At Bank of America, the Cyber Security Operation (CSO) team monitors and responds to threat intelligence events, manages application and network security, and protects against insider threats. This role analyzes internet monitoring security events, escalates incidents within defined SLAs, and proactively improves security controls to mitigate risks. Responsibilities Perform analysis of email monitoring alerts using DLP tools. Process monitoring alerts accurately within the defined business SLA. Identify and escalate risk according to standard operating procedures. Analyze events, metrics, and escalation data to identify patterns and trends on high‑risk controls. Proactively suggest, develop, and implement enhancements to reduce risk. Actively participate in team discussions and knowledge‑sharing. Navigate and collaborate effectively within a geographically complex, dispersed global corporation. Maintain strong written and verbal communication, presenting control topics to diverse audiences. Work weekend weekends (Saturday and Sunday) on a rotational shift basis. Qualifications 1‑3 years of experience in information security or a related technology field. Strong understanding of network protocols: TCP/IP, SMTP, IMAP, POP3, HTTP/HTTPS, DNS. Knowledge of email security standards: SPF, DKIM, DMARC, TLS encryption. Proficiency with SIEM platforms such as Splunk. Knowledge of data loss prevention (DLP) solutions for email and web traffic. Strong analytical skills for identifying threats, vulnerabilities, and exploitations. Innovative mindset and willingness to question established practices and automate processes. Problem‑solving mindset with intellectual curiosity and critical thinking. Team player who actively participates in knowledge sharing. Willingness to work weekends on a rotational shift basis. Willingness to be enrolled in the bank’s Associate Investment Monitoring Program. In‑office attendance requirement with appropriate flexibility based on role‑specific considerations. #J-18808-Ljbffr