Production Services Specialist II

Bank of America•Plano, TX

10d•Hybrid

About The Position

At Bank of America, the APS&E Production Services team provides end-to-end, client-facing, business-aligned infrastructure engagements, including design, planning, building, delivery operations, and data management support. This role provides services to internal customers to support business continuity and meet or exceed service-level agreements. It includes monitoring, incident response, problem triage, service restoration, root-cause identification, and coordination of permanent fixes in accordance with agreed best practices. The specialist collaborates with IT teams to build detection rules, automation playbooks, and dashboards that strengthen security. The role manages, configures, and optimizes SIEM/SOAR platforms, primarily Splunk, for threat detection, automation, and incident response. The specialist monitors and analyzes security events to identify threats and reduce response times, while applying substantial expertise in identity and access management, production support, and related technologies in a highly regulated financial technology environment. Bank of America supports an in-office culture for collaboration, engagement, and career development. This role requires working on-site three days a week under current bank policies, and availability for on-call coverage and off-hours work as needed. The position is 40 hours per week on first shift.

Requirements

At least 5 years of experience in SIEM/SOAR administration and security operations.
At least 5 years of production support experience, including expert-level knowledge of MFA technologies, Splunk, Windows OS, SQL/Oracle databases, and Unix/Linux.
Strong hands-on knowledge of Splunk searches, dashboards, alerts, and playbooks; expert-level knowledge of Splunk queries.
Expert-level Linux experience and Windows OS expertise.
Solid understanding of cybersecurity frameworks, threat detection, and incident response.
Knowledge of the five Cs of cybersecurity: Change, Compliance, Cost, Continuity, and Coverage.
Excellent knowledge of the Identity, Authentication, and Access Management (IAM) domain, including SRE and DevOps.
Senior-level production support experience and troubleshooting skills in SIEM/SOAR, Splunk, and IAM technologies.
Ability to comply with bank regulatory and compliance policies.
Knowledge of the ITIL framework.
Excellent communication skills, including the ability to explain issues, impacts, and solutions clearly to lateral and vertical stakeholders.
Ability to collaborate with team members within and outside the group.
Availability for on-call coverage and willingness to work off hours as needed.
Willingness to work on-site three days a week under current bank policies.
Strong work ethic, attention to detail, problem-solving ability, and ability to work under pressure and stress.
40 hours per week; first shift.

Nice To Haves

CISSP or an equivalent information security certification.
Experience with Tower and BladeLogic.
Strong understanding of network technologies.
Experience with Red Hat Linux OpenShift containers, Atlassian JIRA, Horizon, GitHub, Ansible, Jenkins, ITSM Remedy, Dynatrace, PowerShell/Unix scripting, cloud technologies, and other CI/CD DevOps tools.
Strong motivation, drive for results, and persistence when facing significant difficulties.

Responsibilities

Provide end-to-end infrastructure engagement, design, planning, build, delivery operations, and data management support.
Support business continuity and meet or exceed service-level agreements for internal customers.
Monitor systems and respond to incidents, participate in problem triage, restore services, identify root causes, and coordinate permanent fixes.
Collaborate with IT teams to develop security detection rules, automation playbooks, and dashboards.
Manage, configure, and optimize SIEM/SOAR platforms, primarily Splunk.
Develop Splunk detection rules, dashboards, alerts, and automation playbooks.
Monitor and analyze security events to identify threats and reduce response times.
Provide production support and troubleshooting for SIEM/SOAR and IAM technologies.
Comply with bank regulatory and compliance policies.
Provide on-call coverage and work off hours as needed.