Security Detection & Response Specialist

Overview

In this role you will support cybersecurity operations within Bank of America’s GIS Monitoring and Triage team, focusing on threat detection, investigation, response, and continuous improvement. You will develop contextual threat understanding and grow independence across security domains while working with experienced practitioners. You’ll explore automation, orchestration, and AI-driven tools to enhance detection and response. This is an impact-driven role at a global bank that values growth, collaboration, and responsible security operations.

Pay / Benefits

• Private healthcare for you and family
• Annual health screen
• Competitive pension plan
• Maternity/Paternity leave
• Flexible benefits including wellbeing account
• Gym and wellbeing programs

Responsibilities

• Triage alerts and analyze logs/telemetry to assess potential security events
• Correlate data across endpoints, identity, network, and applications to determine risk
• Assist investigations with structured analysis and escalate high-risk findings
• Perform guided response activities under supervision, including containment and documentation
• Validate alerts and contribute to improving detection fidelity and coverage
• Contribute to playbooks/runbooks and learn to leverage automation and SOAR workflows
• Identify telemetry or process gaps and escalate improvement opportunities

Key requirements

• Hands-on experience in cybersecurity, security operations, IT support, or related fields
• Foundational knowledge of detection, investigation, or incident response principles
• Basic experience with log analysis and telemetry interpretation; familiarity with SIEM or query languages (KQL, SPL, SQL)
• Exposure to SIEM/EDR/XDR, identity systems, or cloud environments
• Foundational understanding of attacker TTPs and MITRE ATT&CK framework
• Analytical and problem-solving skills with structured investigation processes
• Effective communication and collaboration during investigations
• Willingness to learn and develop independent decision-making in security operations

• Analytical thinking
• Effective communication
• Collaborative mindset
• SIEM platforms
• EDR/XDR
• Identity systems

…