Malware Threat Intelligence Control Owner

Malware Threat Intelligence Control Owner

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates' physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

Role Summary

The Threat Intelligence Control Owner is responsible for overseeing and enhancing the threat intelligence "processing" procedures within the Malware Defense program. This role involves close collaboration with cross-functional teams to ensure threat intelligence workflows are efficient, scalable, and aligned with enterprise security objectives. The Control Owner will drive improvements in automation, integration, and operational effectiveness using relevant technologies and platforms.

Key Responsibilities

Own and manage the threat intelligence processing control, ensuring consistent execution and continuous improvement. Collaborate with internal teams to refine procedures for investigating indicators of compromise (IOCs) across various log sources and controls. Integrate and optimize relevant technologies and platforms to support and enhance threat intelligence workflows, automation, and operational efficiency. Maintain, optimize, and automate Malware Defense's custom intelligence gathering workflows to improve speed, accuracy, and scalability. Define and maintain documentation for threat intelligence processing standards, playbooks, and escalation paths. Monitor control performance and identify opportunities for automation and efficiency. Support audit and compliance efforts related to threat intelligence controls.

Required Qualifications

Threat Intelligence Experience: Intermediate to Advanced understanding of threat actor tactics, techniques, and procedures (TTPs). Log Investigation Skills: Intermediate to Advanced experience analyzing logs from email, web, and endpoint sources. Scripting & Development Experience: Intermediate proficiency with: Languages & Frameworks: Python, Node.js, JavaScript Web Frameworks: Django, FastAPI, Flask, Streamlit Infrastructure & Tools: Linux, Docker, NGINX Databases & Caching: PostgreSQL, Redis API Integration: Experience utilizing RESTful APIs for application and platform integrations Technology Proficiency: LogScale (Log Analysis) CrowdStrike Falcon (EDR) VirusTotal (Threat Research) Tanium (Endpoint Management & Detection) ProofPoint TAP (Email Threat Detection) Trellix Endpoint Security Trellix Web Security Trellix Email Security AI & Machine Learning Exposure: Experience working with artificial intelligence (AI), machine learning (ML), and model development or integration for threat detection, enrichment, or automation.

Desired Qualifications

Strong organizational and documentation skills. Experience working in cross-functional environments. Ability to identify gaps and drive process improvements. Familiarity with control ownership responsibilities in a cybersecurity or risk management context.

Bank of America and its affiliates consider for employment and hire qualified candidates without regard to race, religious creed, religion, color, sex, sexual orientation, genetic information, gender, gender identity, gender expression, age, national origin, ancestry, citizenship, protected veteran or disability status or any factor prohibited by law, and as such affirms in policy and practice to support and promote the concept of equal employment opportunity, in accordance with all applicable federal, state, provincial and municipal laws. The company also prohibits discrimination on other bases such as medical condition, marital status or any other factor that is irrelevant to the performance of our teammates.

Bank of America aims to create a workplace free from the dangers and resulting consequences of illegal and illicit drug use and alcohol abuse. Our Drug-Free Workplace and Alcohol Policy ("Policy") establishes requirements to prevent the presence or use of illegal or illicit drugs or unauthorized alcohol on Bank of America premises and to provide a safe work environment.

Should you be offered a role with Bank of America, your hiring manager will provide you with information on the in-office expectations associated with your role. These expectations are subject to change at any time and at the sole discretion of the Company. To the extent you have a disability or sincerely held religious belief for which you believe you need a reasonable accommodation from this requirement, you must seek an accommodation through the Bank's required accommodation request process before your first day of work.

This communication provides information about certain Bank of America benefits. Receipt of this document does not automatically entitle you to benefits offered by Bank of America. Every effort has been made to ensure the accuracy of this communication. However, if there are discrepancies between this communication and the official plan documents, the plan documents will always govern. Bank of America retains the discretion to interpret the terms or language used in any of its communications according to the provisions contained in the plan documents. Bank of America also reserves the right to amend or terminate any benefit plan in its sole discretion at any time for any reason.