Information Security Vulnerability Management

4 weeks ago


Chicago, United States Bank of America Full time

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us

The Vulnerability Management Innovation SME supports all Vulnerability Analysis (VA) & rating activities by leveraging analytical and technical skills to provide guidance and leadership to modernize the VA program. In this role you will design and implement comprehensive solutions to complex problems, lead major projects, and influence the strategic direction of the organization. This role will be primarily focused on supporting the Common Vulnerability and Exposures (CVE) analysis and rating process. To be successful in this role you will need to be an effective communicator frequently switching between technical & non-technical partners to influence and deliver change. This role does require an ability to operate with limited direction while effectively bringing people together to design and implement solutions.

Required Qualifications:

- 5+ years’ experience in cyber security
- Ability to work independently on initiatives with little oversight
- Ability to proactively anticipate problems and execute solutions at a strategic level
- Excellent analytical skills/problem solving/conceptual thinking
- Understanding of risk assessment methodologies
- Knowledge of vulnerability attack methods, exploit results, attack chains
- Knowledge of industry standard scoring models such as CVSS, CCSS
- Knowledge of industry standard data models such as CPE and data normalization tools

Desired Qualifications:

- Leveraging NIST SP-800 (specifically 800-30) for prioritizing risk
- Operationalizing MITRE Attack & TTPs in vulnerability prioritization
- Strong familiarity with OWASP Top 10 vulnerabilities, SANS 25, MITRE, and CWEs
- Experience in conducting vulnerability scans.
- Experience in performing data analytics to communicate impact analysis of process change

**Shift**:
1st shift (United States of America)

**Hours Per Week**:
40



  • Chicago, United States Great Wolf Resorts Full time

    Job Summary: The Information Security Manager provides security technology leadership and support while managing and implementing the Cybersecurity Program through key strategies, technologies, processes, and procedures that align with Great Wolf's security needs and objectives. Partner with lines of business to respond to evolving business requirements and...


  • Chicago, United States Great Wolf Resorts Full time

    Job Summary: The Information Security Manager provides security technology leadership and support while managing and implementing the Cybersecurity Program through key strategies, technologies, processes, and procedures that align with Great Wolf's security needs and objectives. Partner with lines of business to respond to evolving business requirements and...

  • Vulnerability Analyst

    2 weeks ago


    Chicago, Illinois, United States TEKsystems Full time

    Description: What You'll doIn this role, you'll contribute to the success of the Bank by facilitating the vulnerability management program across IT and the broader organization. You will apply your passion for security and technology to design and operate technical processes to operate vulnerability scanning on a regular frequency, collaborate with...

  • Vulnerability Analyst

    2 weeks ago


    Chicago, Illinois, United States TEKsystems Full time

    Description: What You'll doIn this role, you'll contribute to the success of the Bank by facilitating the vulnerability management program across IT and the broader organization. You will apply your passion for security and technology to design and operate technical processes to operate vulnerability scanning on a regular frequency, collaborate with...


  • Chicago, Illinois, United States TEKsystems Full time

    Description: What You'll doIn this role, you'll contribute to the success of the Bank by facilitating the vulnerability management program across IT and the broader organization. You will apply your passion for security and technology to design and operate technical processes to operate vulnerability scanning on a regular frequency, collaborate with...


  • Chicago, Illinois, United States TEKsystems Full time

    Description: What You'll doIn this role, you'll contribute to the success of the Bank by facilitating the vulnerability management program across IT and the broader organization. You will apply your passion for security and technology to design and operate technical processes to operate vulnerability scanning on a regular frequency, collaborate with...


  • Chicago, United States Grubhub Full time

    Grubhub Security is charged to deliver tailored solutions which provides a safe and trustworthy experience for our users and more than 31.5 million customers. We are committed to maintaining the highest standards of security and compliance in all aspects of our operations. We pride ourselves on innovation, integrity, and a dedication to safeguarding our...


  • Chicago, United States Grubhub Full time

    Grubhub Security is charged to deliver tailored solutions which provides a safe and trustworthy experience for our users and more than 31.5 million customers. We are committed to maintaining the highest standards of security and compliance in all aspects of our operations. We pride ourselves on innovation, integrity, and a dedication to safeguarding our...


  • Chicago, United States Grubhub Full time

    Grubhub Security is charged to deliver tailored solutions which provides a safe and trustworthy experience for our users and more than 31.5 million customers. We are committed to maintaining the highest standards of security and compliance in all aspects of our operations. We pride ourselves on innovation, integrity, and a dedication to safeguarding our...


  • Chicago, Illinois, United States United Center Full time

    The United Center, a premiere sports and entertainment facility and home of the Chicago Blackhawks and the Chicago Bulls, is looking for someone with a passion for sports and technology to fill a key role as the Information Security Manager. General Responsibilities:Assists senior leadership in the development of security policies, standards, and strategies....


  • Chicago, Illinois, United States United Center Full time

    The United Center, a premiere sports and entertainment facility and home of the Chicago Blackhawks and the Chicago Bulls, is looking for someone with a passion for sports and technology to fill a key role as the Information Security Manager. General Responsibilities:Assists senior leadership in the development of security policies, standards, and strategies....


  • Chicago, Illinois, United States VTS Full time

    As an Information Security Analyst you will assist more senior members of the team in managing day to day security operations, including Investigating & resolving alerts & reports from Endpoint Detection & Response tools (EDR, CrowdStrike), mail filtering tools (Checkpoint Harmony), and others.You will also respond to client requests for sensitive...


  • Chicago, Illinois, United States VTS Full time

    As an Information Security Analyst you will assist more senior members of the team in managing day to day security operations, including Investigating & resolving alerts & reports from Endpoint Detection & Response tools (EDR, CrowdStrike), mail filtering tools (Checkpoint Harmony), and others.You will also respond to client requests for sensitive...


  • Chicago, Illinois, United States Origami Risk Full time

    The Chief Information Security Officer (CISO) ensures the security and integrity of the organization's information systems and data. Origami Risk's security program responsibility includes measuring, assessing, reporting, and tracking risks to the organization to support informed risk management decisions by executive leadership. The CISO oversees daily...


  • Chicago, Illinois, United States Origami Risk Full time

    The Chief Information Security Officer (CISO) ensures the security and integrity of the organization's information systems and data. Origami Risk's security program responsibility includes measuring, assessing, reporting, and tracking risks to the organization to support informed risk management decisions by executive leadership. The CISO oversees daily...


  • Chicago, Illinois, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...


  • Chicago, Illinois, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...

  • Vice President

    1 week ago


    Chicago, IL, United States JPMorgan Chase & Co. Full time

    Vice President - Information Security Management - FedRAMP As an Vice President, Information Security Management within the Cybersecurity Technology Controls Organization, you'll partner with one or more disciplines, lines of business, regions or locations to respond to evolving business requirements and emerging threats. You'll also leverage your expert...


  • Chicago, Illinois, United States Grubhub Full time

    About The Opportunity We're all about connecting hungry diners with our network of over 300,000 restaurants nationwide. Innovative technology, user-friendly platforms and streamlined delivery capabilities set us apart and make us an industry leader in the world of online food ordering. When you join our team, you become part of a community that works...


  • Chicago, Illinois, United States Grubhub Full time

    About The Opportunity We're all about connecting hungry diners with our network of over 300,000 restaurants nationwide. Innovative technology, user-friendly platforms and streamlined delivery capabilities set us apart and make us an industry leader in the world of online food ordering. When you join our team, you become part of a community that works...