Vice President, Digital Forensics, Global Information Security

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities, and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We're devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow, and make an impact, along with the power to make a difference. Join us!

Your background

Bank of America is seeking to expand and diversify their Digital Forensics and Incident Response (DFIR) capability with motivated and adaptable individuals from a range of different backgrounds and experience. This role is open to individuals with at least 3 years of Digital Forensics experience.

Required Background and Experience

• Identify, analyze, and present evidential data from workstation-oriented systems, including but not limited to systems installed with Microsoft Windows.
• Experience in investigating specific facets or workstreams of various incident scenarios/investigations as part of a broader DFIR/investigative team.
• Broad knowledge in computing and networking, with a generalist understanding of information security technologies, techniques, and processes.
• Experience in leading or initiating incident scenarios/investigations from start to finish is a plus but not required.

Desired Background and Experience

• Experience in investigating and leading incident scenarios/investigations involving enterprise systems, especially cloud technologies like Azure or AWS.
• Ability to draw upon knowledge in computing, networking, and security technologies.
• Initiated or driven initiatives to upgrade or transform incident response processes or technologies.

Skills and Qualifications

• One of the following qualifications or certifications is required:
  • Bachelor's, Master's, or Doctorate in Computer Science, Engineering, Information Security, or related fields.
  • Digital Forensics and Incident Response Certification (e.g., EnCE, GCFA).
• Highly advantageous but not essential:
  • Cloud certifications like CCSP, Azure, or AWS.
  • Linux certifications such as Red Hat Certified System Administrator.
• Additional advantageous skills or experience include:
  • Programming or scripting skills (Java, C++, Python, batch, shell scripting).
  • Experience with cloud/containerization (Docker, Kubernetes) or Linux/Unix systems.

What you can expect

The Cyber Threat Defense team's goal is to protect the bank by managing security controls and responding to incidents through the Digital Forensics team, which responds to various security events and incidents, including breaches and data exfiltration. The team values training and development, encouraging certifications and learning new technologies.

What you will do

• Manage your caseload through the entire incident response lifecycle.
• Discover and assess unfamiliar technology or data during investigations.
• Communicate clearly with technical and non-technical audiences.
• Embrace and evaluate new technologies for incident response improvement.
• Collaborate with a global team across different regions.
• Participate in an on-call schedule to respond to incidents as needed.