field_remote_option

job_industry

field_job_occupational_field_parents_all

job_organization_name

job_upgrade_is_featured

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Summary: Global Information Security (GIS) is responsible for protecting bank information systems, confidential and proprietary data, and customer information. GIS develops the bank’s Information Security strategy and policy, manages the Information Security program, identifies and addresses vulnerabilities and operates a global security operations center that monitors, detects and responds to cybersecurity incidents. Within GIS, Identity and Access Management (IAM) is a security discipline that enables the right individuals to access the right resources at the right times and in the right context. IAM addresses the mission-critical need to ensure appropriate access to the resources across increasingly heterogeneous technology environments, and to meet increasingly rigorous compliance requirements. What you can expect in Identity &amp; Access Management: In today’s highly connected world, managing and securing the identity of users is essential to the safety and success of our workforce. The Identity &amp; Access Management (IAM) team works within Global Information Services (GIS) and in close participation with all other LOB teams as well as second and third line of defense partners. This role is highly visible and requires frequent interaction with senior management and key stakeholders. Are you passionate about the latest IT technologies and thrive in a fast-paced international environment? In a typical day, you may work with other team members on the book of work, operational concerns, or risk items. You will help overcome obstacles and maintain good relationships with key stakeholders across the bank to ensure timely and effective delivery. We offer you the opportunity to collaborate with passionate competent people, experts in their field. We thrive on being challenged and everything we do is anchored in managing risk for the bank. The Identity &amp; Access Management (IAM) Info Security Controls Specialist will analyze, strengthen, and secure the company's IAM systems and overall risk posture for Access Certifications and Governance. This role focuses on collaboration across all Lines of Business, CIO teams, to continuously improve the organization's access certification program. The Control Specialist will analyze controls to identify and document inefficiencies, and design/prioritize improvement opportunities to enable swift adherence. The role also will actively apply knowledge of laws, rules, regulations, and information security concepts (e.g., NIST, COBIT, ISO) to establish and maintain policies, validate alignment of processes and controls to requirements, report on adherence to policy requirements and maintain governance programs related to access certifications and revocation services. Job expectations include using data analytics, governance process management, and partnering with internal teams to verify policy compliance, identify gaps in coverage, and support remediation activities. Responsibilities: <ul> <li>Establish and maintain strong partnership with other Global Information Security (GIS) functions, Core Technology Infrastructure (CTI), Cyber Security Technology (CST), Third Party management, Global Compliance and Operations Risk (CGOR), internal audit, and external regulatory agencies. Provide audit and regulatory responses within the specified periods.</li> <li>Perform Quality Assurance activities to support Access Certification campaigns and control metrics.</li> <li>Support and monitor access reviews for completion in specific areas. Oversee and drive governance program for access security contact, support program mailbox inquiries, updating source of record, manage ARM ticketing queue, and maintaining program SharePoint site, documentation, and training.</li> <li>Provide education and documentation on Access Certification Awareness through instructor led sessions.</li> <li>Maintain access certification documentation, audit documentation, and training materials for the access certification services team.</li> <li>Drive Quality Assurance Governance for Access Certifications and Revocations</li> <li>Maintain exceptions to IAM Standard according to governance processes.</li> <li>Ensures Information Technology systems meet enterprise standards, adhere to applicable rules, laws, and regulations, and comply with appropriate risk appetite.</li> <li>Assist with Software Development Life Cycle (SDLC) and testing of application changes that impact access reviews with signoff prior to implementation.</li> <li>Building and maintaining ‘Break Glass’ processes enabling reusability and consistency of obtaining access certification data.</li> </ul> Required Qualifications: <ul> <li>5+ years relevant hands-on experience in identity and access certification related fields in a large and complex organization.</li> <li>3-5 years’ experience implementing IAM Cloud solutions, controls, and capabilities.</li> <li>Proficient in articulating facts and data-driven plans and ability to partner with stakeholders to implement intended solutions to drive risk reductions and adherence to relevant Access Certification requirements within IAM standards.</li> <li>Strong attention to detail, advanced analytical skills, and quality assurance experience.</li> <li>Excellent communication and presentation skills.</li> <li>Excellent organizational skills and be able to effectively prioritize multiple tasks.</li> <li>Proficient in data management which includes strong data analytical capabilities with advanced understanding of the collection and management of metadata.</li> <li>Experience with Tableau and SQL.</li> <li>Previous experience with access review tools like SailPoint, AZURE AD, ForgeRock Identity Platform, Oracle Access Management, and Cloud would be a plus.</li> </ul> This job will be open and accepting applications for a minimum of seven days from the date it was posted Shift:1st shift (United States of America) Hours Per Week: 40

Bank of America

Identity & Access Management (IAM) Access Certification Services Specialist

Job Description: Merrill Wealth Management is a leading provider of comprehensive wealth management and investment products and services for individuals, companies, and institutions. Merrill Wealth Management is one of the largest businesses of its kind in the world specializing in goals-based wealth management, including planning for retirement, education, legacy, and other life goals through investment advice and guidance. Merrill’s Financial Advisors and Wealth Management Client Associates help clients pursue the life they envision through a personal relationship with their advisory team committed to their needs. We believe trust comes from transparency. Our trusted advisory teams are equipped with access to the investment insights of Merrill coupled with the banking convenience of Bank of America. Merrill is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Merrill, we empower you to bring your whole self to work. We value diversity in our thoughts, business, and within our employees and clients. Our Wealth Management team represents an array of different backgrounds and bring their unique perspectives, ideas and experiences, helping to create a work community that is culture driven, resilient, results focused and effective Job Description: This job is responsible for performing specialized functions across a Financial Advisors (FAs) team, such as defining an FA's or FA team's overall investment management philosophy through portfolio analysis and performing business management and business development activities. Key responsibilities include providing operational support and quality client service through offering a full range of investment products and services across the enterprise. Job expectations include leveraging specialists and financial planning tools to deliver holistic investment solutions. This position is subject to SAFE Act registration requirements. Pursuant to the SAFE Act requirements, all employees engaged in residential loan mortgage originations must register with the federal registry system and remain in good standing. Since this position requires SAFE Act registration, employees are required to register and to submit to the required SAFE Act background check and registration process. Failure to maintain SAFE Act registration may result in disciplinary action up to and including termination. Responsibilities: <ul> <li>Maintains an understanding of the Chief Investment Office (CIO) philosophy, proprietary planning, and investment management tools</li> <li>Monitors, analyzes, and reviews the current market environment and research portfolio recommendations</li> <li>Monitors and manages client portfolios to align with client goals, objectives, risk tolerance, and time horizons</li> <li>Reviews and manages team proprietary models to align with current market assumptions by participating in CIO and manager updates and reviewing reports and allocation updates</li> <li>Creates analytical reports for Financial Advisors to review client investment portfolio performances against market returns</li> <li>Assesses and shares pricing findings with clients to ensure understanding of the value of advice and accompanying solutions</li> </ul> Required Qualifications: <ul> <li>Series 7, 63/65 or 66 or equivalent; must maintain all state registrations held by the Financial Advisor(s) and Advisor Team(s) they support</li> <li>SAFE Act Registration; ADV-2B Required</li> <li>Maintain at least one firm approved designation</li> <li>Possess and demonstrate strong communication skills</li> <li>Thorough knowledge and understanding of the suite of Wealth Management products and services</li> <li>Strong analytical and portfolio management skills with the ability to identify trends and implement investment strategies to increase growth and mitigate risk</li> <li>Ability to make sound decisions by having a deep understanding of investment management best practices and policies/procedures</li> <li>Ability to identify client needs and concerns and articulate appropriate approach to align solutions to goals in a suitable and controlled way​</li> </ul> Skills: <ul> <li>Causation Analysis</li> <li>Financial Management</li> <li>Investment Management</li> <li>Trading Strategy</li> <li>Trading and Investment Analysis</li> <li>Portfolio Analysis</li> <li>Portfolio Management</li> <li>Price Verification and Valuation</li> <li>Trade Monitoring</li> <li>Trading</li> <li>Client Investments Management</li> <li>Client Solutions Advisory</li> <li>Financial Analysis</li> <li>Financial Forecasting and Modeling</li> <li>Wealth Planning</li> </ul> Minimum Education Requirement: High School Diploma / GED / Secondary School or equivalent This job will be open and accepting applications for a minimum of seven days from the date it was posted. Shift:1st shift (United States of America) Hours Per Week: 40

Investment Management Specialist (FP)

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Position Summary Bank of America is looking for an experienced ServiceNow business analyst to help implement ServiceNow’s SecOps modules in a new, “greenfield” ServiceNow instance. This job is responsible for capturing and refining business needs into actionable requirements for ServiceNow developers. Job expectations include working closely with key stakeholders to ensure business outcomes are delivered, assisting with troubleshooting, creating documentation, and assisting with user training. Key Responsibilities: <ul> <li>Responsible for capturing and refining business and system requirements for the ServiceNow SecOps modules.</li> <li>Works with stakeholders to understand their needs, analyze problems, and capture their requirements, and then working closely with the Development Team to refine the requirement into specifications that can be executed by the team.</li> <li>Possess a working knowledge of Cybersecurity best practices, vulnerability management lifecycle, and ServiceNow configuration.</li> <li>Leverages experience and understanding of stakeholder needs to help create a solution, envisions the solution to solve a problem (manual or through software).</li> <li>Performs Cost/Benefit Analysis to align the technology to business strategy. Gathers &amp; catalogs functional, non-functional, and technical requirements for stakeholder requests.</li> <li>Determines the impact of modifications and enhancements on the ServiceNow SecOps modules and platform.</li> <li>Acts as the ServiceNow SecOps subject matter expert to support scope and requirement decisions.</li> <li>Ensures changes to the application are compliant with bank standards and policies.</li> <li>Assists users and development team with application testing and troubleshooting. May help configure test solutions to validate functional and system needs.</li> <li>Identify, document, and troubleshoot application related problems.</li> <li>Documents process, procedures, and workflows associated with the relevant ServiceNow modules and external applications.</li> <li>Leads or participates in continuous improvement efforts; Building expertise in creating, analyzing, and improving processes.</li> <li>Ability to create, maintain, and present training materials for end-users.</li> </ul> Qualifications: <ul> <li>1+ years of experience translating business needs into requirements for a ServiceNow implementation or major enhancement project.</li> <li>Hands-on experience with ServiceNow, including familiarity with at least 1 module.</li> <li>Prior experience in an IT or Cybersecurity role.</li> <li>Strong interpersonal and written/verbal communication skills, with the ability to present complex ideas clearly and effectively.</li> <li>Familiarity with Agile development practices.</li> </ul> Desired Certifications: <ul><li>ServiceNow Certified Systems Administrator (CSA) certification</li></ul> Enterprise Role Overview: Responsible for capturing and refining business and/or system requirements (based on specialization). Works with stakeholders to understand their needs, analyze problems, and capture their requirements, and then working closely with the Development Team to refine the requirement into specifications that can be executed by the team. Possess a working knowledge of the business and/or technical domain based on their specialization. Leverages experience and understanding of stakeholder needs to help create a solution, envisions the solution to solve a problem (manual or through software). Performs Cost/Benefit Analysis to align the technology to business strategy. Gathers &amp; catalogs functional, non-functional, and technical requirements for stakeholder requests. Determines the impact of modifications and enhancements on the application. Acts as the product(s) subject matter expert to support scope and requirement decisions. Ensures changes to the application are compliant with bank standards and policies. Assists users and development team with application testing and troubleshooting, and may help configure test solutions to validate functional and system needs. Identifies, document and troubleshoot application related problems. Documents process, procedures and workflows associated with applications. Leads or participate in continuous improvement efforts; Building expertise in creating, analyzing, and improving processes. Creates, maintains and presents training materials for end-users. Individual contributor. Shift:1st shift (United States of America) Hours Per Week: 40

ServiceNow Business Analyst

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Job Description: Our Cyber Threat Hunting, Intelligence &amp; Defense team within Bank of America’s Cyber Security Defense function works to continuously strengthen the bank’s cyber security posture through research, intelligence, threat simulations, threat hunting, and offensive security engagements. This team works with partners throughout public and private sectors to both discover threats to help secure critical infrastructure around the world that interacts with millions of customers. Role Responsibilities: The position of Cyber Threat Intelligence Technical Analyst is responsible for collecting, analyzing, and actioning cyber threat intelligence to defend the Bank. The Cyber Threat Intelligence Technical Analyst also will be tasked with and collaborating with defensive control owners, threat research, and incident response to track and defend against emerging threat tactics, techniques, and procedures. The Cyber Threat Intelligence Technical Analyst requires strategic thinking with a strong background in cyber security, threat intelligence, and leadership. The role will work with all Cyber Defense operational and technical teams within Global Information Security (GIS) to gain insight into critical security controls and architectural specifics to develop adequately track, analyze, and defend against cyber threat actors. This role will be a thought leader in the design of cutting-edge detective, preventative, and proactive controls. Required Skills: • 5+ years of experience in Cyber Threat Intelligence • Experience collecting, analyzing, and actioning Threat Intelligence • Must demonstrate extensive knowledge of tactics, techniques, and procedures associated with malicious insider activity, organized crime/fraud groups, and both state and non-state sponsored threat actors • Ability to apply Cyber Threat Intelligence through enrichment, correlation, and attribution • Ability to provide expert guidance on threat trends, analysis methods, and defensive strategies to senior management and key stakeholders • Strong experience with offensive security tactics, techniques, and procedures (DDoS, Malware, Phishing, Vulnerabilities, etc.) • Strong technical experience performing OSINT investigations • Must demonstrate knowledge of tactics, techniques, and procedures associated with malicious insider activity, organized crime/fraud groups, and both state and non-state sponsored threat actors • Technical experience with Threat Intelligence tools such as Passive DNS, Network Flow Analysis, Maltego, Virus Total, URLScan, etc. • Ability to analyze threats and distill common Indicators of Attack and Indicators of Compromise • Technical experience with defensive tools for actioning threat intelligence including tools like SIEM/Splunk, EDR, Big Data Platforms, etc. • Deep experience working with industry-wide frameworks and standards like MITRE ATT&amp;CK • Ability to navigate and work effectively across a complex, geographically dispersed organization • Experience with threat intelligence vendors and platforms • Previous experience performing threat intelligence and incident response on major security incidents This job will be open and accepting applications for a minimum of seven days from the date it was posted. Shift:1st shift (United States of America) Hours Per Week: 40

Cyber Threat Intelligence Technical Analyst

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Description: Manual Ethical Hacking is part of the Application Development Security Framework Program within Bank of America’s Cyber Security Assurance Offensive Security group. The program provides services to assess the vulnerability of the bank’s applications to malicious hacking activity. This technical role is responsible for performing application security assessments of the bank's technologies, applications, and cyber security controls while adapting testing methods to evolving and emerging threats. Key responsibilities include performing research, understanding the bank’s security policies, working with the appropriate partners to complete assessments and simulations, identifying misconfigurations and vulnerabilities, and reporting on associated risk. These individuals partner closely with security partners, CIO clients and multiples lines of business. Key Responsibilities in order of importance: <ul> <li>Perform assigned analysis of internal and external threats on information systems and predict future threat behavior</li> <li>Incorporate threat actors' tactics, techniques, and procedures into offensive security testing</li> <li>Perform assessments of the security, effectiveness, and practicality of multiple technology systems</li> <li>Leverage innovative thinking to help solve problems or introduce new ideas to processes or products applicable to offensive security.</li> <li>Prepare and present detailed technical information for various media including documents, reports, and notifications</li> <li>Provide clear and practical advice regarding managed risks</li> </ul> Required Skills: <ul><li> Minimum of 4 years of professional experience in Information Technology or preferably Information Security/Cybersecurity</li></ul> <ul><li>Hands on experience with pentesting, application security or ethical hacking experience, preferably with a completed certification, e.g.: CISSP, CEH, OSCP, OSWE, GPEN, PenTest+ or similar</li></ul> <ul> <li>Technical knowledge in at least 3 of the following areas: security engineering; application architecture; authentication and security protocols; application session management; applied cryptography; common communication protocols; mobile frameworks; single sign-on technologies; exploit automation platforms; RESTful web services</li> <li>Experience working with SAST tools to identify vulnerabilities</li> <li>Able to manually identify and reproduce findings, discuss remediation concepts, develop PoCs for vulnerabilities, use scripting/coding techniques, proficiently execute common penetration testing tools, triage, and support incidents, and produce high value findings</li> <li>Experience performing manual web application assessments i.e., must be able to simulate a SQL injection/XSS attack without the use of tools</li> <li>Knowledge of network and Web related protocols/technologies (e.g., UNIX/LINUX, TCP/IP, Cookies)</li> <li>Experience with vulnerability assessment tools and penetration testing techniques</li> <li>Solid programming/debugging skills</li> <li>Experience of using a variety of tools, included, but not limited to, IBM AppScan, Burp and SQL Map</li> <li>Threat Analysis</li> <li>Innovative Thinking</li> <li>Technology Systems Assessment</li> <li>Technical Documentation</li> <li>Advisory</li> </ul> Shift:1st shift (United States of America) Hours Per Week: 40

Manual Ethical Hacker

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being. Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization. Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us! Job Description: Senior Adaptive Threat Replication Engineer (AKA Red Team, Penetration Testing, Advanced Vulnerability Assessments Engineer) Are you passionate about cyber security and looking to work with some of the best information security professionals in the world and in challenging environments? Bank of America is hiring top talent to join our team. You bring your talent and passion and we’ll provide you with an opportunity to shine and grow. The Cyber Security Assurance Division is looking for a Senior Adaptive Threat Replication Engineer to join a team of world-class offensive security professionals. In this role you will diligently hunt for hi-risk vulnerabilities across the bank’s global technology environment. Understanding security policy and compliance is important but in this role your focus is to identify exploitable vulnerabilities; ones that can bring about that “nightmare scenario.” This is a highly technical role that requires broad technical knowledge and a deep understanding of threats and threat TTPs. You will lead and participate in advanced technical assessments that leverage red team, penetration testing, and vulnerability assessment tools and techniques to identify hi-risk vulnerabilities across a variety of technologies. You will coordinate with senior leadership on development projects, share your knowledge and experience by mentoring junior engineers, and assist the monitoring and response functions so those functions can practice and improve their capability to respond and recover against a realistic threat actor. Required Skills: <ul> <li>5+ years of professional offensive security experience</li> <li>Must be able to critically examine an organization and system through the perspective of a threat actor and articulate risk in clear, precise terms to technical and non-technical audience.</li> <li>Must be very proficient with the common tools associated with red teaming, penetration testing, and vulnerability assessments (Metasploit, Burp Suite, Cobalt Strike, Kali, etc.).</li> <li>Must have a solid understanding of voice and data networks, major operating systems, active directory, their associated peripherals, and strong desire to learn new technologies and skill sets.</li> <li> Must demonstrate knowledge of tactics, techniques, and procedures associated with malicious insider activity, organized crime/fraud groups, and both state and non-state sponsored threat actors. Knowledge of MITRE ATT@CK framework.</li> <li>Ability to effectively code in a scripting language (Python, Perl, etc.)</li> <li>Advisory</li> <li>Innovative Thinking</li> <li>Technical Documentation</li> <li>Technology System Assessment</li> <li>Threat Analysis</li> </ul> Desirable Skills: <ul> <li>Certifications: OSCP, GPEN, GXPN, OSCE, GWAPT,</li> <li>Ability to work remotely if/when necessary,</li> <li>Previous experience working in the financial industry,</li> <li>Typically has 5-10 years of experience in technology and offensive security assessments</li> </ul> This senior technical role is responsible for leading and performing assessments of the bank's technologies, applications, and cyber security controls while adapting testing methods to evolving and emerging threats. Key responsibilities include leading and performing research, understanding the bank's security policy, working with appropriate partners to complete assessments and simulations, identifying misconfigurations and vulnerabilities and reporting on associated risk. These individuals partner closely with security partners, CIO clients and multiples lines of business. Shift:1st shift (United States of America) Hours Per Week: 40

Senior Adaptive Threat Replication Engineer

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Description: Global Information Security (GIS) is responsible for protecting bank information systems, confidential and proprietary data, and customer information. GIS develops the bank’s Information Security strategy and policy, manages the Information Security program, identifies and addresses vulnerabilities and operates a global security operations center that monitors, detects and responds to cybersecurity incidents Role Description: We are seeking a Senior Technology Manager to lead the design, development, and deployment of a centralized, intuitive interface that enhances the efficiency of Security Operations teams. This role requires a strong leader who can blend enterprise cybersecurity expertise with user experience (UX) and user interface (UI) best practices to create a seamless, scalable, and highly effective security operations platform. As the development lead, you will drive the strategic vision for a multi environment platform that integrates security tools, telemetry, automation, and analytics into a unified experience. You will collaborate closely with SOC analysts, threat hunters, incident responders, and security engineers to ensure that the interface meets operational needs while reducing friction and improving response times. Roles &amp; Responsibilities <ul> <li>Define and execute the strategy for a unified security operations interface, aligning with enterprise security goals and operational needs.</li> <li>Lead a cross-functional team of contractors, engineers, UX designers, and cybersecurity specialists to deliver a robust, scalable platform.</li> <li>Partner with SOC, incident response, threat intelligence, and vulnerability management teams to ensure the interface enhances security operations workflows.</li> <li>Drive adoption and engagement, ensuring continuous feedback loops from end users to refine and improve functionality.</li> <li>Oversee the design and development of a user-friendly, data-driven interface that consolidates security event data, logs, threat intelligence, and automation tools.</li> <li>Ensure seamless integration with SIEM, SOAR, TIP, EDR, cloud security tools, and other enterprise security platforms.</li> <li>Optimize the UI/UX to reduce analyst fatigue and improve situational awareness, alert triage, and incident response efficiency.</li> <li>Establish performance metrics, usability testing, and iterative improvement cycles to continuously refine the platform.</li> <li>Leverage AI/ML-driven analytics and automation to enhance decision-making and reduce manual workloads for security teams.</li> </ul> Role Requirements <ul> <li>10+ years of experience in cybersecurity, software engineering, or security operations, with 5+ years in a leadership role.</li> <li>Deep knowledge of enterprise security operations tools (SIEM, SOAR, EDR, threat intelligence, log management, etc.).</li> <li>Strong UI/UX design principles, with experience building security dashboards, workflows, and automation tools.</li> <li>Hands-on experience with cloud security architectures (AWS, Azure, GCP) and DevSecOps methodologies.</li> <li>Experience with data visualization, security analytics, and AI-driven decision support.</li> <li>Strong understanding of SOC workflows, incident response, and security automation best practices.</li> <li>Experience managing vendor integrations, open-source tooling, and API-based security solutions</li> </ul> Managerial Responsibilities: This position may also have responsibilities for managing associates. At Bank of America, all managers at this level demonstrate the following responsibilities, in addition to those specific to the role, listed above. <ul> <li>Diversity &amp; Inclusion Champion: Models an inclusive environment for employees and clients, aligned to company D&amp;I goals.</li> <li>Manager of Process &amp; Data: Demonstrates deep process knowledge, operational excellence and innovation through a focus on simplicity, data based decision making and continuous improvement.</li> <li>Enterprise Advocate &amp; Communicator: Communicates enterprise decisions, purpose, and results, and connects to team strategy, priorities and contributions.</li> <li>Risk Manager: Ensures proper risk discipline, controls and culture are in place to identify, escalate and debate issues.</li> <li>People Manager &amp; Coach: Provides inspection, coaching and feedback to motivate, differentiate and improve performance.</li> <li>Financial Steward: Actively manages expenses and budgets in alignment with objectives, making sound financial decisions.</li> <li>Enterprise Talent Leader: Assesses talent and builds bench strength for roles across the organization.</li> <li>Driver of Business Outcomes: Delivers results by effectively prioritizing, inspecting and appropriately delegating team work.</li> </ul> Skills: <ul> <li>Proven ability to drive cross-functional collaboration across security, IT, and engineering teams.</li> <li>Strong interpersonal skills; ability to make effective presentations and communicate technical concepts to non-technical parties</li> <li>Exhibits executive leaderships behaviors when addressing organizational conflict and removing roadblocks to effective delivery</li> <li>Strong relationship management skills to navigate the complexities of gaining buy-in and building consensus</li> <li>Excellent communication, influencing and facilitation skills with deep intellectual curiosity and innovative thinker</li> <li>Demonstrate neutral objectivity and seek the best outcome for the business. Enterprise mindset; considers E2E process impact when evaluating opportunities/challenges</li> <li>Influence</li> <li>Risk Management</li> <li>Solution Design</li> <li>Stakeholder Management</li> <li>Technical Strategy Development</li> </ul> Shift:1st shift (United States of America) Hours Per Week: 40

Senior Technology Manager - Security Operations Platform

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. The Senior Information Security Officer will be a member of the Business Information Security Officer's (BISO) organization and work closely with the line of business Chief Information Officers (CIOs)/Chief Technology Officers (CTOs). In this role, you will be supporting the Real Time Communications and Productivity Team to develop a deep understanding of the business in order to have specialized information security risk-based discussions. This relationship will ensure a focus on the right risk priorities. You will also provide guidance on information security topics, policies and controls. Additionally, this role will support strategic and highly visible portfolio rollouts in our Productivity portfolio including M365 and enabling Artificial Intelligence capabilities on our enterprise meeting platforms. Required Skills • Has a deep understanding of M365 and related components • Information Security &amp; Technology professional with 10+ years of experience in security architecture and/or Information Security • 5+ years of risk management experience with proven ability to effectively apply risk principles to challenging business situations • Subject matter expertise in cloud security, virtualization, application architecture, design patterns, vulnerability testing and development of risk appetite • Experience evaluating cyber security controls and providing guidance for platform or distributed computing platforms, including (Cloud/SaaS/IaaS/PaaS) • Exceptional executive presentation and communication skills • Excellent influencing and problem resolution skills • Ability to be comfortable delivering messages across a wide spectrum of individuals having varying degrees of technical understanding • Strong leadership skills and qualities which enable you to work with peers and various levels of management Desired Skills: • Experience working on cloud implementations in Microsoft Azure, Amazon Web Services and Google Cloud Platform environments • Bachelors and/or Master’s degree in Computer Science, Information Technology or related field Scale/Scope • Possess strong / experienced cybersecurity architecture and/or application security background; with solid knowledge of Financial Service requirements for regulated users • Serves as an Information Security subject matter expert and participates in the development, implementation and maintenance of information security for the line of business (LOB) • Provides guidance and advocacy regarding the prioritization of LOB investments that impact information security • Advises LOB management on risk issues related to information security and recommends actions in support of the bank's wider risk management and compliance programs • Consults on M365 Security Baselines • Exchange online, Sharepoint online, Teams and more • Consults on Mobile security strategy, design, implementation and migration for LOB projects • For key initiatives – Assess security opportunities and challenges and partner to determine best future state • Influence and drive collaboration across teams for key initiatives, bringing in key stakeholders • Serve as subject matter expert in BISO process and participate in training for new employees • Monitors information security trends internal and external to the bank and keeps LOB leadership informed about information security-related issues • Serve as the backup for teammate responsible for supporting our End User Platforms – another high profile &amp; visible portfolio • For key initiatives – Assess security opportunities and challenges and partner to determine best future state • Ensures user experience is top of mind and never sacrifices security • Ensures compliance with policies and laws This job will be open and accepting applications for a minimum of seven days from the date it was posted. Shift:1st shift (United States of America) Hours Per Week: 40

Sr. Business Information Security Officer - Employee Experience Technology

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being. Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization. Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us! Job Description: Manual Ethical Hacking is part of the Application Development Security Framework Program within Bank of America’s Cyber Security Assurance Offensive Security group. The program provides services to assess the security resilience of the bank’s applications to malicious hacking activity. This senior technical role is responsible performing and leading ethical hacking assessments of the bank's technologies, applications, and cyber security controls while adapting testing methods to evolving and emerging threats. Key responsibilities include leading and performing research, understanding the bank's security policies, working with appropriate partners to complete assessments and simulations, identifying misconfigurations and vulnerabilities, and reporting on associated risk. These individuals partner closely with security partners, CIO clients and multiples lines of business. These individuals are expected to perform application security-oriented dynamic and static assessments across a multitude of technologies including web UI, web APIs, mobile and cloud, including associated source code. Key Responsibilities in order of importance: <ul> <li>Perform assigned analysis of internal and external threats on information systems and predict future threat behavior.</li> <li>Incorporate threat actors' tactics, techniques, and procedures into offensive security testing to identify high-value vulnerabilities/chained attacks.</li> <li>Developing Proof-of-concepts for exploitation.</li> <li>Perform assessments of the security, effectiveness, and practicality of multiple technology systems.</li> <li>Leverage innovative thinking to help solve problems or introduce new ideas to processes or products applicable to offensive security.</li> <li>Prepare and present detailed technical information for various media including documents, reports, and notifications.</li> <li>Provide clear and practical advice regarding managing risks.</li> <li>Learn and develop advanced technical and leadership skills, mentor Junior and Intermediate assessors in technical tradecraft and soft skills.</li> <li>Respond to security incidents and provide technical assistance to leadership across the Information Security organization.</li> </ul> Required Skills: <ul> <li>Minimum of 5+ years of professional pentesting, application security or ethical hacking experience, preferably in a large, complex, enterprise environment</li> <li>Detailed technical knowledge in at least 5 of the following areas:<ul> <li>security engineering</li> <li>application architecture</li> <li>authentication and security protocols</li> <li>application session management</li> <li>applied cryptography</li> <li>common communication protocols</li> <li>mobile frameworks</li> <li>single sign-on technologies</li> <li>exploit automation platforms</li> <li>Web APIs</li> <li>Cloud environments</li> <li>LLM security</li> </ul> </li> <li>Able to manually identify and reproduce findings, discuss remediation concepts, develop PoCs for vulnerabilities, use scripting/coding techniques, proficiently execute common penetration testing tools, triage, and support incidents, and produce high value findings</li> <li>Experience performing manual web application assessments i.e., must be able to simulate a OWASP Top 10 vulnerabilities without the use of tools</li> <li>Experience performing manual code reviews for security relevant issues</li> <li>Experience working with DAST and SAST tools to identify vulnerabilities</li> <li>Knowledge of network and Web related protocols/technologies (e.g., UNIX/LINUX, TCP/IP, Cookies)</li> <li>Experience with vulnerability assessment tools and penetration testing techniques.</li> <li>Solid programming/debugging skills, development frameworks, CVE and CWE research/reproduction</li> <li>Threat Analysis, threat modelling and SBOM analysis</li> <li>Innovative thinking, threat actor simulation</li> <li>Technology Systems Assessment</li> <li>Technical Documentation</li> <li>Advisory</li> </ul> Desired: <ul> <li>CEH, OSCP/OSCE/OSWE/GXPN/GPEN/GWAPT/GMOB/All Practitioner Certs [Port Swigger BSP Academy]/Cloud Cert(s)/ eWPT; eWPTX; eMAPT [INE Pentester Academy] </li> <li>Strong programming/scripting skills</li> </ul> This job will be open and accepting applications for a minimum of seven days from the date it was posted. Shift:1st shift (United States of America) Hours Per Week: 40

Senior Manual Ethical Hacker

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Description: This job is responsible for engaging clients in the lobby to educate and assist with conducting transactions through self-service resources, such as mobile banking, online banking, or ATM. Key responsibilities include accurately and efficiently processing cash transactions for clients as needed. Job expectations include having deep conversations with clients to gain in-depth knowledge of the financial and life priorities and connecting clients to solutions that meet the financial goals. Required Qualifications: <ul> <li>Is an enthusiastic, highly motivated self-starter with a strong work ethic and intense focus on results, acting in the best interest of the client</li> <li>Collaborates effectively to get things done, building and nurturing strong relationships</li> <li>Displays passion, commitment and drive to deliver an experience that improves our clients' financial lives</li> <li>Is confident in identifying solutions for new and existing clients based on their needs</li> <li>Communicates effectively and confidently and is comfortable engaging all clients</li> <li>Has the ability to learn and adapt to new information and technology platforms</li> <li>Is confident in educating clients on how to conduct simple banking transactions through self-service technologies (for example, ATM, online banking, mobile banking)</li> <li>Applies strong critical thinking and problem-solving skills to meet clients' needs</li> <li>Will follow established processes and guidelines in daily activities to do what is right for clients and the bank, adhering to all applicable laws and regulations</li> <li>Efficiently manages time and capacity</li> <li>Focuses on results while acting in the best interest of the client</li> <li>Can be flexible to work weekends and/or extended hours as needed</li> </ul> Desired Qualifications: <ul> <li>Experience in financial services and knowledge of financial services industry, products and solutions</li> <li>One year of demonstrated successful sales experience in a salary plus incentive environment with individual sales goals</li> <li>Six months of cash handling experience</li> <li>Bachelor's Degree or business-relevant Associate’s Degree such as business management, business administration or finance​</li> </ul> Skills: <ul> <li>Adaptability</li> <li>Business Acumen</li> <li>Customer and Client Focus</li> <li>Oral Communications</li> <li>Problem Solving</li> <li>Account Management</li> <li>Client Experience Branding</li> <li>Client Management</li> <li>Client Solutions Advisory</li> <li>Relationship Building</li> <li>Business Development</li> <li>Pipeline Management</li> <li>Prospecting</li> <li>Referral Identification</li> <li>Referral Management</li> </ul> Minimum Education Requirement: High School Diploma / GED / Secondary School or equivalent This job will be open and accepting applications for a minimum of seven days from the date it was posted. Shift:1st shift (United States of America) Hours Per Week: 40

47 Jobs in Colorado