CVE Vulnerability Analyst & Risk Monitor

Colorado Psychiatric; Denver (CO); On-site; USD 100,000 - 141,000; Full time

Job summary

Bank of America is seeking a Vulnerability Identification Analyst to join the GIS VIA team in Denver. You will analyze CVE findings, implement and monitor vulnerability controls, and collaborate with Product Owners and Engineers to define data needs and drive risk reduction.

The role emphasizes independent work, strong communication of risk to executives, and the expansion of technology-based identification across GIS and related assets. Occasional weekend coverage may be required.

Qualifications

• 3-5+ years in information security or data management.
• 3-5+ years in vulnerability management/assessment.
• Ability to translate security risks to business concepts.
• Strong communication with executives about risk.
• Independent, self-directed with minimal supervision.
• Experience with security technologies (OS, network, scanning).

Responsibilities

• Discover and analyze CVE findings for reporting workstreams.
• Review Tanium vulnerability detection processes for efficiency.
• Respond to stakeholder requests regarding identification issues.
• Lead VAI QC closures evaluations.
• Support expansion of tech-based identification for GIS.
• Expand QC to cover workstation and ATM vulnerabilities.

Skills

CVE vulnerability analytics

Vulnerability management

Communication of risk

Independent work

Security fundamentals

Data analysis (Excel)

Education

Bachelor's or Master's in CS/IT

Tools

Tanium

Vulnerability scanning tools

Job description

Bank of America is seeking a Vulnerability Identification Analyst to join the GIS VIA team in Denver. You will analyze CVE findings, implement and monitor vulnerability controls, and collaborate with Product Owners and Engineers to define data needs and drive risk reduction.

The role emphasizes independent work, strong communication of risk to executives, and the expansion of technology-based identification across GIS and related assets. Occasional weekend coverage may be required.