Job Description:

About Us

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities, and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Global Business Services

Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations. Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence, and innovation.

In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services

Process Overview*

The Cyber Threat Defense team has a global footprint and operates 24x7 leveraging follow-the-sun model. This is a global role and candidate is expected to closely collaborate with other Cyber Defense teams based in different parts of the world on day-to-day basis. 

Job Description*

The role is in the Cyber Threat Defense (CTD) team of the bank. Key responsibilities of the role include detecting and responding to cyber-attacks against bank’s applications as per established processes and procedures to ensure security, integrity, and confidentiality of the information, contribute to enhancing detection and preventive controls, and continually improve incident response capabilities.

Responsibilities*

•Prevent, Detect, and respond to cyber-attacks against bank’s applications by leveraging advanced tools, processes & procedures, and your technical experience & skills.

•Perform analysis to determine timelines, TTPs used by Threat Actors and impact of the incidents and report them to Cyber Incident Management team as per the process.

•Briefs management and control SMEs on above analysis and collaborate to drive proactive control enhancements.

•Create and update detection rules to detect emerging threats by leveraging logs from various systems and applications.

•Create and update threat prevention and detection rules on Web Application to detect and block malicious activities.

•Collaborate with vendors and internal teams to fix any bugs, control issues or control upgrades.

•Apply a proactive understanding of cyber security threats to prevent incidents, enhance controls, and drive enterprise change

Requirements*

Education* - BE/B.Tech/MCA

Experience Range* - 8+ Years

Foundational skills*

•Hands-on experience of 8+ years of preventing, detecting, and responding to application layer attacks in a large enterprise environment.

•Strong understanding of common exploits, web application attacks (OWAS top 10 security risk and beyond), network protocols and infrastructure/application logs (eg weblogs, AD logs, security logs) for an efficient intrusion analysis

•Advanced log analysis skills leveraging tools such as Splunk or other SIEM solutions and scripting/regular expressions to find targeted attacks and hunting exercises.

•Good verbal and written communication skills for effective collaboration and incident reporting in a global environment

•Broader understanding Cyber threat environment, common TTPs used by Threat Actors and Defensive controls to defend against such threats

 Desired skills*

•Hands-on experience of managing rules on IPS/IDS on leading vendors is desirable

•Hands-on experience of creating and updating Web Application Firewall rules is strongly desirable.

Work Timings* - 6:30 AM - 10:30 PM

Job Location* - Hyderabad, Chennai, Mumbai