Vulnerability Exposure Specialist I

Bank of America Corporation; Indiana; On-site; USD 16,000 - 23,000; Full time

Job summary

Bank of America Corporation is hiring a Vulnerability Analyst to join the global ASVM program. The role focuses on end-to-end enablement, planning and deployment of vulnerability detection solutions across multiple regions, partnering with vendors and infrastructure teams to align with strategic objectives.

Strong analytical and security fundamentals are essential. The candidate will work with cross-functional teams to evaluate vulnerabilities, interpret risk, and support remediation efforts in

Qualifications

• Foundational knowledge of information security principles
• Understanding of vulnerability management and risk assessment
• Familiarity with CVSS, CPE, OWASP Top 10, MITRE ATT&CK and CWEs
• Strong analytical and problem-solving skills
• Excellent written and verbal communication

Responsibilities

• Evaluate and rate vulnerabilities using data sources and tools
• Analyze environmental conditions related to vulnerabilities and threats
• Identify vulnerable products in the environment from systems and scan results
• Manage reporting and tracking for watch list vulnerabilities
• Escalate data quality issues to vendors and coordinate with threat intel teams
• Collaborate across regions and teams to improve vulnerability detection

Skills

Vulnerability management

CVSS

MITRE ATT&CK

Threat intelligence

Python basics

Linux/Windows

OWASP Top 10

Analytical thinking

Communication

Attention to detail

Education

BE/BTECH/MCA/MSC (IT) equivalent

Job description

Bank of America Corporation is hiring a Vulnerability Analyst to join the global ASVM program. The role focuses on end-to-end enablement, planning and deployment of vulnerability detection solutions across multiple regions, partnering with vendors and infrastructure teams to align with strategic objectives.

Strong analytical and security fundamentals are essential. The candidate will work with cross-functional teams to evaluate vulnerabilities, interpret risk, and support remediation efforts in