Cyber Exposure & Attack Surface Analyst

Bank of America; Chester; On-site; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Private healthcare

Pension plan

Maternity/Paternity leave

Wellbeing programs

Job summary

Bank of America is seeking an Exposure Analysis and Identification Management Analyst to join the global security team in Chester (or Dublin). The role covers exposure analysis, attack surface research, and collaboration with cross‑functional partners to prioritise remediation actions.

You will develop queries, automate data ingestion, and deliver visualisations to cyber leadership and risk teams, ensuring timely and accurate risk assessments across our network.

Qualifications

• <5 years of cyber security exposure preferred; strong analytical mindset.
• Bachelor's degree or equivalent work experience in a related field.
• Knowledge of vulnerability management principles and risk assessment.
• Experience with SQL Server development, SSIS/SSRS and data pipelines.
• Familiarity with CVSS, NIST standards, and incident response processes.

Responsibilities

• Analyse and triage exposures, vulnerabilities, threat scenarios, and mitigations.
• Research and evaluate threats to prioritise remediation actions.
• Validate exposures using data sources and identify new data sources as needed.
• Develop SQL and Python scripts to support vulnerability attack surface reviews.
• Create and maintain Power BI/SSRS reports for security leadership.
• Communicate findings clearly to stakeholders, including executives.

Skills

Cyber Security

SQL Server

Python

SSIS

SSRS

Power BI

ETL

Vulnerability Management

Education

Bachelor's degree

Tools

Qualys

Tanium

BladeLogic

Job description

Bank of America is seeking an Exposure Analysis and Identification Management Analyst to join the global security team in Chester (or Dublin). The role covers exposure analysis, attack surface research, and collaboration with cross‑functional partners to prioritise remediation actions.

You will develop queries, automate data ingestion, and deliver visualisations to cyber leadership and risk teams, ensuring timely and accurate risk assessments across our network.