Attack Surface Research AnalystBank of America
Job Summary
Attack Surface Research Analyst
Chester, United Kingdom;Dublin, Ireland
To proceed with your application, you must be at least 18 years of age.
Acknowledge (https://ghr.wd1.myworkdayjobs.com/lateral-emea/job/Chester/Attack-Surface-Research-Analyst_26025957)
Bank of America employees are required to meet all posting eligibility requirements prior to applying for any new position.
Acknowledge (https://ghr.wd1.myworkdayjobs.com/lateral-emea/job/Chester/Attack-Surface-Research-Analyst_26025957)
Refer a friend
To proceed with your application, you must be at least 18 years of age.
Acknowledge (https://ghr.wd1.myworkdayjobs.com/lateral-emea/job/Chester/Attack-Surface-Research-Analyst_26025957)
Bank of America employees are required to meet all posting eligibility requirements prior to applying for any new position.
Acknowledge (https://ghr.wd1.myworkdayjobs.com/lateral-emea/job/Chester/Attack-Surface-Research-Analyst_26025957)
Job Description:
Job Title: Attack Surface Research Analyst
Corporate Title: Up to Vice President
Location: Chester or Dublin
Company Overview :
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.
Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!
Location Overview:
Chester
Find us in the city of Chester, a destination renowned for its culture, history, and beauty. Working at Bank of America Chester offers a far-reaching global career for a world-renowned organisation, whilst being ideally situated against the backdrop of the rolling North Wales hills and the banks of the serene River Dee.
Central Park
Overlooking the spectacular Iveagh Gardens with access to all amenities in the beating heart of central Dublin is our Park Place office. Travel options include the LUAS, Dublin Bus networks as well as the Dublin Bikes station, positioned just outside our front doors. As part of our commitment to supporting staff travel to and from work in the most sustainable way possible, we also provide tax saver tickets as part of our award-winning benefits package which means getting to work has never been easier
Role Description:
The Cyber Security Assurance, Attack Surface Research (ASR) role maintains and performs queries across a wide array of asset enumeration and research toolsets, spanning on-premises and cloud platforms, to effectively map, measure, and report on the topography of the Banks network endpoints and other assets for vulnerability risk.
In addition to core investigative matters, the role is responsible for ensuring the stability and enhancement of the backend infrastructure used to create high quality queries, datasets, and visualizations from various enterprise platforms and security data sources. Individuals in the role will routinely ad-hoc investigate infrastructure and vulnerability asset data in support of partner Information Security teams, to help correctly ascertain and communicate vulnerability risk to both technical and nontechnical stakeholders.
The role requires a highly collaborative, analytical and detail-oriented mindset, with a focus on ensuring conclusions and/or insights reflect innovative thinking as well as accurate information gathering under time pressure to fully answer three core questions as quickly as possible.
Do we have it?
Are we vulnerable?
Is it exploitable?
Persons in this role operate as part of a team developing methods to quickly reference systems of record (SORs), systems of origin (SOOs) and other available data stores to provide a comprehensive, reliable and timely view of the Banks Attack Surface, both as it relates to vulnerability exploitation risk as well as other concerns.
Responsibilities:
Create SQL and Python scripts within Qualys, Tanium and BladeLogic to query datasets, to support Attack Surface Review.
Perform hands-on analysis of large-scale datasets to correlate map, measure, and report on the overall vulnerability attack surface of the Bank.
Leverage Python, SQL, and other languages/platforms to automate data ingestion, transformation, enrichment, and quality validation (ETL)
Develop and maintain visualizations and reports in Power BI or MS-Reporting Services (SSRS) MS-Integration Services (MSIS) that support operational teams, cyber leadership, and stakeholders across Information Security and broader risk teams.
Possesses network architecture experience sufficient to reasonably speak to the Banks data network and architecture in a timely manner to major inquiries as both an individual and as part of projects by the larger team.
Clearly communicate findings through written analysis and live discussions, including executive level summaries
What were looking for:
Deep analytical, problem solving, and conceptual thinking skills
Self-motivated, detail oriented, and able to manage work independently
Amongst others, SQL-backend and Python development experience used for automation, data processing, and integration (as opposed to statistical or ML modeling):
Experience with SQL Server development, including Indexes, constraints, table switching, transaction management, error handling, and activity logging
Experience with SQL Server Integration Services (SSIS), including DevOps integration, scripting tasks, packaging, deployment, and conditional workflows
Hands-on experience with data ingestion and ETL pipelines (batch and near real time)
Python development experience used for automation, data processing, and integration
Experience with SSRS, including subscriptions, report management, Tablix, matrix, and cascading parameters
Intermediate to advanced understanding of network infrastructure, including Servers, switches, load balancers, and related components; basic network segmentation and exposure concepts
Excellent research skills with the ability to identify relevant and/or unconventional data sources for enumeration of enterprise technologies, to understand how various assets operate and/or are used across the Bank, as well as persistently investigate and be able to effectively validate findings.
Skills that will help:
Analytical, problem solving, and conceptual thinking skills
Self-motivated, detail oriented, and able to manage work independently
Strong verbal and written communication skills, with the ability to clearly explain and/or translate technical findings in meetings and documentation
Benefits of working at Bank of America:
UK
At Bank of America, we strive to prioritise employees health and wellbeing its what makes us a Great Place to Work.
Private healthcare for you and your family plus an annual health screen to help you manage your physical wellness with the option to purchase a screen for your partner
Competitive pension plan, life assurance and group income protection cover if you become unable to work as a result of a disability or health reasons
We offer 26-weeks paid maternity leave, 16-weeks paid paternity leave and inclusive family leave arrangements for working parents and carers including 20 days of back-up childcare including access to school holiday clubs and 20 days of back-up adult care per annum
The ability to change your core benefits as well as the option of selecting a variety of flexible benefits to suit your personal circumstances including access to a wellbeing account, travel insurance, critical illness, cycle to work etc.
Use of a flex fund to use towards benefits
Access to an emotional wellbeing helpline, and virtual GP services
Access to the Peppy App which provides 1:1 support, consultations and resources relating to mens health, womens health, fertility, menopause and pregnancy & parenthood
Access to a range of gyms, exercise classes and wellbeing Apps through Wellhub, including Headspace and Calm
Ability to donate to charities of your choice directly through payroll and the bank will match your contribution
Opportunity to give back to your community, develop new skills and work with new groups of people by volunteering in your local area
Good conduct and sound judgment is crucial to our long term success. Its important that all employees in the organisation understand the expected standards of conduct and how we manage conduct risk. Individual accountability and an ownership mind-set are the cornerstones of our Code of Conduct and are at the heart of managing risk well.
We are an equal opportunities employer and ensure that no applicant is subject to less favourable treatment on the grounds of sex, gender identity or gender reassignment, marital or civil partner status, race, religious or similar philosophical belief, political opinion, colour, nationality, ethnic or national origins, age, sexual orientation, pregnancy or maternity, socio-economic background, responsibility for dependants or physical or mental disability. The Bank selects candidates for interview based on their skills, qualifications and experience.
We strive to ensure that our recruitment processes are accessible for all candidates and encourage any candidates to tell us about any adjustment requirements.
Bank of America and its affiliates consider for employment and hire qualified candidates without regard to race, religious creed, religion, color, sex, sexual orientation, genetic information, gender, gender identity, gender expression, age, national origin, ancestry, citizenship, protected veteran or disability status or any factor prohibited by law, and as such affirms in policy and practice to support and promote the concept of equal employment opportunity, in accordance with all applicable federal, state, provincial and municipal laws. The company also prohibits discrimination on other bases such as medical condition, marital status or any other factor that is irrelevant to the performance of our teammates.
View your "Know your Rights (https://www.eeoc.gov/sites/default/files/2023-06/22-088\EEOC\KnowYourRights6.12.pdf) " poster.
View the LA County Fair Chance Ordinance (https://dcba.lacounty.gov/wp-content/uploads/2024/08/FCOE-Official-Notice-Eng-Final-8.30.2024.pdf) .
Bank of America aims to create a workplace free from the dangers and resulting consequences of illegal and illicit drug use and alcohol abuse. Our Drug-Free Workplace and Alcohol Policy (Policy) establishes requirements to prevent the presence or use of illegal or illicit drugs or unauthorized alcohol on Bank of America premises and to provide a safe work environment.
Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. Should you be offered a role with Bank of America, your hiring manager will provide you with information on the in-office expectations associated with your role. These expectations are subject to change at any time and at the sole discretion of the Company. To the extent you have a disability or sincerely held religious belief for which you believe you need a reasonable accommodation from this requirement, you must seek an accommodation through the Banks required accommodation request process before your first day of work.
This communication provides information about certain Bank of America benefits. Receipt of this document does not automatically entitle you to benefits offered by Bank of America. Every effort has been made to ensure the accuracy of this communication. However, if there are discrepancies between this communication and the official plan documents, the plan documents will always govern. Bank of America retains the discretion to interpret the terms or language used in any of its communications according to the provisions contained in the plan documents. Bank of America also reserves the right to amend or terminate any benefit plan in its sole discretion at any time for any reason.
Investment products offered through MLPF&S and insurance and annuity products offered through MLLA:
Are Not FDIC Insured Are Not Bank Guaranteed May Lose Value
Are Not Deposits Are Not Insured by Any Federal Government Agency Are not a condition to Any Banking Service or Activity
Merrill Lynch, Pierce, Fenner & Smith Incorporated (also referred to as MLPF&S or Merrill) makes available certain investment products sponsored, managed, distributed or provided by companies that are affiliates of Bank of America Corporation (BofA Corp.). MLPF&S is a registered broker-dealer, registered investment adviser, Member SIPC and a wholly owned subsidiary of BofA Corp. Insurance and annuity products are offered through Merrill Lynch Life Agency Inc., a licensed insurance agency and wholly owned subsidiary of Bank of America Corporation.
Trust, fiduciary and investment management services are provided by Bank of America, N.A., Member FDIC and wholly owned subsidiary of Bank of America Corporation (BofA Corp.).
Bank of America Private Bank is a division of Bank of America, N.A.
Banking products are provided by Bank of America, N.A. and affiliated banks, Members FDIC and wholly owned subsidiaries of Bank of America Corporation.
2026 Bank of America Corporation. All rights reserved.