Security Detection & Response Specialist

Bank of America; Chester; On-site; GBP 55,000 - 85,000; Full time

Benefits offered by this job

Private healthcare

Pension plan

Paid maternity/paternity leave

Flexible benefits

Job summary

Bank of America in Chester is seeking a Security Detection & Response Specialist (SDR) to join the GIS Monitoring and Triage team. This role supports cybersecurity operations across threat detection, investigation, response, and continuous service improvement.

The successful candidate will develop skills in analyzing security events, building threat context, and increasingly operating independently across security domains, while collaborating with experienced practitioners to validate

Qualifications

• Experience in cybersecurity, security operations, IT support, or related fields; internships or academic projects count.
• Foundational knowledge of detection, investigation, or incident response principles.
• Basic log analysis and telemetry interpretation; familiarity with querying data (KQL, SPL, SQL).
• Exposure to SIEM, EDR/XDR, identity systems, or cloud environments.
• Understanding of MITRE ATT&CK framework.
• Ability to document findings with structured investigations.
• Strong communication and collaboration skills.
• Willingness to learn and grow independence in operations.

Responsibilities

• Triage alerts and analyse logs to assess potential security events.
• Correlate data from endpoint, identity, network, and applications to determine risk.
• Assist investigations and escalate high-risk findings.
• Support guided response activities and documentation during investigations.
• Improve detection fidelity by feedback on false positives.
• Develop and refine runbooks, playbooks, and guides; explore automation/tools.
• Identify telemetry gaps and opportunities to enhance detection and response.

Skills

Cybersecurity

Security operations

SIEM

MITRE ATT&CK

Log analysis

Investigation

Communication

Learning mindset

Tools

EDR/XDR

Cloud environments

Job description

Job Description:

Job Title: Security Detection & Response Specialist

Corporate Title: Up to Assistant Vice President

Location: Chester

Company Overview:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to be a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Location Overview:

Find us in the city of Chester, a destination renowned for its culture, history, and beauty. Working at Bank of America Chester offers a far-reaching global career for a world-renowned organisation, whilst being ideally situated against the backdrop of the rolling North Wales hills and the banks of the serene River Dee.

Role Description:

We are seeking a motivated and analytically driven Security Detection & Response Analyst (SDR) to join the GIS Monitoring and Triage team. This role supports cybersecurity operations across threat detection, investigation, response, and continuous service improvement.

The ideal candidate will have security practitioner experience with strong analytical aptitude and foundational technical skills, who contributes to the detection and response lifecycle by supporting investigations and response activities under guidance.

This role focuses on developing the ability to analyse security events, build contextual understanding of threats, and progressively operate with increasing independence across multiple security domains. The analyst will work alongside experienced practitioners to validate detections, investigate events, and execute response actions while building foundational skills in automation, orchestration, and AI-driven technologies.

Responsibilities:

• Support the detection and response lifecycle (detect → investigate → respond → improve) by triaging alerts and analysing logs and telemetry from multiple sources to assess potential security events
• Correlate and analyse data across endpoint, identity, network, and application sources to develop context and determine whether activity is benign or suspicious
• Assist in the investigation of security events by applying structured, hypothesis-driven analysis and escalating complex or high-risk findings to more senior analysts
• Perform guided response activities under supervision, including alert enrichment, containment support, documentation, and coordination with more senior team members during active investigations
• Validate alerts and contribute to improving detection fidelity by identifying false positives and providing feedback to enhance detection logic and coverage
• Contribute to the development and refinement of investigation guides, runbooks, and playbooks, while learning to leverage automation, SOAR workflows, and AI-assisted tools to improve efficiency
• Identify gaps in telemetry, monitoring, or processes and escalation improvement opportunities to support continuous enhancement of detection and response capabilities

What we’re looking for:

• Experience in cybersecurity, security operations, IT support, or related technical fields (internships, academic projects, or equivalent experience included)
• Foundational knowledge of security detection, investigation, or incident response principles, with a demonstrated ability to learn and apply concepts across multiple domains
• Basic experience with log analysis and telemetry interpretation, including familiarity with querying or analyzing data using tools such as SIEM platforms or query languages (KQL, SPL, SQL, or similar)
• Exposure to security platforms and technologies such as SIEM, EDR/XDR, identity systems, or cloud environments
• Foundational understanding of common attacker tactics, techniques, and procedures (TTPs), with familiarity of frameworks such as MITRE ATT&CK
• Analytical and problem-solving skills, with the ability to follow structured investigation processes and document findings clearly
• Effective communication skills, including the ability to provide clear updates and collaborate with team members during investigations
• Willingness to learn, take direction, and progressively develop independent decision-making capabilities in security operations environments

Skills that will help:

• Deep analytical and problem-solving skills, with the ability to follow structured investigation processes and document findings clearly
• Effective communication skills, including the ability to provide clear updates and collaborate with team members during investigations

Benefits of working at Bank of America:

UK

• At Bank of America, we strive to prioritise employees’ health and wellbeing – it’s what makes us a Great Place to Work.
• Private healthcare for you and your family plus an annual health screen to help you manage your physical wellness with the option to purchase a screen for your partner
• Competitive pension plan, life assurance and group income protection cover if you become unable to work as a result of a disability or health reasons
• We offer 26-weeks paid maternity leave, 16-weeks paid paternity leave and inclusive family leave arrangements for working parents and carers including 20 days of back-up childcare including access to school holiday clubs and 20 days of back-up adult care per annum
• The ability to change your core benefits as well as the option of selecting a variety of flexible benefits to suit your personal circumstances including access to a wellbeing account, travel insurance, critical illness, cycle to work etc.
• Use of a flex fund to use towards benefits
• Access to an emotional wellbeing helpline, and virtual GP services
• Access to the Peppy App which provides 1:1 support, consultations and resources relating to men’s health, women’s health, fertility, menopause and pregnancy & parenthood
• Access to a range of gyms, exercise classes and wellbeing Apps through Wellhub, including Headspace and Calm
• Ability to donate to charities of your choice directly through payroll and the bank will match your contribution
• Opportunity to give back to your community, develop new skills and work with new groups of people by volunteering in your local area

Good conduct and sound judgment is crucial to our long term success. It’s important that all employees in the organisation understand the expected standards of conduct and how we manage conduct risk. Individual accountability and an ownership mind-set are the cornerstones of our Code of Conduct and are at the heart of managing risk well.

“We are an equal opportunities employer and ensure that no applicant is subject to less favourable treatment on the grounds of sex, gender identity or gender reassignment, marital or civil partner status, race, religious or similar philosophical belief, political opinion, colour, nationality, ethnic or national origins, age, sexual orientation, pregnancy or maternity, socio-economic background, responsibility for dependants or physical or mental disability. The Bank selects candidates for interview based on their skills, qualifications and experience.”

We strive to ensure that our recruitment processes are accessible for all candidates and encourage any candidates to tell us about any adjustment requirements.