Assistant Vice President, Cloud Security Analyst, Global Information Security, Sydney, Australia

Bank of America; Sydney; Presencial; AUD 120.000 - 160.000; Jornada completa

Descripción de la vacante

Bank of America in Sydney, Australia is seeking a Cloud SOC Incident Analyst with 2–5 years in a Cloud SOC environment. The role covers Azure, AWS, GCP and SaaS apps, focusing on identifying, analysing, mitigating and responding to threats and alerts.

The position is full-time (38 hours/week) with standard hours and a 4-day week (Wed–Sat) to align with support needs. Applicants should have cloud experience and strong analytical skills.

Formación

• Experience responding to cyber security incidents in at least one cloud (Azure/AWS/GCP).
• Analytical mindset to triage and close incidents unsupervised.
• Ability to interpret and present logging data from SIEM tools.

Responsabilidades

• Investigate and respond to incidents and alerts using cloud security knowledge.
• Identify unfamiliar data during incidents and assess relevance.
• Use Splunk and Log Analytics to view logs for cloud apps.
• Improve alerting by tuning detections and creating new ones.
• Communicate clearly with technical and non-technical audiences.
• Collaborate with a global team across regions.

Conocimientos

Cloud security

Incident response

SIEM analysis

Cloud platforms

Educación

Bachelor’s degree in Computer Science/Engineering/InfoSec

Herramientas

Splunk

Elasticsearch

Descripción del empleo

Job Description

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Job Description

B5 Cloud SOC Incident Analyst

We are seeking a skilled and motivated Cloud SOC Incident Analyst with between 2 and 5 years of experience within a Cloud Security Operations Centre environment.

This role will be within the Cloud Security Operations team, focusing on identifying, analysing, mitigating and responding to security threats and alerts across Azure, AWS, GCP and SaaS applications.

This is a full-time role (38 hours per week), with standard working hours of 9:00AM to 7:30PM AEST, 4 days per week (Wednesday to Saturday), to align with the nature of the support provided by the team.

Required Background and Experience:

• Experience in responding to cyber security incidents within at least one of Azure, AWS or GCP cloud environments
• An investigative and inquisitive approach to incidents, and the ability to work unsupervised on incidents from initial triage through to closure
• Ability to identify, analyse, interpret and present logging data from a SIEM, such as Splunk or Elasticsearch

• Broad awareness of information security operations and/or enterprise information technology

Knowledge or experience in one or more of the following will be advantageous, though not required:

• Experience in responding to cyber security incidents within two or more of Azure, AWS or GCP cloud environments, as well as SaaS applications; and/or
• Tuning of alerts in any cloud environment, or updating documentation as changes occur in the bank’s environment or tooling; and/or
• Programming or scripting experience; and/or
• Experience working within a large-scale enterprise or banking environment

Desirable Qualifications and Skills:

• Bachelor’s degree in Computer Science, Computer Engineering, Information Security or a Cyber/Digital Forensics related discipline; and/or
• Vendor-specific certification, such as Microsoft AZ-900 or SC-200, AWS Certified Cloud Practitioner or AWS Certified Security – Specialty; and/or
• Cloud-related qualification or certification, such as CompTIA Cloud+ or Cloud Security Alliance CCSK

What you will do:

• Use your cloud security knowledge, skills and investigative mindset to investigate and respond to incidents and alerts. This could include anything from brute-force attempts, suspicious AI utilisation, data exfiltration and exploitation of CVEs, to anything in between.
• Identify unfamiliar data in the midst of an incident and assess its relevance.
• Use Splunk and Log Analytics to view logs related to Azure, AWS, GCP and SaaS applications.
• Improve our existing alerting, including tuning existing detections and developing new detections.
• Communicate clearly, concisely and inclusively, both in writing and verbally, with technical and non-technical audiences, including colleagues, peers and stakeholders.
• Work alongside a global team, with colleagues in the USA, Europe and the Asia-Pacific region, placing emphasis on collaboration and the sharing of ideas and methodologies.