Application Security Controls & Scanning Lead

Bank of America; Sydney; On-site; AUD 120,000 - 160,000; Full time

Job summary

Bank of America in Sydney seeks an experienced security operations specialist to support the application security testing program, including follow‑the‑sun coverage. You will run automated and manual scans, triage results, and collaborate with remediation teams to strengthen scanning capabilities and incident response.

Required are 3+ years in tool integration, vulnerability management, scripting (Python/PowerShell/Bash), and experience with AI-assisted vulnerability hunts.

Qualifications

• 3+ years experience with tool integration and workflows (e.g., ServiceNow).
• Strong vulnerability management concepts.
• Proficient in Python, PowerShell, Bash; Windows and UNIX.
• Experience developing AI-assisted vulnerability harnesses.
• Familiarity with MITRE ATT&CK, cloud scanning, and compliance.

Responsibilities

• Execute automated and custom scan routines to detect vulnerabilities.
• Operational support of new frontier AI models and testing harnesses.
• Triage events, verify findings, and close gaps with remediation teams.
• Assist incident response activities and share pertinent insights.
• Support application teams in understanding security findings.
• Contribute to technology strategy and proof-of-concept testing.

Skills

Tool integration

Vulnerability management

Communication

Scripting languages

AI harnesses

Education

BS/MS in IT/Cybersecurity

Tools

ServiceNow

Windows

UNIX

SARIF

Job description

Bank of America in Sydney seeks an experienced security operations specialist to support the application security testing program, including follow‑the‑sun coverage. You will run automated and manual scans, triage results, and collaborate with remediation teams to strengthen scanning capabilities and incident response.

Required are 3+ years in tool integration, vulnerability management, scripting (Python/PowerShell/Bash), and experience with AI-assisted vulnerability hunts.