Established in 1912, Bank of China is one of the largest banks in the world, with over $3 trillion in assets and a footprint that spans more than 60 countries and regions. Our long-term outlook, institutional weight and global breadth provide our clients with a stable and reliable financial partner, whether in Corporate or Personal Banking or our Trade Services, Commodities, Financial Institutions and Global Markets lines of business.

*To be eligible for campus recruitment program, you can only apply for 1 position within the U.S. Branches.

The Associate will be responsible for vulnerability management, threat monitoring and security operation, threat intelligence management and IT asset security info management.

Include but are not limited to:

Vulnerability Management

• Maintain the vulnerability scanner.
• Conduct vulnerability scans and penetration tests on the applications and systems.
• Perform the vulnerability analysis and follow up on the remediation status. 

Threat Monitoring and Security Operation

• Assist with the implementation, configuration, monitoring and optimization of cybersecurity monitoring tools.
• Perform on-going security monitoring, Investigate and follow up the information security alerts generated from various tools.
• Develop and maintain security monitoring report, automate the report generation process.
• Develop cybersecurity contingency plans and organize relevant drills.

Threat Intelligence Management

• Monitor, collect, track, and report cyber threat intelligence information from both internal and external sources.

IT Asset Security Information Management

• Build and maintain the IT asset security information database.
• Collecting the IT asset security information from the regional branches periodically.

• A bachelor’s degree in computer science, information technology, or a closely related field is required at the time of hiring.
• Foundational understanding of information security concepts, including incident response, threat detection, and network security.
• Familiarity with operating systems (Windows, Linux, or MacOS) and an understanding of basic system logs and commands.
• Knowledge of security tools such as SIEM, EDR, or firewall systems.
• Strong problem-solving skills and a passion for learning about cybersecurity. 
• Excellent written and verbal communication skills, with an ability to work well in a team environment.
• Relevant certifications such as CompTIA Security+, CySA+, or similar are a plus but not required.