Exposure Analysis and Identification Management Analyst

Bank of America; Dublin; On-site; EUR 80,000 - 120,000; Full time

Benefits offered by this job

Private healthcare

Employee wellbeing programs

Pension plan

Job summary

Bank of America is seeking an Exposure Analysis and Identification Management Analyst to join the EMEA team, split between exposure analysis and attack surface research. The role covers evaluating vulnerabilities, mapping asset exposure, and supporting remediation with strong analytical and data skills.

Based in Dublin or Chester, the position requires collaboration across security and risk teams. The candidate will develop scripts in SQL and Python, automate ETL processes, and create dashboards

Qualifications

• Bachelor’s degree or equivalent work experience/qualifications.
• Broad knowledge of information security principles.
• Exposure/vulnerability management principles and risk assessment methodologies.
• Knowledge of vulnerability attack methods, exploit results, attack chains.
• Knowledge of CVSS, CCSS, NIST SP-800-30.

Responsibilities

• Analyse and triage disclosed exposures, vulnerabilities and threat scenarios.
• Research threats and vulnerabilities to prioritize remediation actions.
• Review exposures with available data sources and identify new data sources.
• Leverage creativity to enhance the Vulnerability Management program.
• Analyse vendor advisories and open-source intelligence for decision making.
• Collaborate with teams during System Vulnerability Incidents to drive resolution.
• Create SQL/Python scripts to query datasets for Attack Surface Review.
• Analyze large-scale datasets to map and report attack surface exposure.
• Automate data ingestion and transformation (ETL) using Python/SQL.
• Develop visuals/reports in Power BI / SSRS to support risk teams.
• Communicate findings clearly through written analyses and exec summaries.

Skills

Cyber security experience

Degree or equivalent

Info security principles

Exposure/vulnerability management

Vulnerability attack methods

CVSS/NIST scoring

SQL Server development

SSIS

Python automation

SSRS reporting

Education

Bachelor’s degree or equivalent

Tools

Qualys

Tanium

BladeLogic

Power BI

SSRS

SSIS

SQL Server

Job description

Job Description:

Exposure Analysis and Identification Management Analyst

Corporate Title: Up to Vice President

Location: Chester or Dublin

Company Overview

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Location Overview:

Chester

Find us in the city of Chester, a destination renowned for its culture, history, and beauty. Working at Bank of America Chester offers a far-reaching global career for a world-renowned organisation, whilst being ideally situated against the backdrop of the rolling North Wales hills and the banks of the serene River Dee.

Central Park

Overlooking the spectacular Iveagh Gardens with access to all amenities in the beating heart of central Dublin is our Park Place office. Travel options include the LUAS, Dublin Bus networks as well as the Dublin Bikes station, positioned just outside our front doors. As part of our commitment to supporting staff travel to and from work in the most sustainable way possible, we also provide tax saver tickets as part of our award-winning benefits package which means getting to work has never been easier

Role Description:

This role will be dedicated to the overall Exposure Analysis and Identification team within EMEA with the role being split between Exposure Analysis and Attack Surface Research.

The Exposure Analysis (EA) team is a global function responsible for the evaluation and prioritization of security vulnerabilities and exposures to enable appropriate remediation across the company. This individual contributor role will join a team of Exposure analysts around the globe who support Exposure management activities by leveraging analytic and technical skills to assess cyber security related risks.

The Attack Surface Research (ASR) role maintains and performs queries across a wide array of asset enumeration and research toolsets, spanning on-premises and cloud platforms, to effectively map, measure, and report on the topography of the Bank’s network endpoints and other assets for exposure risk.

The role requires a highly collaborative, analytical and detail-oriented mindset, with a focus on ensuring conclusions and/or insights reflect innovative thinking as well as accurate information gathering under time pressure to fully answer three core questions as quickly as possible.

• Do we have it?
• Are we vulnerable?
• Is it exploitable?

Persons in this role operate as part of a team developing methods to quickly reference systems of record (SORs), systems of origin (SOOs) and other available data stores to provide a comprehensive, reliable and timely view of the Bank’s Attack Surface, both as it relates to exposure exploitation risk as well as other concerns.

Responsibilities include, but are not limited to:

Exposure Analysis:

• Analyse and triage disclosed exposures, vulnerabilities, threat scenarios, and mitigating controls from a number of workstreams.
• Research and evaluate threats and vulnerabilities to assist in prioritization of remediation actions.
• Review and validate exposures using available data sources, tools and identifying new data sources as needed.
• Leverage creativity and influence to enhance the Vulnerability Management program.
• Analysing Vendor Advisories and Open-Source Intelligence with a view to make informed decisions regarding the Bank’s attack surface and exposure.
• Work alongside partner teams during System Vulnerability Incidents to achieve resolution.

Attack Surface Research:

• Create SQL and Python scripts within Qualys, Tanium and BladeLogic to query datasets, to support Attack Surface Review.
• Perform hands-on analysis of large scale datasets to correlate map, measure, and report on the overall vulnerability attack surface of the Bank.
• Leverage Python, SQL, and other languages/platforms to automate data ingestion, transformation, enrichment, and quality validation (ETL)
• Develop and maintain visualizations and reports in Power BI or MS-Reporting Services (SSRS) / SQL Server Integration Services (SSIS) that support operational teams, cyber leadership, and stakeholders across Information Security and broader risk teams.
• Possesses network architecture experience sufficient to reasonably speak to the Bank’s data network and architecture in a timely manner to major inquiries as both an individual and as part of projects by the larger team.
• Clearly communicate findings through written analysis and live discussions, including executive‑level summaries

What we’re looking for:

• Experience in Cyber Security or a related technology field
• Bachelor’s degree or equivalent work experience/qualifications
• Broad knowledge of information security principles
• Understanding of Exposure/Vulnerability Management principles and Risk Assessment methodologies
• Knowledge of vulnerability attack methods, exploit results, attack chains
• Knowledge of industry standard scoring models such as CVSS, CCSS, NIST SP-800-30
• Experience with SQL Server development, including: Indexes, constraints, table switching, transaction management, error handling, and activity logging
• Experience with SQL Server Integration Services (SSIS), including: DevOps integration, scripting tasks, packaging, deployment, and conditional workflows
• Hands on experience with data ingestion and ETL pipelines (batch and near real time)
• Python development experience used for automation, data processing, and integration
• Experience with SSRS, including subscriptions, report management, Tablix, matrix, and cascading parameters

Skills that will help:

• Process oriented with keen attention to detail
• Ability to proactively anticipate problems and execute solutions
• Good work ethic and ability to effectively multi-task in a fast-paced support environment
• Analytical skills/problem solving/conceptual thinking
• Effective communication skills
• Highly motivated and willing to learn

Benefits of working at Bank of America:

UK

• At Bank of America, we strive to prioritise employees’ health and wellbeing – it’s what makes us a Great Place to Work.
• Private healthcare for you and your family plus an annual health screen to help you manage your physical wellness with the option to purchase a screen for your partner
• Competitive pension plan, life assurance and group income protection cover if you become unable to work as a result of a disability or health reasons
• We offer 26-weeks paid maternity leave, 16-weeks paid paternity leave and inclusive family leave arrangements for working parents and carers including 20 days of back-up childcare including access to school holiday clubs and 20 days of back-up adult care per annum
• The ability to change your core benefits as well as the option of selecting a variety of flexible benefits to suit your personal circumstances including access to a wellbeing account, travel insurance, critical illness, cycle to work etc.
• Use of a flex fund to use towards benefits
• Access to an emotional wellbeing helpline, and virtual GP services
• Access to the Peppy App which provides 1:1 support, consultations and resources relating to men’s health, women’s health, fertility, menopause and pregnancy & parenthood
• Access to a range of gyms, exercise classes and wellbeing Apps through Wellhub, including Headspace and Calm
• Ability to donate to charities of your choice directly through payroll and the bank will match your contribution
• Opportunity to give back to your community, develop new skills and work with new groups of people by volunteering in your local area

Benefits of working at Bank of America:

Ireland

• At Bank of America, we strive to prioritise employees’ health and wellbeing – it’s what makes us a Great Place to Work.
• Private healthcare for you and your family plus an annual health screen to help you manage your physical wellness with the option to purchase a screen for your partner.
• Competitive pension plan, life assurance and group income protection cover if you become unable to work as a result of a disability or health reasons.
• We offer 26-weeks paid maternity leave, 16-weeks paid paternity leave and inclusive family leave arrangements for working parents and carers including 20 days of back-up childcare including access to school holiday clubs and 20 days of back-up adult care per annum.
• The ability to change your core benefits as well as the option of selecting a variety of flexible benefits to suit your personal circumstances including access to a wellbeing account, travel insurance, critical illness, cycle to work, TaxSaver tickets etc.
• Access to an Employee Assistance Program for confidential support and help for everyday matters.
• Access to free counselling through the Employee Assistance Program and virtual GP services through our private health care plan.
• Ability to donate to charities of your choice and the bank will match your contribution.
• Opportunity to access our Arts & Culture corporate membership program and receive discounted entry to some of Ireland’s most iconic cultural institutions and exhibitions.
• Opportunity to give back to your community, develop new skills and work with new groups of people by volunteering in your local community. "

Bank of America
Good conduct and sound judgment is crucial to our long term success. It’s important that all employees in the organisation understand the expected standards of conduct and how we manage conduct risk. Individual accountability and an ownership mind-set are the cornerstones of our Code of Conduct and are at the heart of managing risk well.
We are an equal opportunities employer and ensure that no applicant is subject to less favourable treatment on the grounds of sex, gender identity or gender reassignment, marital or civil partner status, race, religious or similar philosophical belief, political opinion, colour, nationality, ethnic or national origins, age, sexual orientation, pregnancy or maternity, socio-economic background, responsibility for dependants or physical or mental disability. The Bank selects candidates for interview based on their skills, qualifications and experience.”
We strive to ensure that our recruitment processes are accessible for all candidates and encourage any candidates to tell us about any adjustment requirements.