Security Detection & Response I

Bank of America; Chester; On-site; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Private healthcare

Pension plan

Paid maternity leave

Flexible benefits

Job summary

Bank of America in Chester is seeking a Security Detection & Response Specialist to join the GIS Monitoring and Triage team. The role focuses on threat detection, investigation, response, and continuous improvement across security operations.

The ideal candidate has foundational security knowledge, strong analytical skills, and a willingness to learn. You will work with experienced practitioners to validate detections, respond to incidents, and grow skills in automation and AI-assisted tools.

Qualifications

• Experience in cybersecurity, security operations, IT support, or related fields.
• Foundational knowledge of detection, investigation or incident response concepts.
• Basic log analysis and telemetry interpretation with SIEM/query language familiarity.
• Exposure to SIEM/EDR/XDR, identity systems or cloud environments.
• Understanding of attacker TTPs and MITRE ATT&CK framework.
• Analytical, problem-solving and clear documentation abilities.
• Effective communication and willingness to learn and grow in security operations.

Responsibilities

• Triages alerts and analyzes logs to assess potential security events.
• Correlates data across endpoints, identities, networks, and applications.
• Assists in investigations and escalates complex findings to senior analysts.
• Performs guided response activities, en enrichments, containment support and coordination.
• Validates alerts and helps improve detection fidelity and coverage.
• Contributes to runbooks, playbooks, and automation with SOAR and AI tools.
• Identifies telemetry gaps and supports continuous improvement initiatives.

Skills

cybersecurity

security operations

IT support

log analysis

SIEM

EDR/XDR

identity systems

cloud environments

MITRE ATT&CK

analytical thinking

communication skills

learning mindset

Tools

SIEM

EDR/XDR

identity systems

cloud environments

Job description

Job Title: Security Detection & Response Specialist

Corporate Title: Up to Assistant Vice President

Location: Chester

Company Overview

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Location Overview

Find us in the city of Chester, a destination renowned for its culture, history, and beauty. Working at Bank of America Chester offers a far-reaching global career for a world-renowned organisation, whilst being ideally situated against the backdrop of the rolling North Wales hills and the banks of the serene River Dee.

Role Description

We are seeking a motivated and analytically driven Security Detection & Response Analyst (SDR) to join the GIS Monitoring and Triage team. This role supports cybersecurity operations across threat detection, investigation, response, and continuous service improvement.

The ideal candidate will have security practitioner experience with strong analytical aptitude and foundational technical skills, who contributes to the detection and response lifecycle by supporting investigations and response activities under guidance.

This role focuses on developing the ability to analyse security events, build contextual understanding of threats, and progressively operate with increasing independence across multiple security domains. The analyst will work alongside experienced practitioners to validate detections, investigate events, and execute response actions while building foundational skills in automation, orchestration, and AI-driven technologies.

Responsibilities

• Support the detection and response lifecycle (detect → investigate → respond → improve) by triaging alerts and analysing logs and telemetry from multiple sources to assess potential security events
• Correlate and analyse data across endpoint, identity, network, and application sources to develop context and determine whether activity is benign or suspicious
• Assist in the investigation of security events by applying structured, hypothesis-driven analysis and escalating complex or high-risk findings to more senior analysts
• Perform guided response activities under supervision, including alert enrichment, containment support, documentation, and coordination with more senior team members during active investigations
• Validate alerts and contribute to improving detection fidelity by identifying false positives and providing feedback to enhance detection logic and coverage
• Contribute to the development and refinement of investigation guides, runbooks, and playbooks, while learning to leverage automation, SOAR workflows, and AI-assisted tools to improve efficiency
• Identify gaps in telemetry, monitoring, or processes and expedite improvement opportunities to support continuous enhancement of detection and response capabilities

What we’re looking for

• Experience in cybersecurity, security operations, IT support, or related technical fields (internships, academic projects, or equivalent experience included)
• Foundational knowledge of security detection, investigation, or incident response principles, with a demonstrated ability to learn and apply concepts across multiple domains
• Basic experience with log analysis and telemetry interpretation, including familiarity with querying or analyzing data using tools such as SIEM platforms or query languages (KQL, SPL, SQL, or similar)
• Exposure to security platforms and technologies such as SIEM, EDR/XDR, identity systems, or cloud environments
• Foundational understanding of common attacker tactics, techniques, and procedures (TTPs), with familiarity of frameworks such as MITRE ATT&CK
• Analytical and problem-solving skills, with the ability to follow structured investigation processes and document findings clearly
• Effective communication skills, including the ability to provide clear updates and collaborate with team members during investigations
• Willingness to learn, take direction, and progressively develop independent decision-making capabilities in security operations environments

Skills that will help

• Deep analytical and problem-solving skills, with the ability to follow structured investigation processes and document findings clearly
• Effective communication skills, including the ability to provide clear updates and collaborate with team members during investigations

Benefits of working at Bank of America

UK

• At Bank of America, we strive to prioritise employees’ health and wellbeing – it’s what makes us a Great Place to Work.
• Private healthcare for you and your family plus an annual health screen to help you manage your physical wellness with the option to purchase a screen for your partner
• Competitive pension plan, life assurance and group income protection cover if you become unable to work as a result of a disability or health reasons
• We offer 26-weeks paid maternity leave, 16-weeks paid paternity leave and inclusive family leave arrangements for working parents and carers including 20 days of back-up childcare including access to school holiday clubs and 20 days of back-up adult care per annum
• The ability to change your core benefits as well as the option of selecting a variety of flexible benefits to suit your personal circumstances including access to a wellbeing account, travel insurance, critical illness, cycle to work etc.
• Use of a flex fund to use towards benefits
• Access to an emotional wellbeing helpline, and virtual GP services
• Access to the Peppy App which provides 1:1 support, consultations and resources relating to men’s health, women’s health, fertility, menopause and pregnancy & parenthood
• Access to a range of gyms, exercise classes and wellbeing Apps through Wellhub, including Headspace and Calm
• Ability to donate to charities of your choice directly through payroll and the bank will match your contribution
• Opportunity to give back to your community, develop new skills and work with new groups of people by volunteering in your local area

Good conduct and sound judgment is crucial to our long term success. It’s important that all employees in the organisation understand the expected standards of conduct and how we manage conduct risk. Individual accountability and an ownership mind-set are the cornerstones of our Code of Conduct and are at the heart of managing risk well.

“We are an equal opportunities employer and ensure that no applicant is subject to less favourable treatment on the grounds of sex, gender identity or gender reassignment, marital or civil partner status, race, religious or similar philosophical belief, political opinion, colour, nationality, ethnic or national origins, age, sexual orientation, pregnancy or maternity, socio-economic background, responsibility for dependants or physical or mental disability. The Bank selects candidates for interview based on their skills, qualifications and experience.”

We strive to ensure that our recruitment processes are accessible for all candidates and encourage any candidates to tell us about any adjustment requirements.