Endpoint Malware Defense & Incident Response Analyst

Bank of America; United States; On-site; USD 95,000 - 130,000; Full time

Job summary

Bank of America is seeking mid-level cybersecurity professionals to join the Malware Defense Team. Candidates should have malware analysis and incident response experience, with the ability to triage detections, analyze threats, and drive improvements in controls and detection capabilities.

The role involves real-time threat responses, documentation of findings, and collaboration with incident response teams to defend the organization across email, web, and endpoint vectors.

Qualifications

• 3-5 years in malware analysis, incident response, or related threat prevention disciplines.
• Experience triaging detections and prioritizing threats.
• Strong investigative mindset and ability to implement control enhancements.
• Familiarity with browser exploitation techniques and web technologies.
• Experience with EDR, sandboxing, and forensic artifacts.

Responsibilities

• Respond to real-time threats targeting the organization through malware delivery and execution.
• Perform static, dynamic, and behavioral analysis of malicious software and IoCs.
• Maintain detailed documentation and produce comprehensive analysis reports.
• Identify cyber risks and help improve controls and detection mechanisms.
• Collaborate with response teams to defend against emerging threats and contribute to IR efforts.

Skills

Malware analysis

Incident response

Threat detection

SIEM

EDR tools

Tools

Process Monitor

Wireshark

Sandbox tech

Fiddler

Web proxy tech

URL categorization

Job description

Bank of America is seeking mid-level cybersecurity professionals to join the Malware Defense Team. Candidates should have malware analysis and incident response experience, with the ability to triage detections, analyze threats, and drive improvements in controls and detection capabilities.

The role involves real-time threat responses, documentation of findings, and collaboration with incident response teams to defend the organization across email, web, and endpoint vectors.