דרושים Network Defense Developer ב-Bank Of America ב-United States, Chicago

Job Description:

Job Description:

This job is responsible for defining and leading the engineering approach for complex features to deliver significant business outcomes. Key responsibilities of the job include delivering complex features and technology, enabling development efficiencies, providing technical thought leadership based on conducting multiple software implementations, and applying both depth and breadth in a number of technical competencies. Additionally, this job is accountable for end-to-end solution design and delivery.

The team has a strong focus Cryptography and promotes enterprise wide adherence to the Cryptography Standard. There are a few key projects in which you would be involved. First, there is the development of the Cryptographic Inventory Platform, which will help to demonstrate adherence to all requirements listed in the standard. Second would be participation in the design and development of the future road map to ensure the bank is prepared for Post Quantum Cryptography.

Key Responsibilities:

• Ensures that the design and engineering approach for complex features are consistent with the larger portfolio solution
• Define the technology tool stack for the solution and evaluate and adapt new testing tool/framework/practices for team(s)
• Enables team(s)/applications with Continuous Integration/Continuous Development (CI/CD) capabilities and engages with other technical stakeholders pertaining to efficient functioning of CI-CD pipeline
• Guides and influences team(s) on design and best practices for high code performance –e.g. pairing, code reviews
• Provides end-to-end delivery of complex features, including automation, for either a single team or multiple teams, at the program level
• Conducts research, design prototyping and other exploration activities such as evaluating new toolsets and components for release management, CI/CD, and features
• Works with stakeholders to establish high-level solution needs and with architects for technical requirements
• Leverage initiative programs and coordinate with product owners to merge technical and business change to enable us to move forward on this journey.
• Design and execute the implementation plans to both move forward strategically, while at the same time ensuring the current technology stack is supporting current needs
• Manage multiple priorities, and simultaneously engage with multiple teams worldwide
• Be vocal and actively participate in all session with business stakeholders and agile teams
• Coach and mentor team members

Required Qualifications:

• 5+ years of experience leading development teams
• Strong hands-on coding ability in C# language with experience working in ASP.NET MVC framework and .NET Core (required)
• Strong hands on experience with JavaScript - specifically Node.js or React.js (required).
• Database experience with SQL Server and other common relational DBs (required)
• Enterprise level software/platform architecture experience, including designing and delivering APIs and leading complex integrations
• An understanding of fundamental algorithms and ability to optimize existing code
• Proficient written and verbal communication skills to support and shape the platform and clearly articulate technical designs and concepts; and to communicate effectively with all levels within the organization
• Self-starter with the ability to challenge conventions; excellent communication skills
• Strong analytical skills which enable ability to problem solve, apply reason, take initiative, use judgment, and perform concurrent tasks
• Relationship building skills
• A team player with strong interpersonal skills, e.g. collaborative working skills
• Follows clean code principles
• Follows Test Driven Development practices including continual integration
• Experience of Scrum/ Agile methods
• Experience with data modeling inclusive of ingesting and storing data

Desired Qualifications:

• Knowledge of Data at rest crypto, i.e - Key Management/Lifecycle
• Strong understanding of key exchange protocols and message authentication codes, along with practical implementation experience
• Familiarity with modern security protocols such as TLS and SSH
• Knowledge of Post Quantum Cryptography and its implications on system security and encryption
• Familiarity with NIST, ISO, PCI-DSS standards
• Knowledge Cloud Service Providers and key protection
• Bachelor’s degree in Computer Science or related technology field or equivalent work experience

Skills:

• Automation
• Influence
• Result Orientation
• Stakeholder Management
• Technical Strategy Development
• Application Development
• Architecture
• Business Acumen
• Risk Management
• Solution Design
• Agile Practices
• Analytical Thinking
• Collaboration
• Data Management
• Solution Delivery Process

Job Description:

Job Description:

Required Skills

• 7+ years of IT experience with at least 5 years of experience in offensive security.
• Experience with designing and developing custom implants, loaders, and post-exploitation tools for red team engagements.
• Comprehensive knowledge of command-and-control frameworks like Cobalt Strike, Mythic, Havoc, and Sliver.
• Experience with researching and implementing EDR evasion techniques, including userland and kernel-level bypasses, in-memory execution, and telemetry disruption.
• Must demonstrate knowledge of tactics, techniques, and procedures associated with malicious insider activity, organized crime/fraud groups and both state and non-state sponsored threat actors.
• Must be able to critically examine an organization and system through the perspective of a threat actor and articulate risk in clear, precise terms.
• Must be able to both work independently as well as effectively work in teams with individuals with a variety of skills and backgrounds
• Able to collaborate with other teams and communicate security concepts effectively.
• Must have a strong background using low-level languages (C/C++).
• Must have experience with PE file format and low-level Windows internals.
• Must have experience with reverse engineering and Windows debugging (IDA, Ghidra and WinDBG).

Skills:

• Advisory
• Innovative Thinking
• Technical Documentation
• Technology System Assessment
• Threat Analysis
• Adaptability
• Collaboration
• Executive Presence
• Scenario Planning and Analysis
• Test Engineering

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

This job is responsible for developing and delivering complex requirements to accomplish business goals. Key responsibilities of the job include ensuring that software is developed to meet functional, non-functional and compliance requirements, and solutions are well designed with maintainability/ease of integration and testing built-in from the outset. Job expectations include a strong knowledge of development and testing practices common to the industry and design and architectural patterns. Focus area would be UI/Dashboard development, Batch engineering to optimize the grid and other resources shared, developing automation tools and utilities.

LOB Specific Description:

The Strategic Full Reval Capability (SFRC) technology team is responsible for developing risk solutions to meet enterprise-wide regulatory requirements. The primary focus of the team is on building scalable risk generation for use cases across Global Markets. End users include trading desks, senior trading management, market risk management, Global Risk Analytics and Finance groups. SFRC technology is a global team of highly skilled and motivated developers using agile methods to iterate quickly and work closely with users to deliver superior trading risk technology.

Responsibilities:

• Codes solutions and unit test to deliver a requirement/story per the defined acceptance criteria and compliance requirements
• Designs, develops, and modifies architecture components, application interfaces, and solution enablers while ensuring principal architecture integrity is maintained
• Mentors other software engineers and coach team on Continuous Integration and Continuous Development (CI-CD) practices and automating tool stack
• Executes story refinement, definition of requirements, and estimating work necessary to realize a story through the delivery lifecycle
• Performs spike/proof of concept as necessary to mitigate risk or implement new ideas
• Automates manual release activities
• Designs, develops, and maintains automated test suites (integration, regression, performance)

Required Qualifications:

• 5 years of applicable experience
• Strong Python development skills
• Track record of developing large scale systems using Python for application layer
• Track record of developing UI and dashboards

Desired Qualifications:

• Exposure to Risk platforms within Global Markets

Skills:

• Application Development
• Automation
• Influence
• Solution Design
• Technical Strategy Development
• Architecture
• Business Acumen
• DevOps Practices
• Result Orientation
• Solution Delivery Process
• Analytical Thinking
• Collaboration
• Data Management
• Risk Management
• Test Engineering
• API development
• Framework development for Batch optimization, regressions, production stability
• UI development using standard frameworks and technologies like ReactJS, javascript, HTML5

Minimum Education Requirement:Bachelor's Degree in Computer Science or related field OR equivalent professional experience.

• End-to-end cyber security monitoring and response. In addition, team members with a strong Developer background will work to increase response automation and efficiency.
• Responding to, researching, measuring, detecting and mitigating security attacks that target the network and application layers
• Exercising judgment within broadly defined practices in selecting methods, techniques and evaluation criterion for obtaining results
• Designing and implementing secure solutions to meet customer/client needs while protecting the Bank’s assets
• Providing subject matter expertise
• Collaborating with peers and business units in a team-focused environment

• 1-3 years of programming is preferred. Python is preferred language, but experience with other object oriented languages also welcome: Java, JavaScript, C#, C++, R, Ruby, Perl, PHP, etc.
• Strong understanding of the TCP/IP protocol stack.
• CISSP, CCIE, CEH, CCNA is desired, but not required
• Experience with firewalls, access control lists (ACL's), Intrusion Detection & Prevention technologies, and other network security equipment is desired
• A working knowledge of security threat vectors such as Distributed Denial of Service (DDoS) attacks, networking, network security and application security desired.
• Advanced problem solving skills
• Demonstrates the capability of working in a team environment and collaborating with oversea partners.
• Ability to work without oversight.