Security Detection & Response II

Job Description:

Job Title:

Security Detection & Response II Corporate

Title:

Up to Vice President

Location:

Chester Company Overview:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection.  We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth.  This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact.  Join us!

Location Overview:

Find us in the city of Chester, a destination renowned for its culture, history, and beauty. Working at Bank of America Chester offers a far-reaching global career for a world-renowned organisation, whilst being ideally situated against the backdrop of the rolling North Wales hills and the banks of the serene River Dee.

Role

Description:

We are seeking an experienced and motivated Security Detection & Response Analyst (SDR II) to join the GIS Monitoring and Triage team. This role supports cybersecurity operations across threat detection, investigation, response, and continuous service improvement.

You should be an experienced security practitioner capable of operating within the end-to-end detection and response lifecycle (detect investigate respond improve), combining broad analytical capability with an engineering mindset to rapidly identify, investigate, and contain threats. The analyst will operate across multiple security domains, validating detections, investigating threats, and executing response actions with sound judgment.

This role requires cross-domain security expertise, broad analytical and engineering capabilities, and the ability to leverage automation, orchestration, and AI-driven technologies to improve detection outcomes, reduce manual effort, and continuously enhance overall security effectiveness.

Working Pattern:

This is a full-time role (40 hours per week), with standard working hours of 7:00AM to 6:00PM 4 days per week (Sunday to Wednesday or Wednesday to Saturday) to align with the nature of the support provided by the team. Flexibility may occasionally be required to support business, operational, or project deliverables.

Responsibilities:

You will operate within the end-to-end detection and response lifecycle (detect investigate respond improve), including analysing logs and telemetry from multiple sources to establish attack scope, impact, and root cause

You will build, validate, tune, and optimize detection logic and coverage, leveraging attacker tactics, techniques, and procedures (TTPs) and frameworks such as MITRE ATT&CK to improve accuracy and reduce false positives

Execute and coordinate security event response activities, including containment, isolation, escalation, and remediation, applying sound judgment during active engagements

You will maintain and improve automation and orchestration capabilities, including SOAR workflows, automated playbooks, scripted response actions, and AI-driven enhancements to reduce manual effort and improve detection and response outcomes. Accountable for measurable improvements in MTTR, detection quality, and signal-to-noise ratio

You will document and communicate security event findings, including timelines and lessons learned, while providing clear updates to stakeholders and driving continuous improvement in detection and response processes

Identify gaps in monitoring…