Application Security Operations Specialist

Bank of America•Washington, DC

13d•$78,200 - $136,300•Onsite

About The Position

The Application Security Operations Specialist ensures continuity of global operational coverage and supports strategic technology enablement for the application security assessment and scanning program. The role is part of a global team providing follow-the-sun support for application security testing and scanning. It supports continuous improvement in scanning capabilities, false-positive identification, and vulnerability verification, collaborating across organizations to advance enterprise security solutions. The role is based at one of the listed Bank of America locations in Denver, Washington, DC, or Chicago. It is a first-shift position with a 40-hour workweek. Bank of America describes an in-office culture with role- and business-dependent flexibility. The listed annualized salary range is $78,200 to $136,300, with offers determined by experience, education, and skill set. The position is eligible for an annual discretionary incentive and benefits, including paid time off.

Requirements

At least 3 years of experience driving and/or supporting tool integration with workflow platforms such as ServiceNow.
Strong understanding of vulnerability management concepts and terminology.
Excellent prioritization, communication, and mentoring skills.

Nice To Haves

BS/MS in Information Technology, Cybersecurity, or a related field.
Familiarity with MITRE ATT&CK, cloud-based scanning, and compliance frameworks such as NIST and FFIEC.
Experience with vulnerability rating methodologies.
Background in Windows and UNIX administration.
Proficiency in scripting languages such as Python, PowerShell, and Bash.
Hands-on experience with AI-assisted vulnerability identification activities.

Responsibilities

Execute automated and custom scan routines to detect application and source code vulnerabilities.
Provide operational support for new frontier AI models and related testing harnesses.
Identify, triage, and resolve events and results, including false positives; verify findings and work toward closure with partners, including Enterprise Remediation Governance.
Participate in incident response activities and share relevant information to support collaboration with control owners and remediation teams.
Support application teams in understanding and resolving security findings.
Participate in developing and implementing the technology strategy.
Conduct proof-of-concept testing for next-generation scanning technologies.
Optimize scanning platforms and ensure their resiliency, including through operational process improvement.
Identify and map vulnerability detection gaps to appropriate technology solutions.
Perform data and trend analysis to inform harness development and vulnerability management lessons learned.