CVE Vulnerability Analyst

Bank of America; Washington (Washington County); On-site; USD 100,000 - 141,000; Full time

Benefits offered by this job

Health insurance

Competitive benefits

Paid time off

Job summary

Bank of America is seeking an Information Security professional for the GIS VIA Vulnerability Identification team. The role focuses on implementing and monitoring vulnerability identification controls to safeguard line-of-business information assets.

You will collaborate with product owners and software engineers to align data requirements and improve QC performance. Ideal candidates have 3–5+ years in security, strong CVE analytics, and the ability to communicate risk clearly to non-technical

Qualifications

• 3–5+ years in information security or data management
• 3–5+ years vulnerability management/assessment
• Ability to translate cyber threats to business context
• Strong communication to senior tech executives
• Experience with security technologies and risk analytics

Responsibilities

• Discover and analyze CVE findings and route to reporting workstreams
• Review Tanium vulnerability detection processes for efficiency
• Respond to stakeholder requests for identification reporting issues
• Perform duties and special assignments as needed
• Lead QC activities for technology-based P2 closures evaluations
• Scope work where scanning signatures are absent or vendor-derived findings

Skills

CVE analytics

Vulnerability risk analysis

Communication of risk

Independent work

Problem solving

Threat intelligence

Data management (Excel)

Education

Bachelor's degree in CS/IT or related field

Master's degree preferred

Job description

Bank of America is seeking an Information Security professional for the GIS VIA Vulnerability Identification team. The role focuses on implementing and monitoring vulnerability identification controls to safeguard line-of-business information assets.

You will collaborate with product owners and software engineers to align data requirements and improve QC performance. Ideal candidates have 3–5+ years in security, strong CVE analytics, and the ability to communicate risk clearly to non-technical