Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Job Description:

This job is responsible for tool and service designs within a technical domain that enable business strategies in accordance with architectural governance, standards and policies. Key responsibilities include creating infrastructure tools and their integration as a service, facilitating deployment of technical solutions by developing templates, playbooks and automation used during implementation. Job expectations include looking for opportunities to improve efficiency when implementing and maintaining tools/services and embracing a culture of innovation and continuous improvement.

We are currently seeking a highly skilled Vulnerability Response Engineer (CVE Translation Orchestration) to serve as a critical bridge between vulnerability intelligence and operational execution. This role is responsible for rapidly analyzing CVEs, vendor advisories, and exploit guidance, and translating that intelligence into actionable, testable remediation strategies. The engineer will design and automate deployment solutions to enable fast, consistent, and low-risk implementation across multiple infrastructure lanes. This position requires deep expertise in Windows and Active Directory security, strong automation capabilities, and the ability to assess risk and prioritize remediation in large, regulated enterprise environments. This role is central to reducing organizational risk by ensuring vulnerabilities are not only understood, but rapidly and correctly remediated at scale. The engineer will directly impact the organization's ability to respond to emerging threats with speed, precision, and confidence.

Responsibilities:

Provides subject matter expertise and consulting services on a range of technologies and assists Technical Analysts and Infrastructure Engineers to ensure that technology solutions comply with enterprise system design and engineering standards
Assists with translating business requirements into technical definitions, reference models, blueprints, and playbooks for deployment in compliance with architecture standards and policies
Assists in the evaluation of reference models, blueprints and playbooks to ensure they are fit for purpose
Develops software solutions to address manual and repeatable work or inefficient processes
Conducts on-site evaluations of third-party products being considered for firm adoption
Promotes an inclusive and healthy working environment and helps to resolve organizational impediments/blockers
Contributes to the creation/selection of functional and non-functional product evaluation requirements within and across domains
Analyze CVEs, MSRC advisories, and vendor security guidance to determine required remediation actions
Translate vulnerability intelligence into clear technical actions (patching, GPO updates, registry changes, service/protocol hardening)
Define scope and applicability, including distinctions across: Domain Controllers vs. Member Servers, Tiered environments, Legacy or exception-based systems
Assess dependencies, constraints, and potential blast radius prior to deployment
Evaluate exploitability vs. environmental exposure to inform prioritization
Drive prioritization and sequencing of remediation activities across platforms
Design and develop automation solutions (primarily PowerShell) to deploy and validate fixes
Build repeatable validation mechanisms to ensure remediation effectiveness
Partner with Operations teams to ensure timely, coordinated rollout of remediations

Required Qualifications:

5+ years of applicable experience
Deep understanding of Windows Server and Active Directory security architecture
Proven experience interpreting:
CVE writeups
MSRC security advisories
Vendor mitigation guidance
Expert-level proficiency in PowerShell scripting and automation development
Strong ability to evaluate exploitability vs. real-world exposure
Familiarity with Active Directory attack paths and adversary techniques
Experience with Hyper-V and SCVMM.
Experience with SCCM
Experience performing risk analysis in large, regulated enterprise environments
Strong written communication skills, including the ability to produce:
Change intent documents
Impact and risk assessments
Demonstrated experience creating technical and process documentation

Desired Qualifications:

Strong understanding of Active Directory internetworking, including:
Name resolution (DNS)
Kerberos and NTLM authentication flows
Hands-on experience with:
Kerberos, LDAP, DNS, NTLM
System and performance monitoring
Experience in Python
Experience securing and reducing Active Directory attack surface, particularly Domain Controllers
Experience with Windows Server 2016, 2019, and 2022
Familiarity with Hyper-V and virtualization platforms
Experience developing AD policies, standards, and operational procedures
Strong analytical, design, and problem-solving capabilities
Ability to translate complex technical concepts into clear, actionable processes
Experience operating in fast-paced environments with shifting priorities

Skills:

Analytical Thinking
Application Development
Automation
Production Support
Risk Management
Adaptability
Business Acumen
DevOps Practices
Solution Delivery Process
Solution Design
MS Windows Server

Shift:

1st shift (United States of America)

Hours Per Week: