Malware Prevention Analyst, Global Information Security

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities, and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Your background

Strong direct experience of analyzing malware
Must have a solid understanding of dynamic/static analysis of malware
Background in network traffic analysis related to malware
Experience in encryption/obfuscation and how to reverse engineer (desirable)
GCIH, GREM, GCFA, CISSP or CCSP desirable
At least 3+ years of direct experience analyzing malware (or show equivalent competency)
Able to work independently on tasks
Able to work well within a team environment
Can create innovative ways to track progression of malware families, infrastructure and campaigns conducted by various threat actors
Knowledge of networking protocols: TCP/IP, HTTP/HTTPs, FTP, IRC etc.
Ability to create scripts and other forms of automation
Excellent communication skills, able to adapt a message to various audiences
Knowledge/experience of at least one major cloud services provider (AWS, GCP, Azure) technologies

What you can expect

The Global Information Security (GIS) team is responsible for protecting bank information systems, confidential and proprietary data, and customer information. The Cyber Threat Defense (CTD) team aims to protect the bank by having an end-to-end view and influence over all security controls at the Bank. The CTD Malware Defense team specifically aims to reduce risk across the Bank of America by leveraging multiple methods of malicious code detection and containment activities for the security, safeguarding, continuity and confidentiality of information at Bank of America. The Malware Defense Analyst role undertakes incident response activities with a primary focus on malware analysis.

CTD Malware Defense team operates 24x7 on follow-the-sun model having teams based in APAC, EMEA and AMRS. This role may require working on public holidays and weekends as part of 24x7 coverage.

What you will do

Analyze various malware alerts and corresponding events
Respond to actions by threat actors and disrupt their attempted actions
Perform static and dynamic forensic analysis of malware
Perform disk based and memory-based analysis of systems
Execute and improve relevant risk management strategies
Perform real-time analysis and trending of security log data from various security devices and systems
Maintain data sources feeding the log monitoring system, develop and maintain detection and alerting rules
Respond to user incident reports and evaluate the type and severity of security events
Execute initial triage of incidents to rule out false positives
Identify recurring security issues and risks and develop mitigation plans and recommend process improvements
Interpret and apply security policies and procedures
Establish escalation processes for security incidents and develop contingency plans and disaster recovery procedures

#J-18808-Ljbffr

Bank of America

More Information