Malware Defense Endpoint Analyst, Incident Response

Bank of America

. Respond to, triage, and adapt to real-time threats targeting the organization through malware delivery and execution .

Posted 10/8/2026full-timeUnited StatesMid-LevelSenior💰 $95,700 - $144,900 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in malware analysis and incident response, with a strong focus on threat prevention across Email, Web, and Endpoint environments. Proficient in utilizing dynamic analysis tools and maintaining documentation to effectively communicate findings and recommendations.

Highest-signal resume keywords

Malware AnalysisIncident ResponseDynamic Analysis ToolsEmail Threat DetectionEndpoint Detection and Response (EDR)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Malware AnalysisIncident ResponseEmail Threat DetectionDynamic AnalysisBrowser Exploitation TechniquesSIEM ExperienceForensic Artifacts KnowledgeCloud-Based Detection and ResponseScripting and AutomationDigital Forensics

Soft Skills

Clear CommunicationCollaborative Teamwork

Tools & Technologies

Process MonitorWiresharkFiddlerCommercial SandboxWeb Proxy Technologies

Certifications & Qualifications

GCIHGREMGCFAGCFECFCECISSP

Industry Keywords

Threat PreventionIndicators of CompromiseVirtualized Sandbox EnvironmentURL CategorizationEmail Headers Analysis

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformJavaScript

About the role

Key responsibilities & impact

Respond to, triage, and adapt to real-time threats targeting the organization through malware delivery and execution
Perform static, dynamic, and behavioral analysis of malicious software and potential indicators of compromise
Maintain detailed documentation of analysis findings and produce comprehensive reports covering observations, actions taken, and recommendations
Identify cyber risks and help develop improvements to controls and detection mechanisms
Collaborate with response teams to defend against emerging threats and contribute to incident response efforts

Requirements

What you’ll need

Mid-level candidates with malware analysis and incident response experience
3–5 years of relevant experience in one or more threat prevention disciplines focusing on Email, Web, or Endpoint
Understanding of browser exploitation techniques
Familiarity with web-based technologies such as JavaScript or HTML and how they are abused by threat actors
Experience reviewing and analyzing email headers
Experience detecting phishing and other common email threats
SIEM experience with event correlation and searching
Experience with dynamic analysis tools such as Process Monitor, FakeDNS, Regshot, or Wireshark
Familiarity with interpreting malware analysis results from sandbox technologies
Technical experience operating and maintaining a virtualized sandbox environment
Familiarity with URL categorization and analysis tools such as Fiddler, commercial sandbox, or web proxy technologies
Ability to assess files or URLs and extract indicators of compromise such as malicious domains, IPs, and file hashes
Experience with documentation and ability to clearly articulate thoughts to technical and non-technical audiences
Knowledge of Endpoint Detection and Response (EDR) tools
Knowledge of forensic artifacts such as browser, registry, or event log artifacts
Knowledge of cloud-based Detection and Response tools
Desired: 3+ years conducting end-to-end malware analysis around Email, Web, or Endpoint
Desired: 3+ years conducting incident response using commercial products and tools
Desired: 3+ years of experience in digital forensics
Desired: Knowledge of at least one major cloud services provider, such as AWS, GCP, or Azure
Desired: Ability to create scripts and other forms of automation
Desired: Experience conducting interviews with an interrogative mindset
Desired certifications: GCIH, GREM, GCFA, GCFE, CFCE, or CISSP

Benefits

Comp & perks

In-office culture with an appropriate level of flexibility based on role-specific responsibilities and business needs
Opportunities to learn, grow, and make an impact
Support for physical, emotional, and financial wellness
Affordable, competitive, and flexible benefits
Annual discretionary incentive plan eligibility
Paid time off
Resources and support to make an impact and contribute to sustainable growth