Global Application Security Operations Specialist

Bank of America; Chicago (IL); On-site; USD 78,000 - 136,000; Full time

Job summary

Bank of America is seeking an Applications Security Operations Specialist to ensure global coverage of its security testing and scanning program. You will support end-to-end technology enablement, collaborate across time zones, and drive improvements in scanning capabilities and false positives.

You will execute automated scans, triage findings, assist incident response, and help security teams resolve issues.

Qualifications

• 3+ years in tool integration with workflow platforms (e.g., ServiceNow).
• Strong vulnerability management concepts and terminology.
• Excellent prioritization, communication, and mentoring skills.

Responsibilities

• Execute automated and custom scan routines to detect vulnerabilities.
• Provide operational support for testing harnesses and AI models.
• Triage, resolve events and findings, including false positives, with remediation teams.
• Assist incident response and maximize collaboration with control owners.
• Support application teams in understanding and resolving security findings.
• Participate in developing and implementing the technology strategy.
• Conduct PoC testing for next-gen scanning technologies.
• Optimize scanning platforms and procedures for resiliency.
• Identify detection gaps and map to suitable solutions.
• Analyze data/trends to improve vulnerability management lessons learned.

Skills

Tool integration

Vulnerability management

Prioritization & mentoring

Education

BS/MS in IT/Cybersecurity

Tools

MITRE ATT&CK

Cloud-based scanning

Compliance frameworks (NIST/FFIEC)

Job description

Bank of America is seeking an Applications Security Operations Specialist to ensure global coverage of its security testing and scanning program. You will support end-to-end technology enablement, collaborate across time zones, and drive improvements in scanning capabilities and false positives.

You will execute automated scans, triage findings, assist incident response, and help security teams resolve issues.