such as web developers, IT support specialists, or sales representatives may also reach this income level without a degree, depending on skills, certifications, and work environment.
What is the difference between Pentest vs Vulnerability Analyst?
| Aspect | Pentest | Vulnerability Analyst |
|---|---|---|
| Certifications | OSCP, CEH, GPEN | OSCP, CEH, CISSP |
| Work Environment | Hands-on testing, simulated attacks | Vulnerability scanning, risk assessment |
| Employer & Industry Usage | Cybersecurity firms, IT departments | Security teams, consulting firms |
While both roles focus on cybersecurity, a Pentest involves actively exploiting vulnerabilities to identify security gaps, whereas a Vulnerability Analyst primarily assesses and reports on vulnerabilities without exploiting them. Both roles require similar certifications and often work in the same environments, but their core activities differ in approach and scope.
What are the most commonly searched types of Pentest jobs in Massachusetts? The most popular types of Pentest jobs in Massachusetts are:
What are popular job titles related to Pentest jobs in Massachusetts? For Pentest jobs in Massachusetts, the most frequently searched job titles are:
What job categories do people searching Pentest jobs in Massachusetts look for? The top searched job categories for Pentest jobs in Massachusetts are:
Full-time
Posted 22 days ago
Job description
Job Summary:
Bank of America is committed to helping make financial lives better through the power of every connection. They are seeking a Manual Ethical Hacker to perform application security assessments, identify vulnerabilities, and provide advice on managed risks within their Cyber Security Assurance Offensive Security group.
Responsibilities:
• Perform assigned analysis of internal and external threats on information systems and predict future threat behavior
• Incorporate threat actors' tactics, techniques, and procedures into offensive security testing
• Perform assessments of the security, effectiveness, and practicality of multiple technology systems
• Leverage innovative thinking to help solve problems or introduce new ideas to processes or products applicable to offensive security.
• Prepare and present detailed technical information for various media including documents, reports, and notifications
• Provide clear and practical advice regarding managed risks
• Learn and develop advanced technical and leadership skills, Mentor Junior assessors in technical tradecraft and soft skills
Qualifications:
Required:
• Minimum of 4 years of professional pentesting, application security or ethical hacking experience, preferably in a large, complex, enterprise environment
• Detailed technical knowledge in at least 3 of the following areas: security engineering; application architecture; authentication and security protocols; application session management; applied cryptography; common communication protocols; mobile frameworks; single sign-on technologies; exploit automation platforms; RESTful web services
• SQL injection/XSS attack without the use of tools
• Experience performing manual code reviews for security relevant issues
• Experience working with SAST tools to identify vulnerabilities
• Able to manually identify and reproduce findings, discuss remediation concepts, develop PoCs for vulnerabilities, use scripting/coding techniques, proficiently execute common penetration testing tools, triage, and support incidents, and produce high value findings
• Experience performing manual web application assessments i.e., must be able to simulate a
• Knowledge of network and Web related protocols/technologies (e.g., UNIX/LINUX, TCP/IP, Cookies)
• Experience with vulnerability assessment tools and penetration testing techniques
• Solid programming/debugging skills
• Experience of using a variety of tools, included, but not limited to, IBM AppScan, Burp and SQL Map
• Threat Analysis
• Innovative Thinking
• Technology Systems Assessment
• Technical Documentation
• Advisory
Preferred:
• CISSP, CEH, OSCP, OSWE, GPEN, PenTest+ or similar
• Strong programming/scripting skills
• Mobile application analysis
• Frida
• Binary analysis (disassembly skills)
Company:
Bank of America is a financial institution that offers credit cards, home loans, and auto loan services. Founded in 1998, the company is headquartered in Charlotte, USA, with a team of 10001+ employees. The company is currently Late Stage.
Bank of America is committed to helping make financial lives better through the power of every connection. They are seeking a Manual Ethical Hacker to perform application security assessments, identify vulnerabilities, and provide advice on managed risks within their Cyber Security Assurance Offensive Security group.
Responsibilities:
• Perform assigned analysis of internal and external threats on information systems and predict future threat behavior
• Incorporate threat actors' tactics, techniques, and procedures into offensive security testing
• Perform assessments of the security, effectiveness, and practicality of multiple technology systems
• Leverage innovative thinking to help solve problems or introduce new ideas to processes or products applicable to offensive security.
• Prepare and present detailed technical information for various media including documents, reports, and notifications
• Provide clear and practical advice regarding managed risks
• Learn and develop advanced technical and leadership skills, Mentor Junior assessors in technical tradecraft and soft skills
Qualifications:
Required:
• Minimum of 4 years of professional pentesting, application security or ethical hacking experience, preferably in a large, complex, enterprise environment
• Detailed technical knowledge in at least 3 of the following areas: security engineering; application architecture; authentication and security protocols; application session management; applied cryptography; common communication protocols; mobile frameworks; single sign-on technologies; exploit automation platforms; RESTful web services
• SQL injection/XSS attack without the use of tools
• Experience performing manual code reviews for security relevant issues
• Experience working with SAST tools to identify vulnerabilities
• Able to manually identify and reproduce findings, discuss remediation concepts, develop PoCs for vulnerabilities, use scripting/coding techniques, proficiently execute common penetration testing tools, triage, and support incidents, and produce high value findings
• Experience performing manual web application assessments i.e., must be able to simulate a
• Knowledge of network and Web related protocols/technologies (e.g., UNIX/LINUX, TCP/IP, Cookies)
• Experience with vulnerability assessment tools and penetration testing techniques
• Solid programming/debugging skills
• Experience of using a variety of tools, included, but not limited to, IBM AppScan, Burp and SQL Map
• Threat Analysis
• Innovative Thinking
• Technology Systems Assessment
• Technical Documentation
• Advisory
Preferred:
• CISSP, CEH, OSCP, OSWE, GPEN, PenTest+ or similar
• Strong programming/scripting skills
• Mobile application analysis
• Frida
• Binary analysis (disassembly skills)
Company:
Bank of America is a financial institution that offers credit cards, home loans, and auto loan services. Founded in 1998, the company is headquartered in Charlotte, USA, with a team of 10001+ employees. The company is currently Late Stage.
About Bank of America Business
Sourced by ZipRecruiter
Industry
Finance and insurance
Company size
10,000+ Employees
Headquarters location
Charlotte, NC, US
Year founded
1998