Total 32,327 Information Security Analyst job vacancies in The United States of America

BlueScope is an Australian-born, global success story, spanning 18 countries, with a team of over 14,000 people. We’re driven by innovation and are proud that the technologies in our products and brands, like COLORBOND® steel, inspire and protect everything from hospitals and bridges to stadiums and homes.The OpportunityCome and discover the opportunity to join the Security Architecture Team in our IT function for our Australian business who will continue to build and mature our security capabilities.Valuing Leadership, Integrity, Innovation and Collaboration you will be joining a team of Security Architects committed to protecting our assets and brand value by providing security expertise and knowledge to our enterprise technology landscape and support our business and customers now and for the future.  The role of the Information Security Architect is to design, build, test, and implement security solutions within BlueScope’s Australian IT environment. The Information Security Architect provides a thorough understanding of Technology Solutions anticipating security risks, identifying…

Click here to view more detail / apply for Information Security Architect

A Vacancy at Northumbria Healthcare - NHCT Northumbria Healthcare NHS Foundation Trust.


We have an exciting opportunity in our Workforce Systems Team for a full-time, permanent Senior Workforce Information Analyst.

Working closely with the wider team you will support the delivery of the HR/OD Strategy, possess an understanding and awareness of national NHS reporting requirements, data standards, and definitions, information data flows, and benchmarking.

Alongside your colleagues you will be responsible for the data quality held in the Trust’s HR systems, and be responsible for ensuring the day to day delivery of all statutory and ad-hoc reporting. You will have previous experience of working flexibly, under pressure and to conflicting deadlines, and be adaptable to changing requirements and priorities.

You should have the ability to produce workforce intelligence derived from a range of locally held systems, and deliver succinct reporting that supports stakeholder requirements that may be used for service delivery, service improvement, business planning and commissioning.

You will possess good technical, analytical, communication and organisational skills with a flair for improvement.

Candidates should possess advanced Excel skills.

Candidates should also be educated to HNC/HND level in a subject with a substantial numerate content or equivalent level of acquired knowledge and experience.

Knowledge of a range of NHS systems including ESRBI is essential.

To provide an information service to senior managers through analysis and interpretation of workforce data and systems, and to contribute to performance monitoring.

To maintain data quality of ESR ensuring national standards are adhered to and working best practice is aligned to these.

To be responsible for responding to inbound data requests made to the trust by external bodies such as national data returns/FOI requests.

To role model compassionate and inclusive leadership in order to shape the creation of a collective leadership culture within the trust. This means demonstrating a consistent leadership style which (a) engages, enables and empowers others (b) uses coaching to promote ownership of learning and quality improvement and (c) facilitates team working and collaboration within teams / departments and across organisational boundaries.

We manage three major locality hospitals at North Tyneside, Wansbeck and Hexham, plus a number of smaller community hospitals and clinics from Tynemouth to Berwick on Tweed, covering one of the largest geographical areas of any NHS trust in the country. Leading in innovation and quality opening a state-of-the-art Northumbria Specialist Emergency Care Hospital, the first of its kind in England. Do you want to work in one of the best performing NHS organisations in England? Work in an organisation that supports its staff and focuses on staff experience as much as it does the experience of its patients? You can live and breathe in an area that has the cleanest air, cost effective living, great nightlife, some of the best schools with a wealth of history available on your doorstep. Sound too good to be true? Well it isn't, this is what you get when you work for Northumbria Healthcare, this is the Northumbria Way!

To provide an information analysis service to senior managers through analysis and interpretation of workforce data and systems, and to contribute to performance monitoring.

To maintain data quality of ESR ensuring national standards are adhered to and working best practice is aligned to these

To be responsible for responding to inbound data requests made to the trust by external bodies ie national data returns/FOI requests.

To role model compassionate and inclusive leadership in order to shape the creation of a collective leadership culture within the trust. This means demonstrating a consistent leadership style which (a) engages, enables and empowers others (b) uses coaching to promote ownership of learning and quality improvement and (c) facilitates team working and collaboration within teams / departments and across organisational boundaries.


This advert closes on Monday 6 May 2024

Proud member of the Disability Confident employer scheme

To provide an information analysis service to senior managers through analysis and interpretation of workforce data and systems, and to contribute to performance monitoring. To maintain data quality of ESR ensuring national standards are adhered to and working best practice is aligned to these To be responsible for responding to inbound data requests made to the trust by external bodies ie national data returns/FOI requests. To role model compassionate and inclusive leadership in order to shape the creation of a collective leadership culture within the trust. This means demonstrating a consistent leadership style which (a) engages, enables and empowers others (b) uses coaching to promote ownership of learning and quality improvement and (c) facilitates team working and collaboration within teams / departments and across organisational boundaries.

Contract Duration: 12 months
Working Hour: Normal Office Hour
Working Location: AMK
Remarks: SINGAPOREAN Only

Requirements
• 5+ years IT security experience required.
• CISSP certification is a Must, CISM, Security+, IT security tools certifications (Imperva, Carbon Black) is a plus
• Experience with Networks, Servers (Windows and UNIX), Database.
• Experience in IT security auditing, security assessments.
• Understand protocols, traffic flows, ability to analyse logs from various sources.
• Knowledge of Active Directory, Endpoint protection solutions, Early Detection and Response solution, Database Activities Monitoring tools, SIEM etc.
• Excellent written and verbal communication, presentation skills.
• Proficiency in Microsoft Excel.
• Flexible, team player, “get-it-done” personality.
• Ability to organize and plan work independently.
• Ability to work in a rapidly changing environment.
• Ability to multi-task and context-switch effectively between different activities and teams

Responsibilities
• Review and development of security framework, information security policies, processes / procedures and guidelines on an ongoing basis.
• Establish compliance with these policies / procedures through ongoing security reviews and audits, not limited to log analysis and security assessment of customer ICT systems
• Conduct security risk management exercise
• Conduct table-top exercises
• Conduct vulnerability assessment, coordinate penetration tests activities
• Conduct information security awareness training
• Responsible for the development and management of customer’s security incident response plan.
• Lead and support customer in the matters of security incident resolution and response.
• Be the point-of-contact/customer liaison to assist and advise customer for ICT security related matters
• Project managed the activities and deliverables during the implementation phase.

Interested candidates, please click "APPLY" to begin your job search journey and submit your CV directly through the official PERSOLKELLY job application platform - GO Mobile.

We regret to inform you that only shortlisted candidates will be notified.

This is in partnership with Employment and Employability Institute Pte Ltd (“e2i”). e2i is the empowering network for workers and employers seeking employment and employability solutions. e2i serves as a bridge between workers and employers, connecting with workers to offer job security through job-matching, career guidance, and skills upgrading services, and partnering with employers to address their manpower needs through recruitment, training, and job redesign solutions. e2i is a tripartite initiative of the National Trades Union Congress set up to support nationwide manpower and skills upgrading initiatives. By applying for this role, you consent to e2i’s PDPA.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use, and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Gelangre Reyanelle Gelario | REG No : R1870995

PERSOLKELLY SINGAPORE PTE LTD | EA License No : 01C4394

SAM is looking to fill the position of Information Security Manager. This is a regional role and is overall in-charge of all the entities under SAM. He/She will report to the CEO.

Responsibilites

• To develop and implement a long-term Information Security & Cyber Security strategies and roadmap to protect corporate information and IT assets.
• Set up Cyber Security policy to standardize practice and govern all the security landscape within the group of companies.
• Provide Information security & Cyber Security strategic advice to senior management.
• Modernize and optimize the conduct of governance and oversight roles to maintain risk register, third-party vendor assessment, leveraging and advanced analytics for trending and compliance monitoring.
• Manage Information & Cyber Security and Personal Data Protection matters, liaise with different stakeholders and oversee the implementation of it to improve the overall Information Security, Cyber Security and Personal Data Protection.
• Drive the review and enhancement of third-party vendor risk management and establish a holistic framework and structure to manage the risk.
• Ensure the Information & Cyber Security practices are in compliance with applicable laws, regulations and policies.
• Conduct regular communication and refresher briefing to senior management to maintain a good level of Information & Cyber Security and information risk awareness.

Requirements

• Degree in IT/Computer Studies or Diplomas with extensive relevant cybersecurity experience
• At least 5-7 years of relevant working experience in the field of Information Security and Cybersecurity
• Possess at least one of professional cyber security certifications such as CISA, CISSP and CISM. Those with CEH, CRISC will have added advanatages.
• Good communication, interpersonal skills, with proven abilities to manage multiple priorities, drive project teams and collaborate across business units and partners to achieve desired goals.
• Possess Information & Cyber Security domain knowledge across areas such as IT architecture and solutions, security operation center, application security, infrastructure & network security, data & information protection, supply chain security, cloud security, Information & Cyber Security regulations and compliance will have added advantage.
• Strong experience and knowledge in technology and Information & Cyber Security standards and policy review, oversight and governance, risk management and audit.
• In-depth knowledge of industry information and cyber security practices, frameworks and standards such as the NIST Cybersecurity Framework and ISO 27001.
• Hands-on working knowledge in managing and delivering security penetration testing, vulnerability management services and application security.

SSE has big ambitions to be a leading energy company in a low carbon world. Following our commitment to invest £20.5 billion in low carbon projects to 2027, we have significant growth plans and are well on our way to achieving our ambition to build a world that's more sustainable and inclusive for you, your family, the community you live in and for generations to come.

Join us on our journey to net zero and help us power change.

About the Role

Base Location: Reading, Havant, Glasgow

Salary: £55,573 - £63,643 and a range of benefits to support your finances, wellbeing and family.

Working Pattern: Permanent | Full Time | Flexible First options available

The main purpose of this role is to support the group-wide adoption of the Information Governance Framework by taking the lead in co-ordinating and supporting the end-to-end process & response plan for eDiscovery and the Request for Information procedure.

This role will involve acting as an eDiscovery Subject Matter Expert, using the Electronic Discovery Reference Model (EDRM) framework and working within a cross functional team. It will lead collaboration across SSE corporate services, business units & third-party services to source information required to respond to legal, regulatory & contractual requests for information, ensuring requirements and deadline dates set by regulators or legal process for responding are met.

This role operates in the 'hub of a 'hub and spoke model and will support the Group Data Governance Manager in the implementation of a group-wide strategy around information management, ensuring that Information Governance processes and rules are optimised across the business units and corporate functions ('the spokes).

Key Responsibility

- Support the development, implementation, and maintenance of the eDiscovery process framework.

- Enhance eDiscovery case management - providing comprehensive support in coordination and guidance, and in driving best practice throughout the organisation to ensure seamless integration throughout the end-to-end eDiscovery process.

- Act as the eDiscovery Subject Matter Expert for the SSE group. Promote awareness of the importance of eDiscovery by developing and delivering communications, training, education, and adoption initiatives to improve corporate knowledge about key concepts.

- Develop and maintain a suitable monitoring and reporting approach to communicate the value of the eDiscovery framework implementation to wider stakeholders and to measure progress against defined goals and targets.

- Support in the implementation of Information Governance Framework.

What do I need?

To be considered for this role, we would love you to have:

- Experience in eDiscovery case management and coordinating eDiscovery response plans.

- Experience of using Microsoft Purview eDiscovery platforms for eDiscovery processing, review, and production.

- Knowledge understanding & experience of document discovery requirements & activities for litigation processes and regulatory investigations within energy sector or similar.

- In-depth understanding of Information Governance and EDRM framework.

- Good Stakeholder management and communication skills, a proactive self- starter.

About our Business

SSE IT underpins the technology needs of all the different businesses that make up the SSE group. From emerging technologies to data and analytics to cyber security - we power SSE's growth and enable it to generate value, while keeping it secure. As a trusted business partner that helps SSE lead in a low carbon world, we are proud of our service. Working for SSE IT is all about equipping SSE for now and the future.

What's in it for you?

We offer an excellent package with 34 days annual leave entitlement. Enhanced maternity/paternity leave, discounted healthcare, salary sacrifice car leasing and much more, view our full benefits package on our careers site.

As an equal opportunity employer we encourage diversity and are committed to creating an inclusive environment for all employees. We encourage applicants from all protected characteristics and commit to providing any reasonable adjustments you need during the application, assessment and upon joining SSE. Search for 'Inclusion & Diversity at SSE' to find out more.

Further actions

All applications should be made online, and I'll be back in touch after the vacancy closing date to let you know the outcome.

If you would like to discuss any working flexibly requirements or adjustments you may require throughout the recruitment and selection process, please contact / 01738 275846.

Before commencing your role with SSE, you'll need to complete our pre-employment screening process. This will consist of a criminality and credit check.

A relevant degree within IT/IM or a related field
Professional certifications in Information security from industry standard frameworks (e.g. ISACA, BCS, CIPP, ITIL, Crest, ISC2, COPTIA)
Advanced knowledge of OT systems (ICS, SCADA), network architecture, network protocols, security best practices and response processes.
Familiarity with the ISA95/98 and Purdue models for industrial IT and the typical operating practices in that engineering environment
Understanding of operational risk posed by cyber physical environments
Working knowledge of ISA95, IEC 62443 and NIST SP 800-82r3.
Familiarity with firewalls, intrusion detection/prevention systems (IDS/IPS), and network monitoring tools
Working knowledge of automated malware analysis programs
Proficiency in securing various operating systems, including Windows, Linux, and macOS
Working knowledge of SIEM and other volumetric data systems
Knowledge of industry standard security products, including end point agents, remote capturing tools and other security related products
Ability to obtain and act on vulnerability information and conduct security risk assessments,
... Click here to view more detail / apply for OT Security Operations Analyst

1. Responsibilities

· Strategic planning for IT security investments and technology adoption to maximize effectiveness of IT security controls against rapidly evolving threats.

· Develop and enhance the integrated Security Operations Centre (SOC) for advanced cyber threat monitoring and detection, early warning and active defence capabilities for both the Financial Sector and MAS as an institution.

· Work closely with internal and external stakeholders to manage the operations of the integrated SOC.

· Develop and implement cyber resilience frameworks, standard operating procedures and playbooks for cyber security operations and incident response.

· Ensure that cyber threats, risks and vulnerabilities are appropriately investigated and addressed promptly.

· Coordinate the investigations of cybersecurity incidents with internal teams and cross agency partners.

· Perform periodic management and third-party reporting.

· Work with partners to perform periodic rules tuning, streamline procedures and implement automation to improve efficiency and quality of output.

· Participate in various internal, external and international forums/projects on cyber security.

· Broad understanding of Financial Sectors operations will be provided so that we can better relate the linkages between business and cyber operation.

2. What we are looking for

• Strong interest in SOC operations.

• Hands-on experiences with implementing services/application on Windows and/or Linux preferred.

• Hands-on experiences with prevailing SIEM tools preferred.

• Hands-on experiences with prevailing cloud technologies preferred.

• Scripting/coding skills preferred.

• Normal office hours, but off-office hours standby to respond to exigencies is expected.

• Management of technical projects/implementation is expected.

• Writing of proposals and procurement related work is expected.

KEY ROLES AND RESPONSIBILITIES

• Ensure enhancement of SOC for cyber threats monitoring, detection, analysis and response through the use of threat intelligent and automation

• Project management and Vendors Management

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Synthesize multiple information sources and analysis reports into a holistic view of potential threats

• Conduct in-depth research into cyber security issues of industry- or nation-wide significance

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Develop a playbook for cyber incident management

• Perform the remediation and resolution of cyber incidents at the organizational level

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 3-5 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Advance Persistence Threat Solution

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Familiar with Kill Chain methodology, MITRE Att&ck, NIST Cybersecurity Framework, ISO 27001, 27002 and etc.

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

Job description
We are seeking a highly skilled and experienced Senior Cyber Security Analyst to join our team. As a Senior Cyber Security Analyst, you will play a pivotal role in safeguarding our organization's systems, networks, and data from cyber threats. Your expertise in cybersecurity frameworks, risk assessment, incident response, and security operations will be crucial in protecting our assets and ensuring compliance with industry regulations. This is an exciting opportunity to lead and contribute to our cybersecurity initiatives while mentoring junior team members.

Responsibilities:
• Lead the development and implementation of comprehensive cybersecurity strategies and initiatives.
• Conduct regular security risk assessments, identify vulnerabilities, and recommend appropriate controls and countermeasures.
• Monitor and analyze security events, alerts, and logs to detect and respond to potential threats and breaches.
• Lead incident response efforts, including investigation, containment, eradication, and recovery, ensuring timely and effective resolution.
• Collaborate with cross-functional teams to design and implement secure infrastructure, systems, and applications.
• Conduct security assessments and penetration testing to identify and address vulnerabilities.
• Provide guidance and support in the development and implementation of security policies, standards, and procedures.
• Stay up-to-date with the latest cybersecurity threats, trends, and technologies, and recommend proactive measures to enhance our security posture.
• Mentor and provide guidance to junior members of the cybersecurity team, promoting professional growth and development.
• Ensure compliance with relevant industry regulations and frameworks (e.g., ISO 27001, NIST, GDPR).

Requirements:
• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience).
• Must have at least 2 years of proven work experience as a Cyber Security Analyst, with a focus on security operations, incident response, and risk assessment.
• In-depth knowledge of cybersecurity principles, frameworks, and best practices.
• Experience with security monitoring tools, SIEM solutions, and threat intelligence platforms.
• Familiarity with penetration testing methodologies, vulnerability assessment tools, and secure coding practices.
• Strong understanding of network security, firewall configuration, intrusion detection systems, and endpoint protection.
• Proficiency in scripting languages (e.g., Python, PowerShell) for automation and security tool integration.
• Familiarity with cloud security principles and technologies (e.g., AWS, Azure).
• Excellent analytical and problem-solving skills, with the ability to analyze complex security issues and recommend effective solutions.
• Strong written and verbal communication skills, with the ability to convey complex security concepts to technical and non-technical stakeholders.
• Relevant certifications such as CISSP, CISM, CEH, or GIAC certifications are highly desirable.
• Proven leadership skills, with the ability to lead and mentor junior team members.

Additional Information:
We offer competitive compensation packages, a collaborative work environment, and opportunities for professional growth and development. If you are a highly skilled and motivated Senior Cyber Security Analyst looking to make a significant impact in a forward-thinking organization in Australia, we would love to hear from you. Apply today with your resume, cover letter, and any relevant certifications.

Permanent Residents (PR), Australian / Citizens are eligible to apply Job Type: Full-time Salary: $80,000 to $120,000 per year (inclusive of super)

ABOUT US
Change your lifestyle and live and work in a vibrant community and great coastal environment.
Ballina Shire Council is situated on the Far North Coast of New South Wales, 20 minutes from Byron Bay and one hour from the Gold Coast. The shire is a popular tourism destination with pristine beaches, rainforest retreats and hinterland hideaways.
ABOUT THE ROLE
Position
We are seeking an appropriately experienced and passionate cyber security professional to join Council's dedicated Information Services team. Reporting to Council?s Coordinator Information Technology, this position will support the team in ongoing system evaluation, selection, development, implementation and maintenance to protect Council?s information assets.
Key focus areas of the position will be to maintain staff alertness around cyber risks and mitigation strategies, and to monitor processes and systems to ensure adherence and implement improvements to information security policies, standards


... Click here to view more detail / apply for Cyber Security Analyst

As an intern, you will be assigned to support our Information Security & Privacy activities within the plant.

• Support the preparation of Information Security & Privacy (ISP) audits.
• Support the implementation of projects related to access rights management.
• Provide support with administrative tasks and documentation related to ISP and data protection initiatives.
• Prepare reports, dashboards, and visualizations to communicate findings and recommendations.
• Collaborating with various departments to integrate ISP concepts throughout the plant.
• Assist in the planning and coordination of ISP awareness initiatives, including information security-focused events, workshops, and training sessions.
• Designing visually compelling posters and communication materials to enhance information security awareness.
• Undertaking additional ad-hoc administrative responsibilities.

Summary

Working as part of the information security office within the IT department at Pacific Prime CXA, the GRC (Governance, Risk and Compliance) Manager will be responsible for leading the day-to-day IT compliance, data governance and IT risk management functions. Primary responsibility will include defining, creation, management and maintenance of IT and organizational policies and standards in support of legal and regulatory compliance needs as well as general IT and organizational information security controls and practices.

Responsibilities

• Establishing corporate information security policies, standards, guidelines, baselines and practices that protect the integrity and confidentiality of information and network infrastructure.
• Develop procedures and controls to assure compliance with applicable regulatory and legal requirements as well as good business practices.
• Proactively identify audit and compliance related issues to reduce the risk of security exposures, gaps in the design and operating effectiveness of controls whilst seeking opportunities for continuous improvement.
• Driving IT security programs in line with internal and external standards and ensuring compliance with in-country regulatory requirements.
• Maintaining oversight to enterprise-wide security technologies, actively monitoring & responding to security events.
• Develop and maintain standards and controls to ensure the protection of data based on classification.
• Work directly with business units to identify critical data and ensure appropriate data classification and protection standards are implemented.
• Manage the attestation program for all IT controls to support assurance and alignment across all information security stakeholders.
• Support internal and external audit process for relevant compliance concerns including PDPA, GDPR, MAS TRM, ISO27001, etc.
• Perform and evaluate information security risk assessments for various information systems and processes, including annual penetration tests.
• Develop, monitor, track and report against IT Security metrics and KPIs that help the IT Infra understand threats, vulnerabilities and risks associated with protecting information across the enterprise and plans to mitigate those risks.
• Develop and maintain the IT Risk Register to support ongoing tracking and management of all identified risks and issues and to ensure adequate and timely resolutions to all audit/review issues relating to security.
• Lead the development and operation of third-party vendor risk assessment, management and due-diligence program.
• Conduct client meeting and drive all the questions arising from client relationship teams. This includes completing client’s info security questionnaires and liaising with clients on all such requirements within tight deadlines.
• Formulate, lead and communicate security goals and objectives based on an integrated understanding of business priorities, security vision and strategy.
• Providing security related support to IT and business team users and facilitate recommendations on future technical trends/directions that encompass multiple systems and teams to meet business critical initiatives.
• Point of contact to assist and advise on Information Security related matters

Requirement

• BSc in Computer Science or equivalent; with 5+ years of relevant working experience in IT governance, risk, and compliance management.
• ISACA / CISM / CISSP Certification.
• Strong understanding of fundamental information security concepts and technology.
• Familiarity with ISMS and security frameworks, particularly NIST Cybersecurity Framework.
• Understanding of Information Security principles, IT infrastructure (including operating systems, applications, communications and network protocols), architecture elements of Identity Access Management (IAM), network security, data security/DLP, cryptography, logging and monitoring.
• Experience in security design, threat modelling and risk assessments.
• Candidate should be fully aware of the current and emerging security solutions available in the industry.
• Ability to be self-motivated, flexible and be able to drive and manage multiple tasks and priorities on very tight deadlines in a fast paced and rapidly changing environment.
• Strong interpersonal and collaboration skills with the ability to develop, maintain and foster constructive relationships with others.
• Excellent written and oral communication skills.
• Effective communication and analytical skills
• Strong work ethic with attention to detail.

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities, and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Your background

• Strong experience in cyber security
• Strong experience in vulnerability management and configuration management for RedHat OpenShift
• Full-stack development with expert knowledge of Angular and Node.
• Expert knowledge of developing Edge/Chrome Browser Extensions.
• Expert knowledge of building CI/CD pipelines for RedHat OpenShift.
• Expert knowledge of designing and implementing microservices.
• Experience with large scale, globally distributed systems with an emphasis on high availability.
• Degree in Computer Engineering.

What you can expect

This role is responsible for developing and delivering complex requirements to accomplish business goals for Cyber Security Technology. Key responsibilities of the role include ensuring that software is developed to meet functional, non-functional, and compliance requirements. This role ensures solutions are well designed with maintainability/ease of integration and testing built-in from the outset. These individuals possess strong knowledge of Information Security in addition to expert proficiency in development and testing practices common to the industry and have extensive experience of using design and architectural patterns.

What you will do

• Design and develop browser extension for information security.
• Design and develop world class UI using best in class front end technologies.
• Design and develop microservices based back-end services using modern programming languages like node and/or java.
• Build and maintain CI/CD pipelines for deploying applications on RedHat OpenShift.
• Maintain and enhance vulnerability platform for container-based applications.
• Develop, maintain and advocate technology standards and preferred tech stack for Cyber Security Technology product development team.
• Research, design, and develop computer and network software or specialised utility programs.
• Analyse user needs and develop software solutions, applying principles and techniques of computer science, engineering, and mathematical analysis.
• Update software, enhances existing software capabilities, and develops and direct software testing and validation procedures.
• Work with computer hardware engineers to integrate hardware and software systems and develop specifications and performance requirements.

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators