דרושים Senior Threat Hunter ב-Bank Of America ב-United States, Charlotte

Job Description:

Role Responsibilities

Required Skills:

• Direct experience performing threat hunting in an active corporate environment.
• 8+ years of experience in a technical role in the areas of Security Operation, Incident Response, Detection Engineering, Offensive Security/Red Team, or Cyber Threat Intelligence.
• Experience analyzing system, network, and application logging for attack techniques at all stages of the cyber kill chain.
• Direct experience working with very large datasets and log analysis tools including but not limited to: Splunk, Python, Pandas, SQL, Hadoop, Hue.
• Experience consuming and analyzing Cyber Threat Intelligence for actionable takeaways
• Ability to apply Cyber Threat Intelligence through enrichment, correlation, and attribution
• Familiarity with offensive security strategies and assessment methodology
• Experience explaining threat hunt objectives in plain English and able to communicate associated risk.
• Ability to see the larger picture when dealing with competing requirements and needs from across the organization in order to build consensus and drive results.
• Ability to navigate and work effectively across a complex, geographically dispersed organization.
• Experience with more than one or more enterprise scale EDR and SIEM tools.
• Previous experience performing digital forensics or indecent response on major security incidents.
• Demonstrated ability to self-direct, with minimal supervision to achieve assigned goals.

Beneficial but not required:

• Knowledge of basic Data Science concepts and processes.
• Experience with offensive security tools such as Cobalt Strike/Metasploit, techniques such as OSINT, and the methods used to compromise large enterprise networks.
• Experience performing security analysis and threat hunting in Cloud environments such as Azure, M365, AWS

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

This job is responsible for driving and executing on internal control discipline and operational excellence within a Line of Business (LOB) or Enterprise Control Function (ECF). Key responsibilities include providing analytical and administrative support for LOB or ECF specific processes and tools to drive adherence to enterprise-wide standards. Job expectations include monitoring and testing controls and implementing quality assurance and quality control processes within the LOB or ECF by evaluating data to help identify, track, and report issues and control improvements for remediation.

Responsibilities:

• Oversees the design and effectiveness of the risk and control environment to support Client Operational Services and ensure adherence to enterprise-wide standards
• Supports the monitoring and testing of controls by evaluating data to identify issues and control improvements for remediation
• Implements optimized controls and enhanced Quality Assurance (QA) practices to support business continuity efforts
• Conducts and coordinates quality inspection reviews to enhance employee performance and control effectiveness
• Performs QA activities including executing on controls, managing cases, and reporting results
• Executes initiatives by identifying areas of potential testing automation, procedural updates, thematic trends, test script updates, and coaching opportunities to enhance QA program success
• Supports the overall management of and research required for regulatory exams, internal audits, and other monitoring and inspection reviews and evaluates data and information relevant to inspection metrics to support governance activities for dashboard reporting

Skills:

• Controls Management
• Issue Management
• Monitoring, Surveillance, and Testing
• Quality Assurance
• Risk Management
• Analytical Thinking
• Attention to Detail
• Critical Thinking
• Problem Solving
• Written Communications
• Decision Making
• Innovative Thinking
• Prioritization
• Recording/Organizing Information
• Research

Line of Business Job Description

The candidate will support the Global Banking & Global Markets Anti-Money Laundering (GB & GM AML) organization and program. This role requires a strong operational risk and compliance background, and understanding of AML requirements. Acts as an ambassador of the risk culture. Incumbents typically have a minimum of 3 years of quality assurance, compliance, audit, and/or business controls experience.

Responsibilities may include:

• Perform root cause analysis of operational events and challenge control weaknesses and breakdowns to properly assess risk disposition
• Perform trend analysis and horizontal impact assessments to determine themes and identify emerging risks
• Support LOB through routine exams with regulators and internal audit
• Implement process control improvements and leverage BAC Risk Framework to effectively manage LOB risk
• Demonstrate strong collaboration, influencing, and relationship management skills to bridge key stakeholders across Audit, Risk, RIGR and LOB SMEs
• Support Audit, Exam and/or Testing processes, ensure proper governance and protocol is followed; assist with preliminary research and response tracking
• Provide solutions to help with implementation of process improvements or remediation plans to drive efficiencies and demonstrate sustainability
• Coordinate and partner across other GB&GM support teams and stakeholders to ensure end-to-end process engagement and timely resolution of monitoring cases
• Be proactive in risk identification and mitigation through activity monitoring processes

Required Skills:

• Working knowledge of Risk, Quality Control/Assurance Framework
• Excellent written and verbal communication skills – ability to tailor messaging to senior management
• Able to understand, analyze, and explain complex workflows
• Self-Starter who can work independently with little guidance or direction
• Ability to meet tight deadlines while working in a flexible environment
• Attention to laws, rules & regulations
• High technical expertise in MS Office platforms
• Project Management skills and ability to manage various project timelines with multiple competing priorities
• Strong verbal and written communication skills as well as interpersonal skills
• Ability to read and understand complex matters, anticipate risks, and summarize key information
• Critical thinking skills to assess data, artifacts and new or unfamiliar business concepts to draw conclusions that are not readily apparent
• Strong research and analytical skills and attention to detail but in context with broader business landscape
• Ability to prioritize effectively, a self-starter, organized, capable of performing work independently with minimal direction.
• Ability to interact with people in all levels of the organization and ability to organize data for executive level reporting
• Strong presentation skills and the ability to present key messages, effective recommendations, and information in a clear, concise, insightful and influential way

Minimum Education Requirement:

• High School Diploma / GED / Secondary School or equivalent

Description Summary:

This job is responsible for ensuring operational data is fit for purpose, defining controls, and monitoring processes are in adherence to enterprise data management standards. Key responsibilities include triaging and remediating data incidents, performing data analysis, training new users, and performing impact analysis stemming from data updates. Job expectations include helping in defining access and ownership of data by domain, conducting quality control, and overseeing data maintenance.

Responsibilities:

• Managing a portfolio of BAU and Initiative project work specific to the enterprise’s Authorized Data Source – serving many LOBs as well as critical risk & loss mitigation functions – engaging to ensure project scope, objectives, requirements, and deliverables are met.
• Ensures data is accurate, complete, and fit for performing data analyses through various testing procedures and data controls which help to identify business insights fit for purpose for a particular product set.
• Develops and executes on Enterprise Data Management policies and standards, works across teams to ensure adherence, serves as a key point of contact for all topics related to data compliance, and manages operational elements of the (Enterprise Data Strategy Governance and Operations (EDSGO) relationship.
• Manages data related incidents and identifies, communicates, and resolves or escalates issues as needed. Data inquiries include questions related to data issues, availability of data, and potential sourcing alternatives to inform.
• Develops, manages, and executes on controls, ensuring tracking, monitoring, and resolution of any control breaches with data platform.
• Execution of daily/monthly control routines supporting the completeness and accuracy of data consumed by downstream stakeholders.
• Conduct Data Quality/Data Validation investigations to determine root cause with focus on mitigating future reoccurrence, including daily reporting of identified breaks.
• Perform manual adjustments on daily/weekly/monthly basis and co-ordinate initial escalation and reporting management to address exceptions, threshold breaches and data quality/data gap remediation.
• Operational Excellence – enhance CFO DM processes through identification and analysis of processes and own the delivery of solution(s).
• Partners with Business and Technology functions to drive the development of business and functional requirements documents and ensures strategic upstream resolution for data related incidents.

Required Qualifications

• Bachelor’s degree in related field or relevant work experience
• Proficient working with large databases, experience with data mining
• Advanced knowledge of Excel, PowerPoint, and SharePoint
• Excellent written and verbal communication skills

Desired Skills

• 5 plus years of relatable experience in a similar function
• Proficiency with Alteryx, Tableau, and SQL programming languages
• Knowledge and prior experience with Regulatory Reporting

Skills:

• Data Collection and Entry
• Data Management
• Data Modeling
• Issue Management
• Policies, Procedures, and Guidelines Management
• Analytical Thinking
• Collaboration
• Data Governance
• Data Quality Management
• Data and Trend Analysis
• Business Acumen
• Controls Management
• Production Support
• Regulatory Compliance
• Solution Design

Description Summary:

This job is responsible for ensuring operational data is fit for purpose, defining controls, and monitoring processes are in adherence to enterprise data management standards. Key responsibilities include triaging and remediating data incidents, performing data analysis, training new users, and performing impact analysis stemming from data updates. Job expectations include helping in defining access and ownership of data by domain, conducting quality control, and overseeing data maintenance.

CFO Data Management (CFO DM) supports other CFO Function’s needs and use cases (e.g., management and regulatory reporting). This role will be responsible for Counterparty Data within a larger data environment. Counterparty refers to the clients and other parties associated with Bank of America’s transactions. Counterparty classification is a key element in many reports.

Responsibilities:

• Ensures data is accurate, complete, and fit for performing data analyses through various testing procedures and data controls which help to identify business insights fit for purpose for a particular product set.
• Develops and executes on Enterprise Data Management policies and standards, works across teams to ensure adherence, serves as a key point of contact for all topics related to data compliance, and manages operational elements of the (Enterprise Data Strategy Governance and Operations (EDSGO) relationship.
• Manages data related incidents and identifies, communicates, and resolves or escalates issues as needed. Data inquiries include questions related to data issues, availability of data, and potential sourcing alternatives to inform.
• Develops, manages, and executes on controls, ensuring tracking, monitoring, and resolution of any control breaches with data platform.
• Partners with Business and Technology functions to drive the development of business and functional requirements documents and ensures strategic upstream resolution for data related incidents.

Additional Responsibilities:

• Provide Subject Matter Expertise for Counterparty data attributes.
• Control Data consumed by CFO, including investigating and developing remediation plans for data quality issues.
• Interface with business partners on their data needs, requirements for new data requests, track and prioritize changes.
• Assist team with data analysis and ensure quality of outputs.
• Create SQL scripts and conduct user acceptance testing on new data requests.
• Collaborate across stakeholders including business reporting, product-specific data stewards, tech partners, upstream data providers/data management, and risk/compliance.
• Identify, review, and evaluate potential upstream systems to determine data sourcing strategy.
• Follow the proper risk disciplines and proactively escalate as needed.
• Adhere to Enterprise Data Management Standards and Risk Data Aggregation requirements.

Required Qualifications:

• Bachelor’s degree in related field or relevant work experience
• Minimum 5 years of relatable experience in a similar function
• Capacity to handle multiple tasks and work in a flexible environment.
• Ability to think and act independently, detailed oriented and organized.
• Strong communication skills and the ability to build relationships across a matrixed organization.

Desired Qualifications:

• Bank of America, Regulatory Reporting experience a plus, including applicable Bank of America platforms (e.g. WCC, CED, CESIUM, PRDS);
• Experience with Agile methodology.
• Knowledge of emerging technologies (e.g. Alteryx, artificial intelligence from a data validation/profiling perspective, etc.).
• Exposure to AML/KYC processes.
• Familiarity with transactional databases;
• Analytics experience with SQL;
• Data Management experience.
• Excellent written and verbal communication skills
• Proficiency with Alteryx, Tableau, and SQL programming language
• Knowledge and prior experience with Regulatory Reporting

Skills:

• Data Collection and Entry
• Data Management
• Data Modeling
• Issue Management
• Policies, Procedures, and Guidelines Management
• Analytical Thinking
• Collaboration
• Data Governance
• Data Quality Management
• Data and Trend Analysis
• Business Acumen
• Controls Management
• Production Support
• Regulatory Compliance
• Solution Design

This job is responsible for defining an architectural vision and solution that supports the strategic outcomes of the Business' Products and Services. Key responsibilities include defining the target operating environment, designing for client resiliency, assisting with solution design, and defining non-functional requirements. Job expectations include working with stakeholders and service providers aligned to the Business' strategic objectives, evaluating the impact of strategic design decisions, and contributing to the architecture roadmap.

Responsibilities:

• Works across the business, operations and technology to create the solution intent and architectural vision for complex solutions and prioritize functional and non-functional requirements into a technology backlog to enable the technology roadmap and functionality to support evolving capabilities and services
• Contributes to the creation of the architecture roadmap of defined domains (Business, Application, Data, and Technology) in support of the product roadmap and the development of best practices including standardized templates
• Clarifies the architecture, assists with system design to support implementation, and provides solution options to resolve any architectural impediments
• Facilitates solution driven discussions, leads the design of complex architectures, and finds creative solutions through knowledge of domain, practical experiments, and proof of concepts while ensuring architecture is flexible, modular, and adaptable
• Educates team members on the technology practices, standardization strategies, and best practices to create innovative solutions
• Supports the team as needed to select the technology stack required for solutions and helps select preferred technology products
• Performs design and code reviews to ensure all non-functional requirements are sufficiently met (for example, security, performance, maintainability, scalability, usability, and reliability)
• Supports for end-to-end infrastructure technology projects for coordinating the requirements, design of servers, network and storage for Bank of America projects
• Role has matrix execution responsibility across all technology organizations and the line of business as well as LOB
• Manages multiple projects or a single complex project
• Partners with Program and Project Managers and SMEs to create business requirements for technology solutions. Assists with technology estimates, manages low to moderate complexity technology solutions for projects to a full-scale deployment in a live environment
• Use the right questions and tools to uncover root causes to business challenges, identify opportunities, and make recommendations
• Look to simplify and standardize application stack and remove developer customization

Required Qualifications:

• 5-7+ years of experience in design and engineering solutions for large business capabilities
• Expert experience and knowledge in design and engineering of applications hosted at external cloud such as Azure and AWS
• Extensive experience in some or all of Distributed Operating Systems, Databases, Middleware, Mainframe and Data Networks
• Experience leading large scale complex projects
• Excellent written and oral communication skills and relationship building skills
• Experience providing end to end design guidance and oversight for large scale initiatives
• Ability to lead a team through technical challenges both tactically and strategically
• Experience translating product roadmaps and key technical strategies and direction
• Technical aptitude - has the ability to learn and adapt to new technologies, applications
• A Self-motivated, hands-on, driven individual

Skills:

• Analytical Thinking
• Architecture
• Result Orientation
• Solution Design
• Technical Strategy Development
• Application Development
• Collaboration
• Data Management
• DevOps Practices
• Risk Management
• Agile Practices
• Automation
• Influence
• Solution Delivery Process
• Test Engineering

Job Description:

Job Description:

We are seeking a highly skilled and experienced Senior Cybersecurity Engineer to join our team. This job is responsible for defining and leading the engineering approach for complex cybersecurity features to deliver significant business outcomes. Key responsibilities of the job include enabling development efficiencies, providing technical thought leadership based on conducting multiple software implementations, and applying both depth and breadth in a number of technical competencies. Additionally, this job is accountable for end-to-end solution design and delivery.

Responsibilities:

• Ensures that the design and engineering approach for complex features are consistent with the larger portfolio solution
• Define the technology tool stack for the solution and evaluate and adapt new testing tool/framework/practices for team(s)
• Enables team(s)/applications with Continuous Integration/Continuous Development (CI/CD) capabilities and engages with other technical stakeholders pertaining to efficient functioning of CI-CD pipeline
• Guides and influences team(s) on design and best practices for high code performance –e.g. pairing, code reviews
• Provides end-to-end delivery of complex features, including automation, for either a single team or multiple teams, at the program level
• Conducts research, design prototyping and other exploration activities such as evaluating new toolsets and components for release management, CI/CD, and features
• Works with stakeholders to establish high-level solution needs and with architects for technical requirements

Required Qualifications:

• Minimum of 8 years of experience in cybersecurity across multiple domains
• Programming & Scripting : Proficiency in programming and scripting languages (e.g., Python, Go, Shell) used for automation and security integration.
• Problem-Solving : Excellent problem-solving skills, with the ability to think critically and adapt to new challenges and communicate insights in simple terms.
• Communication : Strong written and verbal communication skills, with the ability influence at all levels by explain complex security concepts to non-technical stakeholders
• Experience building and operating enterprise solutions

Skills:

• Automation
• Influence
• Result Orientation
• Stakeholder Management
• Technical Strategy Development
• Application Development
• Architecture
• Business Acumen
• Risk Management
• Solution Design
• Agile Practices
• Analytical Thinking
• Collaboration
• Data Management
• Solution Delivery Process

Skills:

• As part of the Management team, this role will manage day to day activities of resources, multiple bodies of work, review documentation of work completed, mange relationship with stakeholders, escalate concerns timely with leadership, and design data strategy for the areas of support

• Plan, perform and lead data audits at the regional level as well as other diverse lines of business and specialty areas

• Responsible for leading responses for regulatory requests, including creating presentation materials, as part of ongoing regulatory exams

• As required, engage with regulators to present data validation work

• Mange staff during Audit engagements and provide feedback on work performed.

• Challenge and leverage risk mindset to influence business leaders to drive proper remediation of regulatory gaps

• Develop test plans designed to address the risk and root cause of the issue

• Work with leadership to effectively prioritize issues that may be past due or high risk

• Closely work with other Audit teams during data validation, issue and other work

Required Qualifications:

• Minimum 8+ years of Audit, Risk, Data or other relevant experience

• Bachelor’s Degree OR Equivalent work experience

• Prior data experience (i.e. analytics; data mining; automation)

• Understanding of Audit practices and methodologies as well as rules for professional and ethical conduct

• Strong critical thinking, problem solving, analytical mindset required

• Must be able to plan, execute, and evaluate audit test plans within a risk-based audit methodology

• Ability to think critically and apply audit and data expertise

• Sound organizational, analytical, oral, and written communication skills

• Demonstrate the ability to manage multiple work efforts and to quickly change direction.

• Ability to operate in a fast paced environment with multiple concurrent priorities.

• Strong written and verbal communications at all levels of management – must be able to make recommendations and articulate conclusions supported by data

• Ability to successfully communicate to influence management and lead change on both strategic and tactical initiatives

• Must have the ability to effectively communicate quantitative topics to technical and non-technical audiences

• Strong interpersonal skills for interfacing with all levels of internal and external audit and management

Desired Skills:

• Knowledge of Bank of America business processes and front end application systems

• Audit or risk control risk/controls background in financial services

• Prior Analytical / Automation Skills (SQL, SAS, Python. Alteryx, Advanced Excel)

• Advanced degree or certifications (CIA, CISA etc – CPA Preferred)

• Strong leadership style, content creation and presentation skills