Proactive Endpoint Malware Defense Analyst

Koitecc Solutions; Denver (CO); On-site; USD 95,700 - 144,900; Full time

Benefits offered by this job

Benefits

Discretionary incentive

Job summary

Bank of America is seeking a mid- to senior-level Malware Defense Analyst to join the Malware Defense Team in Denver, CO. The role focuses on malware analysis, incident response, and improving detection across email, web, and endpoints.

Responsibilities include real-time threat triage, static/dynamic analysis, and collaboration with incident response teams to defend against emerging threats.

Qualifications

• Understanding of browser exploitation techniques.
• Familiarity with web technologies such as JavaScript and HTML and how they are abused.
• Experience reviewing Email Headers and detecting phishing threats.
• SIEM experience with event correlation and searching.
• Experience with static and dynamic malware analysis tools.
• Ability to operate a virtualized sandbox environment.
• Knowledge of Endpoint Detection and Response (EDR) tools.
• Knowledge of cloud-based detection and response tools.
• 3–5 years in threat prevention disciplines (Email, Web, or Endpoint).

Responsibilities

• Respond to real-time threats and triage malware delivery and execution.
• Perform static, dynamic, and behavioral analysis of malware.
• Maintain detailed documentation and produce comprehensive reports.
• Identify cyber risks and improve controls and detection mechanisms.
• Collaborate with response teams to defend against threats and incidents.

Skills

Malware analysis

Incident response

Threat detection

Phishing awareness

SIEM

Static/dynamic analysis

Sandboxing

URL analysis

IoCs extraction

Tools

Process Monitor

Wireshark

Fiddler

Sandbox technologies

Job description

Bank of America is seeking a mid- to senior-level Malware Defense Analyst to join the Malware Defense Team in Denver, CO. The role focuses on malware analysis, incident response, and improving detection across email, web, and endpoints.

Responsibilities include real-time threat triage, static/dynamic analysis, and collaboration with incident response teams to defend against emerging threats.