Jobs at Bank of America

Provides clients with personalized financial planning and investment guidance, recommending brokerage, banking, and managed-money solutions. The role triages client needs, makes internal referrals, develops new client relationships, manages risk, and supports referral partners. Candidates must hold Series 7 and 66 licenses or equivalent Series 63 and 65 licenses, have at least one year of investment and financial services or sales experience, and work weekdays with rotating Saturdays.

Leads enterprise technology delivery for ServiceNow Security Incident Response and Data Loss Prevention capabilities. Oversees engineering teams, platform implementation, integrations, workflow automation, roadmaps, governance, operational readiness, risk management, compliance, and executive communications. Partners across cybersecurity, data protection, technology, risk, compliance, legal, vendors, and business teams to deliver scalable security workflows, case management, reporting, and continuous platform improvements.

Supports cyber preparedness, operational resilience, continuity, recovery, and readiness activities across global information security. Responsibilities include resilience assessments, dependency mapping, risk identification, governance documentation, metrics, dashboards, event response coordination, situational reporting, and lessons learned. The role collaborates with cyber defense, technology, business, and enterprise teams to improve recoverability and operational resilience.

Provides client service support to multiple Financial Advisors and serves as a primary contact for Merrill clients. Responsibilities include educating clients on banking offerings, preparing accurate materials, fulfilling client and advisor requests, following policies, supporting risk management, deepening relationships, identifying referrals, and assisting with daily team operations. The role requires strong communication, client focus, adaptability, organization, and proficiency with Microsoft Office and Salesforce.

Provides client service and operational support to multiple Financial Advisors and their clients. Responsibilities include educating clients on banking offerings, managing requests and materials, maintaining policy compliance, strengthening client relationships, identifying referrals, supporting daily team operations, and communicating client needs and outcomes to Financial Advisors.

Leads Bank of America’s Malware Research & Analysis team and manages 12 direct reports. Oversees advanced malware research, reverse engineering, incident support, threat analysis, and translation of findings into detection, prevention, hunting, and response improvements. Sets strategy, priorities, quality standards, and technical direction while developing cybersecurity talent. Partners with threat intelligence, incident response, engineering, and security teams to strengthen controls, tooling, automation, and analytical capabilities.

Leads AI security testing and covert red team operations that emulate advanced threat actors. Performs penetration testing, vulnerability assessments, social engineering, and adversarial evaluation of AI-enabled systems. Develops implants and evasion techniques, identifies attack paths and control weaknesses, documents business risk, and communicates findings to technical stakeholders and executives. Requires strong knowledge of AI/LLM attacks, offensive security tools, networks, operating systems, Active Directory, MITRE ATT&CK, and scripting or programming.

Define and lead AI security strategies and standards across data, models, APIs, integrations, and third-party use. Identify AI-specific risks, establish security requirements, and operationalize governance through threat modeling, control validation, monitoring, and regulatory alignment. Partner with senior engineering, risk, business, and technology stakeholders to secure cloud-based AI workloads, assess controls, communicate security trends, and drive consensus on complex issues.

Performs manual application security assessments, penetration tests, threat analysis, code reviews, and vulnerability validation across enterprise technologies. Identifies misconfigurations and security weaknesses, develops proofs of concept, advises on remediation, documents findings, and presents technical risk information. The role also incorporates threat actor techniques into offensive security testing, partners with security and business teams, supports incident triage, and mentors junior assessors.

Designs, implements, tests, and supports enterprise network security systems and web proxy capabilities. Defines security requirements, develops test plans, analyzes network traffic, manages engineering milestones, identifies vulnerabilities, and resolves complex technical issues. Requires expertise in networking, TLS, firewalls, proxies, advanced content filtering, and at least one specialized security technology such as F5 load balancers, malware scanning, NSX Defender, or cloud security solutions.

Build and deploy AI and machine-learning capabilities for cyber threat hunting, anomaly detection, incident response, detection engineering, and security automation. Develop custom models, LLM applications, and agentic systems, managing the full production lifecycle from data preparation through monitoring. Partner with security, engineering, offensive security, and governance teams to evaluate emerging technologies, support responsible AI, advise leadership, and mentor technical staff.

Serves as a senior technical expert for threat intelligence platforms, designing platform capabilities, data models, integrations, APIs, scripts, dashboards, and automated workflows. Translates CTI analyst requirements into scalable solutions and integrates intelligence with SIEM, SOAR, XDR, threat hunting, and detection technologies. Responsibilities include data ingestion, enrichment, scoring, validation, lifecycle management, troubleshooting, documentation, roadmaps, and cross-functional collaboration across security and infrastructure teams.

Analyzes and improves infrastructure vulnerability identification processes using Tanium and CVE-based analytics. Reviews scan data, performs quality control, investigates reporting issues, assesses technology risks, and communicates findings to technical and business stakeholders. Supports vulnerability-management expansion across workstations, ATMs, and other technology environments, while developing process improvements and risk-reduction solutions. The role requires independent work, strong analytical and communication skills, and occasional weekend coverage.

Provides personalized financial advice and investment solutions, develops financial plans, recommends brokerage and banking products, manages client relationships, triages requests, makes referrals, and identifies new client opportunities. The role requires Series 7 and 66 licenses, financial services experience, regulatory diligence, and sales performance. Employees must complete required training, work Monday through Friday with rotating Saturdays, and comply with SAFE Act registration requirements for applicable mortgage lending activities.

Lead the design and delivery of scalable data solutions, including data pipelines, transformations, metadata frameworks, quality controls, and governance. Collaborate with stakeholders, product owners, and engineering teams to implement requirements, troubleshoot issues, test solutions, and improve engineering practices. Mentor junior engineers, lead proof-of-concepts, support CI/CD and automation, and ensure data architectures meet business and technical needs.

Operate and improve application security assessment and scanning programs across a global follow-the-sun team. Execute vulnerability scans, triage findings and false positives, support incident response, verify remediation, assist application teams, test emerging scanning technologies, and optimize scanning platform resiliency. The role also supports AI testing harnesses, vulnerability detection gap analysis, data and trend analysis, workflow integrations, and enterprise security strategy.

Coordinate global response and recovery for information security incidents, including triage, containment, root-cause analysis, remediation, escalation, and executive communication. Oversee daily incident response operations, make critical decisions under pressure, coordinate resources during escalations, and collaborate with security teams, technology groups, and business partners. Lead, mentor, and challenge incident response team members while addressing control gaps and failures.

Develops and manages a wealth management practice serving high-net-worth clients. Responsibilities include prospecting, building client relationships, assessing financial goals, recommending suitable investment products, servicing accounts, maintaining compliance, documenting interactions in Salesforce, collaborating with specialists, and meeting performance goals. The role includes structured training, coaching, continuing education, and requires Series 7 and Series 66 licenses.

Work with Financial Advisor teams to develop comprehensive financial plans, analyze client data, recommend investment and tax/estate/trust/insurance solutions, maintain planning tools, attend client meetings, and coordinate specialists to deliver wealth management services. May originate residential mortgage loans and must maintain SAFE Act registration.

Design, develop, test, deploy, and support secure Java applications and microservices in the identity and authentication domain. Translate business and security requirements into technical designs, build REST APIs, remediate vulnerabilities, and support reliability, compliance, audits, and production issues. Lead complex technical initiatives, participate in Agile and DevOps delivery, conduct reviews, plan releases, perform root-cause analysis, and mentor engineers.