Exposure & Attack Surface Analyst

Bank of America; Dublin; On-site; EUR 80,000 - 120,000; Full time

Benefits offered by this job

Private healthcare

Employee wellbeing programs

Pension plan

Job summary

Bank of America is seeking an Exposure Analysis and Identification Management Analyst to join the EMEA team, split between exposure analysis and attack surface research. The role covers evaluating vulnerabilities, mapping asset exposure, and supporting remediation with strong analytical and data skills.

Based in Dublin or Chester, the position requires collaboration across security and risk teams. The candidate will develop scripts in SQL and Python, automate ETL processes, and create dashboards

Qualifications

• Bachelor’s degree or equivalent work experience/qualifications.
• Broad knowledge of information security principles.
• Exposure/vulnerability management principles and risk assessment methodologies.
• Knowledge of vulnerability attack methods, exploit results, attack chains.
• Knowledge of CVSS, CCSS, NIST SP-800-30.

Responsibilities

• Analyse and triage disclosed exposures, vulnerabilities and threat scenarios.
• Research threats and vulnerabilities to prioritize remediation actions.
• Review exposures with available data sources and identify new data sources.
• Leverage creativity to enhance the Vulnerability Management program.
• Analyse vendor advisories and open-source intelligence for decision making.
• Collaborate with teams during System Vulnerability Incidents to drive resolution.
• Create SQL/Python scripts to query datasets for Attack Surface Review.
• Analyze large-scale datasets to map and report attack surface exposure.
• Automate data ingestion and transformation (ETL) using Python/SQL.
• Develop visuals/reports in Power BI / SSRS to support risk teams.
• Communicate findings clearly through written analyses and exec summaries.

Skills

Cyber security experience

Degree or equivalent

Info security principles

Exposure/vulnerability management

Vulnerability attack methods

CVSS/NIST scoring

SQL Server development

SSIS

Python automation

SSRS reporting

Education

Bachelor’s degree or equivalent

Tools

Qualys

Tanium

BladeLogic

Power BI

SSRS

SSIS

SQL Server

Job description

Bank of America is seeking an Exposure Analysis and Identification Management Analyst to join the EMEA team, split between exposure analysis and attack surface research. The role covers evaluating vulnerabilities, mapping asset exposure, and supporting remediation with strong analytical and data skills.

Based in Dublin or Chester, the position requires collaboration across security and risk teams. The candidate will develop scripts in SQL and Python, automate ETL processes, and create dashboards