Bank Of America Vulnerability Analyst Attack Surface & 

Singapore 

390956574

Your background

• Proven experience in Vulnerability Analysis.
• Knowledge of industry standard scoring models such as CVSS, CCSS
• Knowledge of industry standard data models such as CPE and data normalization tools.
• Wide knowledge of application and IT products, interoperability, and extensive knowledge of IT security.
• Knowledge of application development platforms.
• Previous IT Operations experience.
• Strong work ethic and ability to effectively multi-task in a fast-paced support environment.
• A broad knowledge of information security principles.
• Ability to work independently on initiatives with little oversight. Highly motivated and willing to learn.
• Strong analytical skills/problem solving/conceptual thinking.
• Effective communication skills.
• General information security certifications (CISSP / CISM / CCSK / Security+) desirable.

What you can expect

As a Vulnerability Analyst in the Global Information Security (GIS) Cyber Security Assurance (CSA) Attack Surface & Vulnerability Management organization (ASVM), you will be responsible for supporting the core vulnerability assessment activities for the organization. As a Vulnerability Analyst you will leverage your analytic and technical skills to discover and accurately rate cyber risks, evaluate the criticality of key infrastructure assets, assess major information security risks and drive the decisioning behind remediation/mitigation processes to protect the organization. As a member of this key GIS team you will report on risks, make decisions informing remediation timelines, and work with teams to achieve mitigation and/or acceptance of vulnerability risk to resolve organizational cybersecurity challenges.

What you will do

Vulnerability Analysis:

• Analyze vulnerabilities, investigating solutions and recommending appropriate countermeasures to address their risk.
• Research and evaluate threats and vulnerabilities to assist in determining the prioritization and actions required for their remediation.
• Review and validate vulnerabilities using available data sources and tools, as well as identify new data sources as needed.
• Advise stakeholders on appropriate remediation & mitigation solutions.
• Leverage creativity and influence to enhance the overall vulnerability analysis program.