Application Security Operations Specialist

Bank of America

. Ensure continuity of global operational coverage for the application security assessment and scanning program .

Posted 10/14/2026full-timeUnited StatesMid-LevelSenior💰 $78,200 - $136,300 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security assessment, vulnerability management, and automated scanning technologies. Proficient in collaborating with cross-functional teams to drive security improvements and optimize operational processes.

Highest-signal resume keywords

Application Security AssessmentVulnerability ManagementScripting Languages (Python, PowerShell, Bash)Tool Integration with Workflow Platforms (ServiceNow)MITRE ATT&CK Familiarity

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability Rating MethodologiesCloud-Based ScanningWindows AdministrationUNIX AdministrationAutomated Scanning RoutinesCustom Scan RoutinesData AnalysisProof-of-Concept TestingAI-Assisted Vulnerability IdentificationOperational Process Optimization

Soft Skills

Excellent PrioritizationCommunication SkillsMentoring Skills

Industry Keywords

Compliance Frameworks (NIST, FFIEC)Enterprise Remediation GovernanceIncident ResponseVulnerability Detection GapsSecurity Findings Resolution

Tech Stack

Tools & technologies

CloudPythonServiceNowUnix

About the role

Key responsibilities & impact

Ensure continuity of global operational coverage for the application security assessment and scanning program
Support end-to-end strategic technology enablement for application security testing and scanning
Execute automated and custom scan routines to detect application and source code vulnerabilities
Provide operational support for new frontier AI models and related testing harnesses
Identify, triage, and resolve events and results, including false positives and verifications
Collaborate with Enterprise Remediation Governance and other partners to drive closure of findings
Participate in incident response activities
Support application teams in understanding and resolving security findings
Participate in development and implementation of technology strategy
Conduct proof-of-concept testing for next-generation scanning technologies
Optimize and improve the resiliency of scanning platforms and operational processes
Identify and map vulnerability detection gaps to appropriate technology solutions
Analyze data and trends to inform harness development and vulnerability management lessons learned

Requirements

What you’ll need

3+ years of experience driving and/or supporting tool integration with workflow platforms (e.g., ServiceNow)
Strong understanding of vulnerability management concepts and terminology
Excellent prioritization, communication, and mentoring skills
Familiarity with MITRE ATT&CK, cloud-based scanning, and compliance frameworks (e.g., NIST, FFIEC)
Experience with vulnerability rating methodologies
Background in Windows and UNIX administration
Proficiency in scripting languages (e.g., Python, PowerShell, Bash)
Hands-on experience with AI-assisted vulnerability identification activities

Benefits

Comp & perks

Affordable, competitive and flexible benefits
Support for physical, emotional, and financial wellness
Opportunities to learn, grow, and make an impact
Paid time off
Resources and support to employees
Annual discretionary incentive plan eligibility