Vulnerability Identification Analyst

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development.

Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Analyzes, improves, implements, and executes security controls proactively to prevent external threat actors from infiltrating company information or systems. Typically has 3-5+ years of relevant experience and will act as an individual contributor.

This position will be a member of the GIS Vulnerability Identification Assurance (VIA) Vulnerability Identification team. In this role, you will help implement, manage, and monitor the effectiveness of infrastructure vulnerability identification efforts to protect the confidentiality, integrity, and availability of the line of businesses’ (LOB) information assets.

This role is responsible for establishing processes and controls leveraging Tanium to monitor CVE based vulnerabilities and associated risk on technology where we do not have GIS tools or effective signatures for automated scanning. They will work with stakeholders, Product Owners and Software

Engineers to aid in the implementation of data requirements, analyze QC performance, conduct QC related research and troubleshoot any issues.

• Experience with CVE vulnerability analytics as a focus area within Information Security
• Strong experience with CVE based vulnerability identification and risk analysis
• Experience explaining analytics in plain English and ability with communicating associated risk
• Ability to see the larger picture across the teams in the organization to build consensus and drive results
• Demonstrated ability to self-direct, with minimal supervision to achieve assigned goals
• Identify and develop proposals for program improvement
• Independent and able to work in an ever changing, fast paced environment
• Able to validate and analyze scan data returned by the enterprise toolset

• Key responsibilities:
• Discover and analyze findings for CVE based vulnerability and route to reporting work streams, to perform targeted QC on the vulnerabilities being reported and QC around scope of inventory being assessed.
• Review current existing Tanium vulnerability detection processes for ways to streamline and make them more efficient.
• Respond to relevant requests received from stakeholders, or representatives of stakeholders, for investigation of potential technology-based identification reporting issues.
• Performs…