CVE Vulnerability & Risk Analyst

Bank of America; Washington (District of Columbia); On-site; USD 100,000 - 141,000; Full time

Benefits offered by this job

Benefits eligible

Discretionary incentive plan

Job summary

Bank of America is seeking a security professional to analyze CVE vulnerabilities, manage risk, and monitor vulnerability identification efforts. The role focuses on leveraging Tanium to detect and address CVE-based findings within GIS.

You will work with stakeholders, product owners, and software engineers to implement data requirements, perform QC, and expand coverage to workstations and ATMs.

Qualifications

• 3-5+ years in information security or data management.
• Experience in vulnerability management and risk analysis.
• Strong ability to translate security risks for business leaders.

Responsibilities

• Analyze CVE findings and route to reporting workstreams.
• Review and optimize Tanium-based vulnerability processes.
• Respond to stakeholder requests regarding identification issues.
• Lead VAI QC closures and risk-based inventory scope.
• Support expansion to GIS workstation and ATM vulnerabilities.

Skills

Vulnerability management

Information security

QC data analysis

Stakeholder communication

Tanium

CVE analytics

Education

Bachelor's or Master's in CS/IT or related field

Tools

Tanium

Vulnerability scanning engines

Compliance management tools

Job description

Bank of America is seeking a security professional to analyze CVE vulnerabilities, manage risk, and monitor vulnerability identification efforts. The role focuses on leveraging Tanium to detect and address CVE-based findings within GIS.

You will work with stakeholders, product owners, and software engineers to implement data requirements, perform QC, and expand coverage to workstations and ATMs.