AppSec Operations & Vulnerability Specialist

Bank of America; Washington (District of Columbia); On-site; USD 78,000 - 136,000; Full time

Job summary

Bank of America in Washington, DC is seeking an Application Security Operations Specialist to help ensure continuous coverage of the security testing and scanning program. You will execute scan routines and support AI-assisted testing, while collaborating with teams to strengthen enterprise security.

The role requires experience with vulnerability management, scripting, and strong communication skills. Office-based with role-based flexibility supports collaboration and professional growth.

Qualifications

• 3+ years driving and/or supporting tool integration with workflow platforms (e.g., ServiceNow).
• Strong understanding of vulnerability management concepts and terminology.
• Excellent prioritization, communication, and mentoring skills.

Responsibilities

• Execute automated and custom scan routines to detect application and source code vulnerabilities.
• Operational support of new frontier AI models and related testing harnesses.
• Support for identifying, triaging, resolving events and results, including false positive results, and verifications and finding closure in collaboration with other partners.
• Participate in incident response activities and contribute pertinent information to maximize collaboration with control owners and remediation teams.
• Support application teams in their understanding and resolution of security findings.
• Participate in development and implementation of the technology strategy.
• Conduct proof-of-concept testing for next-gen scanning technologies.
• Optimize and ensure resiliency of scanning platforms, including operational process improvement.
• Identify and map vulnerability detection gaps to appropriate technology solutions.
• Data/trend analysis to feed harness development and vulnerability management lessons learned.

Skills

Tool integration experience (e.g., SA)

Vulnerability management concepts

Prioritization, communication, andMent

Education

BS/MS in Information Technology, Cybersecurity, or related field

Tools

MITRE ATT&CK

Cloud-based scanning

Python scripting

PowerShell

Bash

Job description

Bank of America in Washington, DC is seeking an Application Security Operations Specialist to help ensure continuous coverage of the security testing and scanning program. You will execute scan routines and support AI-assisted testing, while collaborating with teams to strengthen enterprise security.

The role requires experience with vulnerability management, scripting, and strong communication skills. Office-based with role-based flexibility supports collaboration and professional growth.