CVE Vulnerability Analyst

Bank of America; Chicago (IL); On-site; USD 100,000 - 141,000; Full time

Benefits offered by this job

Benefits eligible

Discretionary bonus

Healthy work-life balance

Job summary

Bank of America is seeking an experienced Information Security professional to join the GIS Vulnerability Identification team in Chicago. The role focuses on CVE-based vulnerability analytics, risk assessment, and collaborating with product owners and engineers to strengthen security controls.

Applicants should have 3–5+ years in information security, strong communication skills, and a solid background in vulnerability scanning and quantum security tooling.

Qualifications

• 3-5+ years of experience in information security and/or data management roles.
• 3-5+ years of experience with vulnerability management and/or assessment.
• Ability to translate cyber security threats from technical to business language.
• Strong communication skills to convey risks to senior technology executives.
• Broad technical background with OS, network security, and vulnerability tools.

Responsibilities

• Discover and analyze findings for CVE-based vulnerability and route to reporting workstreams.
• Review Tanium vulnerability detection processes for efficiency and scope.
• Respond to stakeholder requests for investigation of technology-based identification issues.
• Lead VAI QC technology-based identification P2 closures evaluations.
• Support expansion of QC to cover workstation and ATM vulnerabilities.

Skills

CVE analytics

Vulnerability management

Risk analysis

Communication

Tanium

Data QC

Independent work

Office Excel

Security technologies

Education

Bachelors/Masters in CS/IT

Tools

Tanium

Vulnerability scanners

Job description

Bank of America is seeking an experienced Information Security professional to join the GIS Vulnerability Identification team in Chicago. The role focuses on CVE-based vulnerability analytics, risk assessment, and collaborating with product owners and engineers to strengthen security controls.

Applicants should have 3–5+ years in information security, strong communication skills, and a solid background in vulnerability scanning and quantum security tooling.