Network Detection Operations Specialist - OneTenCoalition

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates' physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!



The Network Defense (ND) team in the Global Information Security organization is responsible for defending the Bank's Internet facing networks and applications from disruptive security threats such as Distributed Denial of Service (DDoS) attacks. ND works at the tip of the spear to ensure that customers have an uninterrupted network experience, by rapidly responding to security events, developing defenses, and mitigating attacks. ND team members are expected to be subject matter experts on disruptive security events and able to apply their extensive knowledge of computer networking and cyber security threats in order to develop solutions to complex cyber scenarios.

This job is responsible for supporting evaluations of cyber security threats and updating defensive capabilities to reduce the bank's risk of exposure. Key responsibilities include conducting analyses of the threat environment and threats to the bank, including post incident analysis, applying a multi-faceted situational awareness of cyber security processes to protect against threats, and implementing proactive defensive actions for the security, continuity, and confidentiality of information.

Responsibilities:
• Assists in performing analysis to determine timeline, tactics, and impact of threats, events, and incidents
• Participates in the identification and analysis of various cyber security threats
• Supports the analysis of threats, events, and incidents in aggregate to understand the bank's risk and the changing threat landscape to drive action
• Applies a multi-faceted situational awareness of cyber security processes as part of the cyber health function
• Supports the analysis of processes, including but not limited to the evaluation of computer memory and log file analysis
• Briefs management on analysis and tactical responses identified in the review of threats, events, and incidents
• Applies a proactive understanding of cyber security threats to prevent incidents, enhance controls, and drive enterprise change
• End-to-end cyber security monitoring and response. In addition, team members with a strong Developer background will work to increase response automation and efficiency.
• Responding to, researching, measuring, detecting and mitigating security attacks that target the network and application layers
• Exercising judgment within broadly defined practices in selecting methods, techniques and evaluation criterion for obtaining results
• Designing and implementing secure solutions to meet customer/client needs while protecting the Bank's assets
• Providing subject matter expertise
• Collaborating with peers and business units in a team-focused environment

Required Skills:
• Strong understanding of the TCP/IP protocol stack.
• Experience with firewalls, access control lists (ACL's), Intrusion Detection & Prevention technologies, and other network security equipment is desired
• A working knowledge of security threat vectors such as Distributed Denial of Service (DDoS) attacks, networking, network security and application security desired.
• Advanced problem solving skills
• Demonstrates the capability of working in a team environment and collaborating with global partners.
• Ability to work without oversight.

Desired Skills
• CISSP, CCIE, CEH, CCNA is desired, but not required
• Cyber Security
• Data Privacy and Protection
• Problem Solving
• Process Management
• Threat Analysis
• Business Acumen
• Data and Trend Analysis
• Interpret Relevant Laws, Rules, and Regulations
• Risk Analytics
• Stakeholder Management
• Access and Identity Management
• Data Governance
• Encryption
• Information Systems Management
• Technology System Assessment

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Shift:
1st shift (United States of America)

Hours Per Week:
40