Sr Analyst - Apps Prog jobs at Bank Of America in India, Hyderabad

Responsibilities*

• Design, develop, test, implement, and integrate Identity and Access Management (IAM) systems and solutions. Ensure that solutions protect information resources against unauthorized use, inappropriate degrees of access, disclosure, damage and/or loss.
• Identify, analyze, and resolve system design weaknesses. Troubleshoot and manage the resolution of issues related identities, systems, access, accounts, authentication, authorization, entitlements, and permissions.
• Determine and recommend the most appropriate response to identified more complex problems, issues and/or defects by assessing impact and prioritization.
• Ensure the maintenance and monitor IAM systems. Troubleshoot, support, and resolve system incidents, problems and changes, as required.
• Design reusable strategies, decisions, service components, libraries, and frameworks to support enterprise-level IAM services.
• Plan and deployment of IAM solutions including onboarding of applications.
• Provide level 2 and level 3 support for clients and coordinate as needed.
• Produce IAM technical documentation such IAM detailed design, configuration guides etc.
• Support on business development (bids) including defining scope of work and interacting with clients and the vendors as required during the proposal development as a part of project and developer teams.
• Risk Management - Review and Monitor the process for risk evaluation and reduction along with audit readiness.

Requirements*

BE/BTECH/MCA/MSC (IT) equivalent (Any Technical Degree)

Certifications If Any:ITIL, MCP, CISA/CISM

: 5 - 8 Years

Foundational skills*

• Strong understanding of Identity Access Management architecture, technology, and standards.
• Strong quantitative, Analytical, data intuition and problem-solving skills.
• A minimum of 3+ years of experience in Identity and Access Management domain is required.
• Understanding of IAM Controls and Information Security.
• Strong knowledge of HTML and SQL knowledge.
• Strong Scripting knowledge (PowerShell, Json, etc.).
• Moderate knowledge of cloud-based identity and access management solutions such as AWS IAM, Azure, AD, or Google Cloud Identity.
• Ability to efficiently acquire and utilize new skills in response to change.
• Experience working in a team-oriented, collaborative environment.

Desired skills

• Linux/Windows/LDAP+SQL
• Experience in one of IAM solutions such as: CyberArk, NetIQ, ForgeRock, RSA, PKI, SailPoint, Ping Identity
• Experience in Rest API, JSON etc.
• Good Presentation skills
• Able to prioritize and execute tasks in a fast-paced environment.

Work Timings*

11:30 AM - 8:30 PM IST

:

:

:

• Ensure the Servicenow support is provided in line with organization Controls.
• Support and maintain the ServiceNow platform in alignment with the strategy.
• Enforce Support standards for servicenow.
• Review and evaluate demand for fit and alignment to products and identify complex features requiring additional due diligence.
• Provide input to and sign off on solution design for complex features.
• Adhere to ServiceNow quality control processes and routines.

:

:B.E/BTech Comp Science, M.C.A

: 2 years – 5 years

:

• Experience in ServiceNow Platform operations.
• Experience in highly regulated IT lifecycle management, including system security, auditing, data processing and analytics, software development methodologies, and technology transitions.
• Experience building and managing IT solutions, including integrating multiple services in ServiceNow or other cloud technologies.
• Experience supporting ServiceNow integrations for security, risk, and compliance.
• Experience leveraging MID servers for integration and automation.
• Experience with front-end technologies like HTML, CSS, and JS.
• Experience with custom REST/SOAP APIs (web services).
• Experience with ServiceNow Discovery and other Configuration Management Database (CMDB)population toolsets.
• Experience with CMDB design and implementation.
• Experience with ITIL Operations Application design and implementation (incident, problem, change, service request, etc.).
• Experience gathering and analyzing system requirements.

:

• ServiceNow certified implementation specialist (CIS).
• ServiceNow certified application developer (CAD).

:11.30 am – 8.30 pm

:Chennai , Hyderabad

Process Overview*

Policy Oversight and Governance is responsible for management, oversight, and creation of the Data, Records, Regulatory and risk Reporting, Standards and quality assurance of adherence. The process revolves around building a robust governance structure to ensure policy adherence across enterprise. Overall QA process shall ensure quality and standard conformance based on set policy guidelines.

Job Description*

This role requires the ability to develop and own end to end processes, maintain existing code, analyze report requirements, and develop based on requirements using SharePoint, JavaScript, Tableau, and/or other technology recommended tools. Knowledge of Regulatory Reporting Policy and Risk Data Aggregation Policy is a benefit. This position requires the ability to communicate effectively and work across multiple teams to support various initiatives. Self motivated, responsible, and due diligence are key drivers to be successful in this role.

Responsibilities*

Responsible for supporting business process automation through SharePoint development, JavaScript and other necessary tools. Responsible for performing more complex analysis for minimizing risk and operating losses and/or other financial and marketing exposures. Utilizes portfolio trends to propose policy/procedural changes within segmentation structure to produce optimal results. Excels at risk/reward trade off. Build relationships with internal partners. Duties primarily include the regular use of discretion, independent judgment, the ability to communicate with multiple levels of management and the utilization of core leadership behaviors.

• Experience with systems functional analysis, technology business analysis, and basic understanding of the different technical platforms, SharePoint (or similar tools), databases, and related technologies.
• Proficiency in SharePoint development, DFFS, Nintex, JavaScript/JQuery
• Good expertise in SQL/T-SQL
• Experience with Enterprise Databases; MS SQL Server, Oracle, Hadoop, Teradata
• Ability to work in a fast pace environment.
• Ability to translate high level business requirements into technical data requirements.
• Strong communication skills (verbal, written and presentations)
• Strong attention to detail and due diligence

Education*

• Graduation / Post Graduation

Experience Range*

• 5-6 Years

Foundational Skills*

• Experience with systems functional analysis, technology business analysis, and basic understanding of the different technical platforms, SharePoint (or similar tools), databases, and related technologies.
• Proficiency in SharePoint development, DFFS, Nintex.
• JavaScript/JQuery
• Good expertise in SQL/T-SQL

Desired Skills*

• Good hands-on knowledge on Tableau
• Alteryx experience
• Proficiency in SQL/T-SQL

Work Timings*

• 11:30 am – 8:30 pm IST

Job Location*

Responsibilities*

• Conduct in-depth analysis of various malware alerts and associated events
• Perform both static and dynamic analysis of malware to extract IoCs, identify malware family and take appropriate remedial action
• Proactively respond to and disrupt actions by threat actors, mitigating potential threats
• Perform disk based and memory-based analysis of systems
• Perform real-time analysis and trending of security log data from various security devices and systems
• Execute and improve relevant risk management strategies

Requirements*

Education* -B.E/B.Tech in Computer Science

Certifications If Any*- Not Mandatory

8-12 years

Foundational skills*

• 5+ years of experience ofMalware Dynamic and Statis analysis, Malware reverse engineering
• 5+ years of experience conducting end to end Malware analysis specifically around either Email, Web or Endpoint.
• 5+ years of conducting incident response using commercial products/tools.
• 5+ years of experience in digital forensics
• Knowledge of Assembly language
• Knowledge of C, C#
• Knowledge of Network security
• Determine the purpose of malware, how it operates and what it affects
• Using virtual environments for offline dynamic malware analysis
• Basic knowledge in digital forensics and memory analysis
• Determine if a file executed on a system
• Research used to identify IOCs and malware threat families
• Find origins of malware i.e. hosting IPs/domains
• Understanding of email headers and trace email origins
• Help create/write security tool alerts/detections
• Drive/coordinate projects requiring malware analysis expertise
• Communicate technical outcomes to non-technical partners
• Thorough documentation of findings and actions taken
• Prepare technical reports and executive summaries related to major malware incidents
• Provide management with timely, comprehensive, and accurate updates in both written and verbal form
• Knowledge of current malware tactics and trends
• Knowledge/experience of at least one major cloud services provider (AWS, Azure, GCO) technologies in context of malware controls and malware analysis Experience in encryption/obfuscation and how to reverse engineer the same
• Experience of creating innovative ways to track progression of malware families, infrastructure and campaigns conducted by various threat actors
• Ability to create scripts and other forms of automation.
• Problem solve and make decisions based on evidence
• Basic computer/software troubleshooting skills

Desired skills*

GCIH, GREM, GCFA, CISSP or CCSP desirable

Work Timings* -Any Shift between 06:30 AM to 10:30 PM

Hyderabad, Mumbai

Job Description

The individual will be a part of the Risk function for APS&E and will be responsible for pro-active risk management and for promoting a risk aware culture across APS&E teams. The role will involve encouraging delivery teams to identify potential risks, debating and reviewing their remediation plans, tracking their progress and monitoring sustenance of the actions taken. The role will also involve performing periodic spot checks, mock audits and QA checks to identify potential risks and enable their remediation in a pro-active manner. He / She will be required to build strong partnership with various risk related stake holders (BCMR, Migrations, COR, Business Continuity team etc.) both within GBS as well as in Global teams. The role will be required to represent GBS in Global Audit/ RII/ SII related remediation initiatives. The role will also be required to perform other risk related activities for GBS owned and aligned processes.

Responsibilities

• Drive Risk Culture
• Risk Champion for APS&E
• QA and PARCM implementation for APS&E
• Ensure accuracy and completeness of PARCM inventory
• Drive resolution of the PARCM inventory exceptions
• Perform spot checks and risk assessments for key themes in APS&E
• Interface with GBS partners: BCMR, COR, GBCR, Migrations
• Interface with APS&E FLU Risk partners
• Represent GBS in Global Audit/ RIAI/ SIAI remediation
• Prepare and present Process Health and Risk dashboards for APS&E Mgmt
• Drive periodic routines for Risk program governance

Requirements

B.E. / B. Tech/M.E. /M.Tech/B.Sc./M.Sc./BCA/MCA(prefer IT/CS specialization)

Not Mandatory

years

Foundational skills:

• Knowledge on ITIL, Prod Support and info sec functions
• In-depth knowledge of the risk/ issue lifecycle
• Experience in performing technology audits
• Experience in supporting and/ or managing risk for Prod Support
• Experience in developing and implementing solutions for remediating risks
• Experience in tracking and governance of risk related initiatives
• Communication skills
• Conflict Management
• Ability to prioritize and manage tasks with limited or no follow ups
• Ability to influence without direct authority – especially when working with large teams
• Ability to adapt communication styles and content based on audience
• Ability to quickly learn/ understand new technology or domain (from a risk point of view)

Desired skills:

• Knowledge of Bank’s Risk framework and processes will be an added advantage.
• Certifications like CISA/ CISSP will be an added advantage
• Experience in leading a Prod support team
• Knowledge of Banking and Finance

10.30 AM to 07.30 PM

Job Description:

Job Description

Job Description:

ISO 8583 Payment processing for Merchant Services, Unix, Splunk, Dynatrace, Production support knowledge on Merchants or Payments Domain, AWS will be added advantage.

Responsibilities:

You will be responsible for support of applications relative to Merchant & Payment industry, Cards, POS Terminal and transaction processing protocols i.e., ISO 8583, fixed length message formats etc.

As a Support Engineer, you can look forward to:

· Supporting card transactions for Visa, MC, AMEX, DISC.

· Analyzing transaction failures and make recommendations to improve application reliability and quality, support processes, practices, and procedures.

· Making strong technical decisions and complete tasks & assignments under limited supervision.

· Recognizing problems that need further investigations, seeking assistance when needed, and demonstrating initiative and self-motivation.

· Ensuring documentation of production incidents and collaborate with different support and development teams and resolve issues.

· Assisting the team in devising new support processes and ensure their implementation as per company policy.

Requirements*

• Education* Any Graduation in Engineering/Science/Post Graduate
• Experience Range* 8 to 10 years

Foundational Skills:

Extensive experience in supporting payment gateway or processor for Merchant Services.

• Standards – ISO 8583 message standard, and its versions for different card networks like Visa, MC, Discover, Amex from Merchants gateway.
• E-commerce
  • Hosted Payment Pages/Secure Acceptance
  • Recurring and Tokenized payments
  • Knowledge of payment modules of SPreedly, Shopify, Recurly, Netsuite,
  • E-signature services like Docusign, rightSignature
• Mobile Payments
  • Apple Pay
  • Google Pay
• Point of Sale Technologies
  • NCR
  • PAX
• REST APIs
  • VISA Developer APIs
• Fraud and Transactional Risk Management concepts

• Technologies
• Linux –
  • Scripting - python, shell
  • Tools – Grep, awk, netstat, pstat, free, vmstat
• Networking
  • cacti
• SQL – Oracle preferred
• Programming Language
  • Java (enterprise JBOSS)
  • C++
  • Python

Desired Skills:

Networking – Cacti, Python

• Server Administration experience would be a plus to compliment the card industry experience.
• Administration of tools relative to Payment industry, Cards, ATM & POS Terminal and transaction processing protocols

Work Timings*11.30AM to 8.30PM

Job Description*

The role is in the Cyber Threat Defense (CTD) team of the bank. Key responsibilities of the role include detecting and responding to cyber-attacks against bank’s applications as per established processes and procedures to ensure security, integrity, and confidentiality of the information, contribute to enhancing detection and preventive controls, and continually improve incident response capabilities.

Responsibilities*

•Prevent, Detect, and respond to cyber-attacks against bank’s applications by leveraging advanced tools, processes & procedures, and your technical experience & skills.

•Perform analysis to determine timelines, TTPs used by Threat Actors and impact of the incidents and report them to Cyber Incident Management team as per the process.

•Briefs management and control SMEs on above analysis and collaborate to drive proactive control enhancements.

•Create and update detection rules to detect emerging threats by leveraging logs from various systems and applications.

•Create and update threat prevention and detection rules on Web Application to detect and block malicious activities.

•Collaborate with vendors and internal teams to fix any bugs, control issues or control upgrades.

•Apply a proactive understanding of cyber security threats to prevent incidents, enhance controls, and drive enterprise change

Requirements*

Education* -BE/B.Tech/MCA

6+ Years

Foundational skills*

•Hands-on experience of 6+ years of preventing, detecting, and responding to application layer attacks in a large enterprise environment.

•Strong understanding of common exploits, web application attacks (OWAS top 10 security risk and beyond), network protocols and infrastructure/application logs (eg weblogs, AD logs, security logs) for an efficient intrusion analysis

•Advanced log analysis skills leveraging tools such as Splunk or other SIEM solutions and scripting/regular expressions to find targeted attacks and hunting exercises.

•Good verbal and written communication skills for effective collaboration and incident reporting in a global environment

•Broader understanding Cyber threat environment, common TTPs used by Threat Actors and Defensive controls to defend against such threats

Desired skills*

•Hands-on experience of managing rules on IPS/IDS on leading vendors is desirable

•Hands-on experience of creating and updating Web Application Firewall rules is strongly desirable.

Work Timings* -6:30 AM - 10:30 PM

Hyderabad, Mumbai