Vice President, Threat Management, Application Monitoring & Response in Sydney

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Working Pattern: This is a full-time role (38 hours per week), with standard working hours of 9:00AM to 7:30PM AEST 4 days per week (Wednesday to Saturday) to align with the nature of the support provided by the team. Flexibility may occasionally be required to support business, operational, or project deliverables.

Responsibilities:

• Analyze application layer alerts, conduct investigations, respond to disrupt malicious actions of threat actors and feedback to improve defensive capabilities.
• Leverage advanced investigative skills using best in class data correlation and network/packet analysis tools to investigate incidents.
• Provide leadership in assessing new threat vectors and leverage new intelligence to update existing controls, design new controls and participate in testing and deployment of new controls.
• Develop and implement custom alerts and dashboards monitoring controls based on OSI layer 7 attack and threat indicators.
• Responsible for mentoring and developing the skill sets of less experienced team members.
• Develop and implement processes or controls in support of audit, compliance and risk requirements.
• Partner with senior leaders of business organizations to triage security events and report on impact.
• Execute and improve relevant risk management strategies.

Required Skills:

• Strong hands-on experience in application security detection and response technologies and processes.
• Understanding of common exploits, web application attacks, network protocols and infrastructure/application logs (e.g. weblogs, AD logs, security logs) for efficient intrusion analysis.
• Advanced log analysis skills leveraging tools such as Splunk or other SIEM solutions to find targeted attacks and hunting exercises.
• Experience of maintaining and fine-tuning signatures on WAF of leading vendors such as FE (ASM) and Akamai.
• Comfortable with scripting languages and regular expressions.
• Working knowledge of common operating systems (Windows/Linux/OS X).
• Experience in packet captures and analysis (e.g. Wireshark) is desirable.
• Ability to independently work in a fast-paced environment and drive continuous improvement.
• Relevant technical certifications (SANS, CISSP, etc.) desirable.
• Excellent verbal and written communication skills, able to adapt a message to various audiences.