> Markdown version of [/jobs/ext/2989716-chief-information-security-office-security-services-cyber-defense-associate](https://www.wearedevelopers.com/jobs/ext/2989716-chief-information-security-office-security-services-cyber-defense-associate). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Chief Information Security Office-Security Services & Cyber Defense Associate

- **Company:** Bank of China
- **Location:** New York, NY, United States
- **Experience:** Expert
- **Salary:** $90,000.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Software System Penetration Testing, Application Services, Unix, Cyber Security, Databases, Identity and Access Management, Networking Hardware, Windows Servers, Network Architecture, Security Information and Event Management, Software Vulnerability Management, Firewalls (Computer Science), Information Technology, Cyber Warfare
- **Published:** September 18, 2026
- **Apply:** https://www.dice.com/job-detail/113e02f0-6b3f-48e6-a284-c021c2553a62

## About the Role

* Bachelor's degree in business, Computer Science, Management Information Systems, Engineering, Mathematics, or related field is required.
 * Minimum 1 year of work experience in Information security, cybersecurity, vulnerability management, security architecture, network, security tools and computer systems administration, risk management.
 * Good understanding of regulatory requirements including FFIEC, GLBA, NIST.
 * Knowledge of Information security and cyber security best practices.
 * Knowledge of systems administration such as Windows Server, Active Directory management, Firewall, UNIX system, network architectures, etc.
 * Knowledge of security tools such as SIEM, DLP, XDR, EDR, Web Filter etc.
 * Good understanding of protocol behaviors, validity of identified vulnerabilities.
 * CISSP/CRISC/ or IT related certifications preferred.

## Description

This incumbent will provide Security Services and Cyber Defense functions as required to fulfill the Bank's information security program requirements. This incumbent will provide support to Security Architecture, Security Engineering, Security Operations, Identity & Access Management, Threat Management, Vulnerability Management and Penetration Testing functions., Security Architecture, Security Engineering & Security Operations (45%)

 * Provide Security Standards and requirements for all in-house and Third-Party applications being built or procured by the Bank
 * Provide support and expertise to IT to find security solutions that meet requirement
 * Manage assigned security monitoring tools for daily security monitoring which includes but not limited to network devices, platforms, databases, applications
 * Design, configure and enhance assigned security tools for effective security event monitoring and escalate accordingly
 * Conduct assigned security tools rule and configuration validation and monitored devices recertification - Identify and escalate security issues and assist in cybersecurity incident investigations
 * Perform regular maintenance of assigned security tools including software upgrades, license updates and fine tuning of rules and configuration

Threat Management, Vulnerability Management & Penetration Testing (45%)

 * Conduct threat assessment and modeling as required
 * Conduct vulnerability scans of internal and external network
 * Present results to IT and partner to perform analysis, set criticality levels and assign timelines for remediation
 * Provide oversight of IT remediation, track and report all findings to the Information Security Committee
 * Coordinate penetration testing exercises in collaboration with IT
 * Present results to IT and partner to perform analysis, set criticality levels and assign timelines for remediation
 * Provide oversight of IT remediation, track and report all findings to the Information Security Committee


## Related Videos

- [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases)
- [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases)
- [The Time Paradox: Building Timezone-Safe Python/Django Applications](https://www.wearedevelopers.com/videos/1915-the-time-paradox-building-timezone-safe-python-django-applications)
- [Getting under the skin: The Social Engineering techniques](https://www.wearedevelopers.com/videos/38-getting-under-the-skin-the-social-engineering-techniques)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)