field_remote_option

job_industry

field_job_occupational_field_parents_all

job_organization_name

job_upgrade_is_featured

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Position Summary Bank of America is looking for an experienced ServiceNow business analyst to help implement ServiceNow’s SecOps modules in a new, “greenfield” ServiceNow instance. This job is responsible for capturing and refining business needs into actionable requirements for ServiceNow developers. Job expectations include working closely with key stakeholders to ensure business outcomes are delivered, assisting with troubleshooting, creating documentation, and assisting with user training. Key Responsibilities: <ul> <li>Responsible for capturing and refining business and system requirements for the ServiceNow SecOps modules.</li> <li>Works with stakeholders to understand their needs, analyze problems, and capture their requirements, and then working closely with the Development Team to refine the requirement into specifications that can be executed by the team.</li> <li>Possess a working knowledge of Cybersecurity best practices, vulnerability management lifecycle, and ServiceNow configuration.</li> <li>Leverages experience and understanding of stakeholder needs to help create a solution, envisions the solution to solve a problem (manual or through software).</li> <li>Performs Cost/Benefit Analysis to align the technology to business strategy. Gathers &amp; catalogs functional, non-functional, and technical requirements for stakeholder requests.</li> <li>Determines the impact of modifications and enhancements on the ServiceNow SecOps modules and platform.</li> <li>Acts as the ServiceNow SecOps subject matter expert to support scope and requirement decisions.</li> <li>Ensures changes to the application are compliant with bank standards and policies.</li> <li>Assists users and development team with application testing and troubleshooting. May help configure test solutions to validate functional and system needs.</li> <li>Identify, document, and troubleshoot application related problems.</li> <li>Documents process, procedures, and workflows associated with the relevant ServiceNow modules and external applications.</li> <li>Leads or participates in continuous improvement efforts; Building expertise in creating, analyzing, and improving processes.</li> <li>Ability to create, maintain, and present training materials for end-users.</li> </ul> Qualifications: <ul> <li>1+ years of experience translating business needs into requirements for a ServiceNow implementation or major enhancement project.</li> <li>Hands-on experience with ServiceNow, including familiarity with at least 1 module.</li> <li>Prior experience in an IT or Cybersecurity role.</li> <li>Strong interpersonal and written/verbal communication skills, with the ability to present complex ideas clearly and effectively.</li> <li>Familiarity with Agile development practices.</li> </ul> Desired Certifications: <ul><li>ServiceNow Certified Systems Administrator (CSA) certification</li></ul> Enterprise Role Overview: Responsible for capturing and refining business and/or system requirements (based on specialization). Works with stakeholders to understand their needs, analyze problems, and capture their requirements, and then working closely with the Development Team to refine the requirement into specifications that can be executed by the team. Possess a working knowledge of the business and/or technical domain based on their specialization. Leverages experience and understanding of stakeholder needs to help create a solution, envisions the solution to solve a problem (manual or through software). Performs Cost/Benefit Analysis to align the technology to business strategy. Gathers &amp; catalogs functional, non-functional, and technical requirements for stakeholder requests. Determines the impact of modifications and enhancements on the application. Acts as the product(s) subject matter expert to support scope and requirement decisions. Ensures changes to the application are compliant with bank standards and policies. Assists users and development team with application testing and troubleshooting, and may help configure test solutions to validate functional and system needs. Identifies, document and troubleshoot application related problems. Documents process, procedures and workflows associated with applications. Leads or participate in continuous improvement efforts; Building expertise in creating, analyzing, and improving processes. Creates, maintains and presents training materials for end-users. Individual contributor. Shift:1st shift (United States of America) Hours Per Week: 40

Bank of America

ServiceNow Business Analyst

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Job Description: Our Cyber Threat Hunting, Intelligence &amp; Defense team within Bank of America’s Cyber Security Defense function works to continuously strengthen the bank’s cyber security posture through research, intelligence, threat simulations, threat hunting, and offensive security engagements. This team works with partners throughout public and private sectors to both discover threats to help secure critical infrastructure around the world that interacts with millions of customers. Role Responsibilities: The position of Cyber Threat Intelligence Technical Analyst is responsible for collecting, analyzing, and actioning cyber threat intelligence to defend the Bank. The Cyber Threat Intelligence Technical Analyst also will be tasked with and collaborating with defensive control owners, threat research, and incident response to track and defend against emerging threat tactics, techniques, and procedures. The Cyber Threat Intelligence Technical Analyst requires strategic thinking with a strong background in cyber security, threat intelligence, and leadership. The role will work with all Cyber Defense operational and technical teams within Global Information Security (GIS) to gain insight into critical security controls and architectural specifics to develop adequately track, analyze, and defend against cyber threat actors. This role will be a thought leader in the design of cutting-edge detective, preventative, and proactive controls. Required Skills: • 5+ years of experience in Cyber Threat Intelligence • Experience collecting, analyzing, and actioning Threat Intelligence • Must demonstrate extensive knowledge of tactics, techniques, and procedures associated with malicious insider activity, organized crime/fraud groups, and both state and non-state sponsored threat actors • Ability to apply Cyber Threat Intelligence through enrichment, correlation, and attribution • Ability to provide expert guidance on threat trends, analysis methods, and defensive strategies to senior management and key stakeholders • Strong experience with offensive security tactics, techniques, and procedures (DDoS, Malware, Phishing, Vulnerabilities, etc.) • Strong technical experience performing OSINT investigations • Must demonstrate knowledge of tactics, techniques, and procedures associated with malicious insider activity, organized crime/fraud groups, and both state and non-state sponsored threat actors • Technical experience with Threat Intelligence tools such as Passive DNS, Network Flow Analysis, Maltego, Virus Total, URLScan, etc. • Ability to analyze threats and distill common Indicators of Attack and Indicators of Compromise • Technical experience with defensive tools for actioning threat intelligence including tools like SIEM/Splunk, EDR, Big Data Platforms, etc. • Deep experience working with industry-wide frameworks and standards like MITRE ATT&amp;CK • Ability to navigate and work effectively across a complex, geographically dispersed organization • Experience with threat intelligence vendors and platforms • Previous experience performing threat intelligence and incident response on major security incidents This job will be open and accepting applications for a minimum of seven days from the date it was posted. Shift:1st shift (United States of America) Hours Per Week: 40

Cyber Threat Intelligence Technical Analyst

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Description: Manual Ethical Hacking is part of the Application Development Security Framework Program within Bank of America’s Cyber Security Assurance Offensive Security group. The program provides services to assess the vulnerability of the bank’s applications to malicious hacking activity. This technical role is responsible for performing application security assessments of the bank's technologies, applications, and cyber security controls while adapting testing methods to evolving and emerging threats. Key responsibilities include performing research, understanding the bank’s security policies, working with the appropriate partners to complete assessments and simulations, identifying misconfigurations and vulnerabilities, and reporting on associated risk. These individuals partner closely with security partners, CIO clients and multiples lines of business. Key Responsibilities in order of importance: <ul> <li>Perform assigned analysis of internal and external threats on information systems and predict future threat behavior</li> <li>Incorporate threat actors' tactics, techniques, and procedures into offensive security testing</li> <li>Perform assessments of the security, effectiveness, and practicality of multiple technology systems</li> <li>Leverage innovative thinking to help solve problems or introduce new ideas to processes or products applicable to offensive security.</li> <li>Prepare and present detailed technical information for various media including documents, reports, and notifications</li> <li>Provide clear and practical advice regarding managed risks</li> </ul> Required Skills: <ul><li> Minimum of 4 years of professional experience in Information Technology or preferably Information Security/Cybersecurity</li></ul> <ul><li>Hands on experience with pentesting, application security or ethical hacking experience, preferably with a completed certification, e.g.: CISSP, CEH, OSCP, OSWE, GPEN, PenTest+ or similar</li></ul> <ul> <li>Technical knowledge in at least 3 of the following areas: security engineering; application architecture; authentication and security protocols; application session management; applied cryptography; common communication protocols; mobile frameworks; single sign-on technologies; exploit automation platforms; RESTful web services</li> <li>Experience working with SAST tools to identify vulnerabilities</li> <li>Able to manually identify and reproduce findings, discuss remediation concepts, develop PoCs for vulnerabilities, use scripting/coding techniques, proficiently execute common penetration testing tools, triage, and support incidents, and produce high value findings</li> <li>Experience performing manual web application assessments i.e., must be able to simulate a SQL injection/XSS attack without the use of tools</li> <li>Knowledge of network and Web related protocols/technologies (e.g., UNIX/LINUX, TCP/IP, Cookies)</li> <li>Experience with vulnerability assessment tools and penetration testing techniques</li> <li>Solid programming/debugging skills</li> <li>Experience of using a variety of tools, included, but not limited to, IBM AppScan, Burp and SQL Map</li> <li>Threat Analysis</li> <li>Innovative Thinking</li> <li>Technology Systems Assessment</li> <li>Technical Documentation</li> <li>Advisory</li> </ul> Shift:1st shift (United States of America) Hours Per Week: 40

Manual Ethical Hacker

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Description: This job is responsible for defining and leading the engineering approach for complex features to deliver significant business outcomes. Key responsibilities of the job include delivering complex features and technology, enabling development efficiencies, providing technical thought leadership based on conducting multiple software implementations, and applying both depth and breadth in several technical competencies while designing and implementing secure systems to protect APIs, streaming data pipelines, and databases, ensuring high performance and compliance with cybersecurity standards. The ideal candidate will drive innovation in secure data processing and collaborate across teams to deliver robust solutions. Responsibilities: <ul> <li>Ensures that the design and engineering approach for complex features are consistent with the larger portfolio solution.</li> <li>Define the technology tool stack for the solution within ranged of internally approved and supported technologies.</li> <li>Guides and influences team(s) on design and best practices for high code performance –e.g. pairing, code reviews.</li> <li>Provides end-to-end delivery of complex features, including automation, for either a single team or multiple teams, at the program level.</li> <li>Collaborate with cross-functional teams to gather requirements and translate them into architectural designs.</li> <li>Ensure data quality, integrity, and security across all data platforms.</li> <li>Optimize performance of existing data processes and warehouse architecture.</li> <li>Mentor and guide junior architects and engineers, promoting best practices in data architecture.</li> <li>Creates ideas on designing multi-layered technology and solution development approaches.</li> <li>Defines the technology tool stack for the solution within ranged of internally approved and supported technologies.</li> <li>Extensive experience with developing and implementing secure and resilient application-level integrations for bidirectional functionality.</li> <li>Have experience with data models, ETL processes, and data pipelines to ingest, transform, and load data efficiently.</li> <li>Extensive experience in designing &amp; implementing multi-tier (including microservices) application platforms.</li> <li>Design, implement, and secure RESTful APIs for enterprise and near real-time data processing.</li> <li>Apply API security configurations and best practices, including OAuth2, OpenID Connect, and JWT-based authentication.</li> <li>Protect APIs from vulnerabilities such as injection, broken authentication, and data leaks (OWASP API Security Top 10).</li> <li>In-Depth knowledge of relational databases (e.g., Oracle, MySQL, PostgreSQL) and NoSQL databases (e.g., MongoDB), and working knowledge of large structured &amp; unstructured dataset processing</li> <li>Secure databases through encryption (at-rest and in-transit), role-based access control (RBAC), and auditing.</li> <li>Optimize and maintain the performance and security of Postgres/MongoDB in a high-availability environment.</li> <li>Document data flows and develop procedures for data protection.</li> </ul> Required Qualifications: <ul> <li>5+ years of technical solutions experience including 3+ years in relevant enterprise data platforms.</li> <li>Expertise in Java and API-based applications, showcasing the ability to navigate complex technical landscapes.</li> <li>Experience in multiple programming disciplines including Java, Python, and Scripting Languages. </li> <li>Deep understanding Virtualize and Containerized platforms: Open shift, Kubernetes, docker, VMware.</li> <li>Understanding of varied data processing engines and strategies: Data bricks, Snowflake, Kafka</li> <li>Exceptional communication and interpersonal skills to engage effectively with stakeholders at all levels.</li> <li>Demonstrated ability to influence and collaborate with senior partners.</li> <li>Ability to work independently and lead a project team.</li> <li>BS in Computer Science, information Technology or related field desired.</li> </ul> Skills: <ul> <li>Application Development</li> <li>Solution Design</li> <li>Agile Practices</li> <li>Analytical Thinking</li> <li>Collaboration</li> <li>Data Management</li> <li>Python</li> <li>Java</li> <li>PostgreSQL</li> <li>Jira</li> <li>Jenkins</li> <li>Ansible</li> <li>Horizon CI/CD</li> </ul> This job will be open and accepting applications for a minimum of seven days from the date it was posted. Shift:1st shift (United States of America) Hours Per Week: 40

Senior Engineer - Integration Lead

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Description: Our Security Operations and Threat Response team within Bank of America’s Cyber Security Technology function works to continuously strengthen the bank’s cyber security posture through partnership and delivery of technology to support our threat hunt teams and rapid deployment in response to offensive security engagements. This team works with partners throughout the bank to both discover and develop mitigations from threats to help secure a critical infrastructure around the world that interacts with millions of customers. Role Responsibilities The position of Senior Splunk Detection Engineer is responsible for analyzing and correlating large data sets to uncover novel threats and attack techniques that may be present within the bank’s environments. A Senior Splunk Detection Engineer also will be tasked with and collaborating with data science, threat research, and cyber defense control teams to identify opportunities to develop analytical methods to detect advanced threat actors who utilize emerging tactics and techniques. In support of these processes, the role will also include developing and documenting new and innovative detection content to increase the team’s ability to find existing threats that are otherwise going unidentified or unnoticed. The role will also be expected to actively share knowledge and mentor more junior members of the Security Operations and Threat Response team. The role will work with all Cyber Defense operational and technical teams within Global Information Security (GIS) to gain insight into critical security controls and architectural specifics to develop valuable detection strategies and analytics that identify malicious behavior accurately while maintaining a low false positive rate. This role advises on and reviews product assessments, policy adjustments, and architectural transformations that impact the global Corporation, and will be a thought leader in the design of cutting-edge detective, preventative, and proactive controls. The role will need hands on technical acumen with writing efficient SPL and Macros within short timelines to support detection needs of the firm. Required Skills: <ul> <li>Minimum of 8+ years of experience in a technical role in the areas of Security Operation, Incident Response, Detection Engineering, Defensive Security/Purple Team, or Cyber Threat Intelligence.</li> <li>Direct experience performing content detection engineering and threat hunting in an active corporate environment.</li> <li>Significant experience working with Splunk Procedure Language to create and tune detections.</li> <li>Direct experience working with very large datasets and log analysis tools including but not limited to: Splunk, Python, Pandas, SQL, Hadoop, Hue.</li> <li>Ability to see the larger picture when dealing with competing requirements and needs from across the organization in order to build consensus and drive results.</li> <li>Ability to navigate and work effectively across a complex, geographically dispersed organization.</li> <li>Experience with more than one or more enterprise scale EDR, SIEM, and SOAR tools.</li> <li>Previous experience performing digital forensics or indecent response on major security incidents.</li> <li>Experience analyzing system, network, and application logging for attack techniques at all stages of the cyber kill chain.</li> <li>Experience consuming and analyzing Cyber Threat Intelligence for actionable takeaways</li> <li>Ability to apply Cyber Threat Intelligence through enrichment, correlation, and attribution</li> <li>Familiarity with offensive security strategies and assessment methodology</li> <li>Experience explaining threat hunt objectives in plain English and able to communicate associated risk.</li> <li>Demonstrated ability to self-direct, with minimal supervision to achieve assigned goals.</li> </ul> Beneficial but not required: <ul> <li>Experience with offensive security tools and integration of SIEM, SOAR, CSPM and other technical integrations within large enterprise networks.</li> <li>Knowledge of basic Data Science concepts and processes.</li> <li>Experience performing security analysis and threat hunting in Cloud environments such as Azure, M365, AWS</li> </ul> Skills: <ul> <li>Application Development</li> <li>Automation</li> <li>Influence</li> <li>Solution Design</li> <li>Technical Strategy Development</li> </ul> This job will be open and accepting applications for a minimum of seven days from the date it was posted. Shift:1st shift (United States of America) Hours Per Week: 40

Senior Splunk Detection Engineer

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. The Senior Information Security Officer will be a member of the Business Information Security Officer's (BISO) organization and work closely with the line of business Chief Information Officers (CIOs)/Chief Technology Officers (CTOs). In this role, you will be supporting the Real Time Communications and Productivity Team to develop a deep understanding of the business in order to have specialized information security risk-based discussions. This relationship will ensure a focus on the right risk priorities. You will also provide guidance on information security topics, policies and controls. Additionally, this role will support strategic and highly visible portfolio rollouts in our Productivity portfolio including M365 and enabling Artificial Intelligence capabilities on our enterprise meeting platforms. Required Skills • Has a deep understanding of M365 and related components • Information Security &amp; Technology professional with 10+ years of experience in security architecture and/or Information Security • 5+ years of risk management experience with proven ability to effectively apply risk principles to challenging business situations • Subject matter expertise in cloud security, virtualization, application architecture, design patterns, vulnerability testing and development of risk appetite • Experience evaluating cyber security controls and providing guidance for platform or distributed computing platforms, including (Cloud/SaaS/IaaS/PaaS) • Exceptional executive presentation and communication skills • Excellent influencing and problem resolution skills • Ability to be comfortable delivering messages across a wide spectrum of individuals having varying degrees of technical understanding • Strong leadership skills and qualities which enable you to work with peers and various levels of management Desired Skills: • Experience working on cloud implementations in Microsoft Azure, Amazon Web Services and Google Cloud Platform environments • Bachelors and/or Master’s degree in Computer Science, Information Technology or related field Scale/Scope • Possess strong / experienced cybersecurity architecture and/or application security background; with solid knowledge of Financial Service requirements for regulated users • Serves as an Information Security subject matter expert and participates in the development, implementation and maintenance of information security for the line of business (LOB) • Provides guidance and advocacy regarding the prioritization of LOB investments that impact information security • Advises LOB management on risk issues related to information security and recommends actions in support of the bank's wider risk management and compliance programs • Consults on M365 Security Baselines • Exchange online, Sharepoint online, Teams and more • Consults on Mobile security strategy, design, implementation and migration for LOB projects • For key initiatives – Assess security opportunities and challenges and partner to determine best future state • Influence and drive collaboration across teams for key initiatives, bringing in key stakeholders • Serve as subject matter expert in BISO process and participate in training for new employees • Monitors information security trends internal and external to the bank and keeps LOB leadership informed about information security-related issues • Serve as the backup for teammate responsible for supporting our End User Platforms – another high profile &amp; visible portfolio • For key initiatives – Assess security opportunities and challenges and partner to determine best future state • Ensures user experience is top of mind and never sacrifices security • Ensures compliance with policies and laws This job will be open and accepting applications for a minimum of seven days from the date it was posted. Shift:1st shift (United States of America) Hours Per Week: 40

Sr. Business Information Security Officer - Employee Experience Technology

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being. Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization. Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us! Job Description: Manual Ethical Hacking is part of the Application Development Security Framework Program within Bank of America’s Cyber Security Assurance Offensive Security group. The program provides services to assess the security resilience of the bank’s applications to malicious hacking activity. This senior technical role is responsible performing and leading ethical hacking assessments of the bank's technologies, applications, and cyber security controls while adapting testing methods to evolving and emerging threats. Key responsibilities include leading and performing research, understanding the bank's security policies, working with appropriate partners to complete assessments and simulations, identifying misconfigurations and vulnerabilities, and reporting on associated risk. These individuals partner closely with security partners, CIO clients and multiples lines of business. These individuals are expected to perform application security-oriented dynamic and static assessments across a multitude of technologies including web UI, web APIs, mobile and cloud, including associated source code. Key Responsibilities in order of importance: <ul> <li>Perform assigned analysis of internal and external threats on information systems and predict future threat behavior.</li> <li>Incorporate threat actors' tactics, techniques, and procedures into offensive security testing to identify high-value vulnerabilities/chained attacks.</li> <li>Developing Proof-of-concepts for exploitation.</li> <li>Perform assessments of the security, effectiveness, and practicality of multiple technology systems.</li> <li>Leverage innovative thinking to help solve problems or introduce new ideas to processes or products applicable to offensive security.</li> <li>Prepare and present detailed technical information for various media including documents, reports, and notifications.</li> <li>Provide clear and practical advice regarding managing risks.</li> <li>Learn and develop advanced technical and leadership skills, mentor Junior and Intermediate assessors in technical tradecraft and soft skills.</li> <li>Respond to security incidents and provide technical assistance to leadership across the Information Security organization.</li> </ul> Required Skills: <ul> <li>Minimum of 5+ years of professional pentesting, application security or ethical hacking experience, preferably in a large, complex, enterprise environment</li> <li>Detailed technical knowledge in at least 5 of the following areas:<ul> <li>security engineering</li> <li>application architecture</li> <li>authentication and security protocols</li> <li>application session management</li> <li>applied cryptography</li> <li>common communication protocols</li> <li>mobile frameworks</li> <li>single sign-on technologies</li> <li>exploit automation platforms</li> <li>Web APIs</li> <li>Cloud environments</li> <li>LLM security</li> </ul> </li> <li>Able to manually identify and reproduce findings, discuss remediation concepts, develop PoCs for vulnerabilities, use scripting/coding techniques, proficiently execute common penetration testing tools, triage, and support incidents, and produce high value findings</li> <li>Experience performing manual web application assessments i.e., must be able to simulate a OWASP Top 10 vulnerabilities without the use of tools</li> <li>Experience performing manual code reviews for security relevant issues</li> <li>Experience working with DAST and SAST tools to identify vulnerabilities</li> <li>Knowledge of network and Web related protocols/technologies (e.g., UNIX/LINUX, TCP/IP, Cookies)</li> <li>Experience with vulnerability assessment tools and penetration testing techniques.</li> <li>Solid programming/debugging skills, development frameworks, CVE and CWE research/reproduction</li> <li>Threat Analysis, threat modelling and SBOM analysis</li> <li>Innovative thinking, threat actor simulation</li> <li>Technology Systems Assessment</li> <li>Technical Documentation</li> <li>Advisory</li> </ul> Desired: <ul> <li>CEH, OSCP/OSCE/OSWE/GXPN/GPEN/GWAPT/GMOB/All Practitioner Certs [Port Swigger BSP Academy]/Cloud Cert(s)/ eWPT; eWPTX; eMAPT [INE Pentester Academy] </li> <li>Strong programming/scripting skills</li> </ul> This job will be open and accepting applications for a minimum of seven days from the date it was posted. Shift:1st shift (United States of America) Hours Per Week: 40

Senior Manual Ethical Hacker

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being. Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization. Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us! Job Description: Senior Adaptive Threat Replication Engineer (AKA Red Team, Penetration Testing, Advanced Vulnerability Assessments Engineer) Are you passionate about cyber security and looking to work with some of the best information security professionals in the world and in challenging environments? Bank of America is hiring top talent to join our team. You bring your talent and passion and we’ll provide you with an opportunity to shine and grow. The Cyber Security Assurance Division is looking for a Senior Adaptive Threat Replication Engineer to join a team of world-class offensive security professionals. In this role you will diligently hunt for hi-risk vulnerabilities across the bank’s global technology environment. Understanding security policy and compliance is important but in this role your focus is to identify exploitable vulnerabilities; ones that can bring about that “nightmare scenario.” This is a highly technical role that requires broad technical knowledge and a deep understanding of threats and threat TTPs. You will lead and participate in advanced technical assessments that leverage red team, penetration testing, and vulnerability assessment tools and techniques to identify hi-risk vulnerabilities across a variety of technologies. You will coordinate with senior leadership on development projects, share your knowledge and experience by mentoring junior engineers, and assist the monitoring and response functions so those functions can practice and improve their capability to respond and recover against a realistic threat actor. Required Skills: <ul> <li>5+ years of professional offensive security experience</li> <li>Must be able to critically examine an organization and system through the perspective of a threat actor and articulate risk in clear, precise terms to technical and non-technical audience.</li> <li>Must be very proficient with the common tools associated with red teaming, penetration testing, and vulnerability assessments (Metasploit, Burp Suite, Cobalt Strike, Kali, etc.).</li> <li>Must have a solid understanding of voice and data networks, major operating systems, active directory, their associated peripherals, and strong desire to learn new technologies and skill sets.</li> <li> Must demonstrate knowledge of tactics, techniques, and procedures associated with malicious insider activity, organized crime/fraud groups, and both state and non-state sponsored threat actors. Knowledge of MITRE ATT@CK framework.</li> <li>Ability to effectively code in a scripting language (Python, Perl, etc.)</li> <li>Advisory</li> <li>Innovative Thinking</li> <li>Technical Documentation</li> <li>Technology System Assessment</li> <li>Threat Analysis</li> </ul> Desirable Skills: <ul> <li>Certifications: OSCP, GPEN, GXPN, OSCE, GWAPT,</li> <li>Ability to work remotely if/when necessary,</li> <li>Previous experience working in the financial industry,</li> <li>Typically has 5-10 years of experience in technology and offensive security assessments</li> </ul> This senior technical role is responsible for leading and performing assessments of the bank's technologies, applications, and cyber security controls while adapting testing methods to evolving and emerging threats. Key responsibilities include leading and performing research, understanding the bank's security policy, working with appropriate partners to complete assessments and simulations, identifying misconfigurations and vulnerabilities and reporting on associated risk. These individuals partner closely with security partners, CIO clients and multiples lines of business. Shift:1st shift (United States of America) Hours Per Week: 40

Senior Adaptive Threat Replication Engineer

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Description: Global Information Security (GIS) is responsible for protecting bank information systems, confidential and proprietary data, and customer information. GIS develops the bank’s Information Security strategy and policy, manages the Information Security program, identifies and addresses vulnerabilities and operates a global security operations center that monitors, detects and responds to cybersecurity incidents Role Description: We are seeking a Senior Technology Manager to lead the design, development, and deployment of a centralized, intuitive interface that enhances the efficiency of Security Operations teams. This role requires a strong leader who can blend enterprise cybersecurity expertise with user experience (UX) and user interface (UI) best practices to create a seamless, scalable, and highly effective security operations platform. As the development lead, you will drive the strategic vision for a multi environment platform that integrates security tools, telemetry, automation, and analytics into a unified experience. You will collaborate closely with SOC analysts, threat hunters, incident responders, and security engineers to ensure that the interface meets operational needs while reducing friction and improving response times. Roles &amp; Responsibilities <ul> <li>Define and execute the strategy for a unified security operations interface, aligning with enterprise security goals and operational needs.</li> <li>Lead a cross-functional team of contractors, engineers, UX designers, and cybersecurity specialists to deliver a robust, scalable platform.</li> <li>Partner with SOC, incident response, threat intelligence, and vulnerability management teams to ensure the interface enhances security operations workflows.</li> <li>Drive adoption and engagement, ensuring continuous feedback loops from end users to refine and improve functionality.</li> <li>Oversee the design and development of a user-friendly, data-driven interface that consolidates security event data, logs, threat intelligence, and automation tools.</li> <li>Ensure seamless integration with SIEM, SOAR, TIP, EDR, cloud security tools, and other enterprise security platforms.</li> <li>Optimize the UI/UX to reduce analyst fatigue and improve situational awareness, alert triage, and incident response efficiency.</li> <li>Establish performance metrics, usability testing, and iterative improvement cycles to continuously refine the platform.</li> <li>Leverage AI/ML-driven analytics and automation to enhance decision-making and reduce manual workloads for security teams.</li> </ul> Role Requirements <ul> <li>10+ years of experience in cybersecurity, software engineering, or security operations, with 5+ years in a leadership role.</li> <li>Deep knowledge of enterprise security operations tools (SIEM, SOAR, EDR, threat intelligence, log management, etc.).</li> <li>Strong UI/UX design principles, with experience building security dashboards, workflows, and automation tools.</li> <li>Hands-on experience with cloud security architectures (AWS, Azure, GCP) and DevSecOps methodologies.</li> <li>Experience with data visualization, security analytics, and AI-driven decision support.</li> <li>Strong understanding of SOC workflows, incident response, and security automation best practices.</li> <li>Experience managing vendor integrations, open-source tooling, and API-based security solutions</li> </ul> Managerial Responsibilities: This position may also have responsibilities for managing associates. At Bank of America, all managers at this level demonstrate the following responsibilities, in addition to those specific to the role, listed above. <ul> <li>Diversity &amp; Inclusion Champion: Models an inclusive environment for employees and clients, aligned to company D&amp;I goals.</li> <li>Manager of Process &amp; Data: Demonstrates deep process knowledge, operational excellence and innovation through a focus on simplicity, data based decision making and continuous improvement.</li> <li>Enterprise Advocate &amp; Communicator: Communicates enterprise decisions, purpose, and results, and connects to team strategy, priorities and contributions.</li> <li>Risk Manager: Ensures proper risk discipline, controls and culture are in place to identify, escalate and debate issues.</li> <li>People Manager &amp; Coach: Provides inspection, coaching and feedback to motivate, differentiate and improve performance.</li> <li>Financial Steward: Actively manages expenses and budgets in alignment with objectives, making sound financial decisions.</li> <li>Enterprise Talent Leader: Assesses talent and builds bench strength for roles across the organization.</li> <li>Driver of Business Outcomes: Delivers results by effectively prioritizing, inspecting and appropriately delegating team work.</li> </ul> Skills: <ul> <li>Proven ability to drive cross-functional collaboration across security, IT, and engineering teams.</li> <li>Strong interpersonal skills; ability to make effective presentations and communicate technical concepts to non-technical parties</li> <li>Exhibits executive leaderships behaviors when addressing organizational conflict and removing roadblocks to effective delivery</li> <li>Strong relationship management skills to navigate the complexities of gaining buy-in and building consensus</li> <li>Excellent communication, influencing and facilitation skills with deep intellectual curiosity and innovative thinker</li> <li>Demonstrate neutral objectivity and seek the best outcome for the business. Enterprise mindset; considers E2E process impact when evaluating opportunities/challenges</li> <li>Influence</li> <li>Risk Management</li> <li>Solution Design</li> <li>Stakeholder Management</li> <li>Technical Strategy Development</li> </ul> Shift:1st shift (United States of America) Hours Per Week: 40

Senior Technology Manager - Security Operations Platform

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Description: This job is responsible for engaging clients in the lobby to educate and assist with conducting transactions through self-service resources, such as mobile banking, online banking, or ATM. Key responsibilities include accurately and efficiently processing cash transactions for clients as needed. Job expectations include having deep conversations with clients to gain in-depth knowledge of the financial and life priorities and connecting clients to solutions that meet the financial goals. Required Qualifications: <ul> <li>Is an enthusiastic, highly motivated self-starter with a strong work ethic and intense focus on results, acting in the best interest of the client</li> <li>Collaborates effectively to get things done, building and nurturing strong relationships</li> <li>Displays passion, commitment and drive to deliver an experience that improves our clients' financial lives</li> <li>Is confident in identifying solutions for new and existing clients based on their needs</li> <li>Communicates effectively and confidently and is comfortable engaging all clients</li> <li>Has the ability to learn and adapt to new information and technology platforms</li> <li>Is confident in educating clients on how to conduct simple banking transactions through self-service technologies (for example, ATM, online banking, mobile banking)</li> <li>Applies strong critical thinking and problem-solving skills to meet clients' needs</li> <li>Will follow established processes and guidelines in daily activities to do what is right for clients and the bank, adhering to all applicable laws and regulations</li> <li>Efficiently manages time and capacity</li> <li>Focuses on results while acting in the best interest of the client</li> <li>Can be flexible to work weekends and/or extended hours as needed</li> </ul> Desired Qualifications: <ul> <li>Experience in financial services and knowledge of financial services industry, products and solutions</li> <li>One year of demonstrated successful sales experience in a salary plus incentive environment with individual sales goals</li> <li>Six months of cash handling experience</li> <li>Bachelor's Degree or business-relevant Associate’s Degree such as business management, business administration or finance​</li> </ul> Skills: <ul> <li>Adaptability</li> <li>Business Acumen</li> <li>Customer and Client Focus</li> <li>Oral Communications</li> <li>Problem Solving</li> <li>Account Management</li> <li>Client Experience Branding</li> <li>Client Management</li> <li>Client Solutions Advisory</li> <li>Relationship Building</li> <li>Business Development</li> <li>Pipeline Management</li> <li>Prospecting</li> <li>Referral Identification</li> <li>Referral Management</li> </ul> Minimum Education Requirement: High School Diploma / GED / Secondary School or equivalent This job will be open and accepting applications for a minimum of seven days from the date it was posted. Shift:1st shift (United States of America) Hours Per Week: 40

47 Jobs in Colorado