Security Detection & Response IIBank of America
Job Summary
Security Detection & Response II
Chester, United Kingdom
To proceed with your application, you must be at least 18 years of age.
Acknowledge (https://ghr.wd1.myworkdayjobs.com/lateral-emea/job/Chester/Security-Detection---Response-II_26023667-1)
Bank of America employees are required to meet all posting eligibility requirements prior to applying for any new position.
Acknowledge (https://ghr.wd1.myworkdayjobs.com/lateral-emea/job/Chester/Security-Detection---Response-II_26023667-1)
Refer a friend
To proceed with your application, you must be at least 18 years of age.
Acknowledge (https://ghr.wd1.myworkdayjobs.com/lateral-emea/job/Chester/Security-Detection---Response-II_26023667-1)
Bank of America employees are required to meet all posting eligibility requirements prior to applying for any new position.
Acknowledge (https://ghr.wd1.myworkdayjobs.com/lateral-emea/job/Chester/Security-Detection---Response-II_26023667-1)
Job Description:
Job Title: Security Detection & Response II
Corporate Title: Up to Vice President
Location: Chester
Company Overview:
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.
Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!
Location Overview:
Find us in the city of Chester, a destination renowned for its culture, history, and beauty. Working at Bank of America Chester offers a far-reaching global career for a world-renowned organisation, whilst being ideally situated against the backdrop of the rolling North Wales hills and the banks of the serene River Dee.
Role Description:
We are seeking an experienced and motivated Security Detection & Response Analyst (SDR II) to join the GIS Monitoring and Triage team. This role supports cybersecurity operations across threat detection, investigation, response, and continuous service improvement.
You should be an experienced security practitioner capable of operating within the end-to-end detection and response lifecycle (detect investigate respond improve), combining broad analytical capability with an engineering mindset to rapidly identify, investigate, and contain threats. The analyst will operate across multiple security domains, validating detections, investigating threats, and executing response actions with sound judgment.
This role requires cross-domain security expertise, broad analytical and engineering capabilities, and the ability to leverage automation, orchestration, and AI-driven technologies to improve detection outcomes, reduce manual effort, and continuously enhance overall security effectiveness.
Working Pattern:
This is a full-time role (40 hours per week), with standard working hours of 7:00AM to 6:00PM 4 days per week (Sunday to Wednesday or Wednesday to Saturday) to align with the nature of the support provided by the team. Flexibility may occasionally be required to support business, operational, or project deliverables.
Responsibilities:
You will operate within the end-to-end detection and response lifecycle (detect investigate respond improve), including analysing logs and telemetry from multiple sources to establish attack scope, impact, and root cause
You will build, validate, tune, and optimize detection logic and coverage, leveraging attacker tactics, techniques, and procedures (TTPs) and frameworks such as MITRE ATT&CK to improve accuracy and reduce false positives
Execute and coordinate security event response activities, including containment, isolation, escalation, and remediation, applying sound judgment during active engagements
You will maintain and improve automation and orchestration capabilities, including SOAR workflows, automated playbooks, scripted response actions, and AI-driven enhancements to reduce manual effort and improve detection and response outcomes. Accountable for measurable improvements in MTTR, detection quality, and signal-to-noise ratio
You will document and communicate security event findings, including timelines and lessons learned, while providing clear updates to stakeholders and driving continuous improvement in detection and response processes
Identify gaps in monitoring and detection coverage, contributing to operational maturity through continuous improvement initiatives, metrics, and enhancements to detection, response, and automation capabilities
Support integration of partner use cases into detection and monitoring workflows
Guide and instruct junior members of the team to support the achievement of professional goals
What we are looking for:
Experience in security operations, incident response, detection engineering, or related cybersecurity functions within a production environment
Experience in security detection, investigation, and response across multiple domains, with the ability to pivot across data sources and independently manage end-to-end investigations from initial triage through post-incident improvement
Ability to build, validate, and tune detections and response workflows, including reducing false positives.
Considerable proficiency in log analysis, telemetry interpretation, and cross-system data correlation, including the ability to query, manipulate, and optimize data using KQL, SPL, SQL, or similar languages for investigative and detection use cases
Practical experience with containment, response actions, and automation, including developing or maintaining SOAR workflows, API integrations, and scripted response actions using sound judgment
Experience with security platforms and technologies, including SIEM, EDR/XDR, identity security, and cloud security
Working knowledge of identity and access systems and common attack paths, including credential theft, privilege escalation, and session/token abuse
Considerable understanding of attacker tactics, techniques, and procedures (TTPs), including MITRE ATT&CK
Record of improving operational effectiveness, including reducing alert noise, improving detection coverage, and decreasing mean time to detect and respond
Great analytical, decision-making, and communication skills, including the ability to clearly articulate findings, provide timely incident updates to both technical and non-technical stakeholders, and operate effectively in high-pressure scenarios
Ability to operate with minimal supervision and make risk-informed decisions quickly
Skills that will help:
Exceptional communication and executive presence, with the ability to influence at all organizational levels
Process discipline
Leadership competency in geographically diverse matrixed environment.
Relevant Cyber Security Certificate
Worked in SOC environment before
Familiarity with Cyber Security and Information Technology.
Strong problem-solving and critical thinking skills.
Effective communication and interpersonal skills.
Benefits of working at Bank of America: UK
At Bank of America, we strive to prioritise employees health and wellbeing its what makes us a Great Place to Work.
Private healthcare for you and your family plus an annual health screen to help you manage your physical wellness with the option to purchase a screen for your partner
Competitive pension plan, life assurance and group income protection cover if you become unable to work as a result of a disability or health reasons
We offer 26-weeks paid maternity leave, 16-weeks paid paternity leave and inclusive family leave arrangements for working parents and carers including 20 days of back-up childcare including access to school holiday clubs and 20 days of back-up adult care per annum
The ability to change your core benefits as well as the option of selecting a variety of flexible benefits to suit your personal circumstances including access to a wellbeing account, travel insurance, critical illness, cycle to work etc.
Use of a flex fund to use towards benefits
Access to an emotional wellbeing helpline, and virtual GP services
Access to the Peppy App which provides 1:1 support, consultations and resources relating to mens health, womens health, fertility, menopause and pregnancy & parenthood
Access to a range of gyms, exercise classes and wellbeing Apps through Wellhub, including Headspace and Calm
Opportunity to give back to your community, develop new skills and work with new groups of people by volunteering in your local area
Good conduct and sound judgment is crucial to our long term success. Its important that all employees in the organisation understand the expected standards of conduct and how we manage conduct risk. Individual accountability and an ownership mind-set are the cornerstones of our Code of Conduct and are at the heart of managing risk well.
We are an equal opportunities employer and ensure that no applicant is subject to less favourable treatment on the grounds of sex, gender identity or gender reassignment, marital or civil partner status, race, religious or similar philosophical belief, political opinion, colour, nationality, ethnic or national origins, age, sexual orientation, pregnancy or maternity, socio-economic background, responsibility for dependants or physical or mental disability. The Bank selects candidates for interview based on their skills, qualifications and experience.
We strive to ensure that our recruitment processes are accessible for all candidates and encourage any candidates to tell us about any adjustment requirements.
Bank of America and its affiliates consider for employment and hire qualified candidates without regard to race, religious creed, religion, color, sex, sexual orientation, genetic information, gender, gender identity, gender expression, age, national origin, ancestry, citizenship, protected veteran or disability status or any factor prohibited by law, and as such affirms in policy and practice to support and promote the concept of equal employment opportunity, in accordance with all applicable federal, state, provincial and municipal laws. The company also prohibits discrimination on other bases such as medical condition, marital status or any other factor that is irrelevant to the performance of our teammates.
View your "Know your Rights (https://www.eeoc.gov/sites/default/files/2023-06/22-088\EEOC\KnowYourRights6.12.pdf) " poster.
View the LA County Fair Chance Ordinance (https://dcba.lacounty.gov/wp-content/uploads/2024/08/FCOE-Official-Notice-Eng-Final-8.30.2024.pdf) .
Bank of America aims to create a workplace free from the dangers and resulting consequences of illegal and illicit drug use and alcohol abuse. Our Drug-Free Workplace and Alcohol Policy (Policy) establishes requirements to prevent the presence or use of illegal or illicit drugs or unauthorized alcohol on Bank of America premises and to provide a safe work environment.
Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. Should you be offered a role with Bank of America, your hiring manager will provide you with information on the in-office expectations associated with your role. These expectations are subject to change at any time and at the sole discretion of the Company. To the extent you have a disability or sincerely held religious belief for which you believe you need a reasonable accommodation from this requirement, you must seek an accommodation through the Banks required accommodation request process before your first day of work.
This communication provides information about certain Bank of America benefits. Receipt of this document does not automatically entitle you to benefits offered by Bank of America. Every effort has been made to ensure the accuracy of this communication. However, if there are discrepancies between this communication and the official plan documents, the plan documents will always govern. Bank of America retains the discretion to interpret the terms or language used in any of its communications according to the provisions contained in the plan documents. Bank of America also reserves the right to amend or terminate any benefit plan in its sole discretion at any time for any reason.
Investment products offered through MLPF&S and insurance and annuity products offered through MLLA:
Are Not FDIC Insured Are Not Bank Guaranteed May Lose Value
Are Not Deposits Are Not Insured by Any Federal Government Agency Are not a condition to Any Banking Service or Activity
Merrill Lynch, Pierce, Fenner & Smith Incorporated (also referred to as MLPF&S or Merrill) makes available certain investment products sponsored, managed, distributed or provided by companies that are affiliates of Bank of America Corporation (BofA Corp.). MLPF&S is a registered broker-dealer, registered investment adviser, Member SIPC and a wholly owned subsidiary of BofA Corp. Insurance and annuity products are offered through Merrill Lynch Life Agency Inc., a licensed insurance agency and wholly owned subsidiary of Bank of America Corporation.
Trust, fiduciary and investment management services are provided by Bank of America, N.A., Member FDIC and wholly owned subsidiary of Bank of America Corporation (BofA Corp.).
Bank of America Private Bank is a division of Bank of America, N.A.
Banking products are provided by Bank of America, N.A. and affiliated banks, Members FDIC and wholly owned subsidiaries of Bank of America Corporation.
2026 Bank of America Corporation. All rights reserved.