Senior Software Engineer

Job Description:

Process Overview*

VIA– Cyber Security Assurance (CSA) team identifies the Potential Vulnerabilities and is designed to validate and report potential vulnerabilities identified through Qualys tool and OSINT process addresses external, internet-accessible security concerns or poor internet hygiene impacting Bank of America’s internet reputation. Team works with outside-in approach which leverages external open-source intelligence (OSINT) and internal data to analyze internet-accessible hosts associated with Bank of America that pose a potential security risk to the Bank and negatively impact the Bank’s internet reputation or brand.

Job Description*

The Information Security Exposure Management Specialist role will involve identifying risks and promote Internet hygiene improvement opportunities to enhance the Bank’s overall public security posture.

Responsibilities*

• Identify and remove older, no longer maintained Bank branded sites.
• Ensure all external assets align to LOB ownership.
• Identify and eradicate end of life software or software in use exposing the Bank to risk.
• Address issues impacting CRR (Cyber Risk Rating) scores that impact the reputational risk of Bank of America  
  • Submits false positives to Cyber Risk Rating vendors.
  • Evaluates true positives for inclusion escalation. 
  • Proactively perform Risk Analysis (DNS Records Cleanup, Expired/Malformed Digital   Certificates)
• Assist CSA/CSD in Identifying P1/CAPD level risks leveraging an outside in view along with Bank data intelligence.
• Identifies gaps with external perimeter findings to internal bank policies and raises them up with the team.
• Collaborate with peers and business units in a team-focused environment.

Requirements:

Education*

Bachelor’s degree in IT Discipline

Certifications If Any

CISSP, CEH, CCNP, Qualys certifications would be good but not mandatory.

Experience Range*: 3+ years

Foundational skills*

• A broad knowledge of Information security principles
• Knowledge of externally facing network DNS architecture and associated vulnerabilities
• Understanding of Vulnerability Management principles
• Understanding of Risk Assessment Methodologies
• Data Analytics background
• Basic network fundamentals, like OSI model, TCP/IP model, DNS Records
• Prior experience in leveraging MS Access or other data repositories.
• Background in Network Security /Application Security preferred.
• Should be a critical thinker.

Desired skills

• Basic Scripting knowledge
• Ability to interpret Qualys Scan reports.

Work Timings*

7.30AM to 4.30PM (IST) / 12:30PM to 09:30PM (IST)

Job location: Hyderabad/Chennai