> Markdown version of [/jobs/ext/3779077-application-security-operations-specialist](https://www.wearedevelopers.com/jobs/ext/3779077-application-security-operations-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Operations Specialist

- **Company:** Bank of America
- **Location:** Washington, DC, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Artificial Intelligence, Bash Shell, Unix, Cloud Computing, Cyber Security, Python (Programming Language), Machine Learning, Windows PowerShell, Software Vulnerability Management, Scripting, Software Security, Mitre Att&ck, Information Technology, Servicenow, Vulnerability Analysis
- **Published:** October 16, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=a1dd58992863893c

## About the Role

* 3 + years experience in driving and/or supporting tool integration with workflow platforms (e.g., ServiceNow).
 * Strong understanding of vulnerability management concepts and terminology.
 * Excellent prioritization, communication, and mentoring skills.

Desired Qualifications

 * BS/MS in Information Technology, Cybersecurity, or related field.
 * Familiarity with MITRE ATT&CK, cloud-based scanning, and compliance frameworks (e.g., NIST, FFIEC).
 * Experience with vulnerability rating methodologies.
 * Background in Windows and UNIX administration.
 * Proficiency in scripting languages (e.g., Python, PowerShell, Bash).
 * Hands-on experience with AI-assisted vulnerability identification activities.

## Description

The Application Security Operations Specialist is a key role, responsible for ensuring continuity of the global operational coverage, and supporting end-to-end strategic technology enablement for our application security assessment and scanning program., * Execute automated and custom scan routines to detect application and source code vulnerabilities.

 * Operational support of new frontier AI models and related testing harnesses.
 * Support for identifying, triaging, resolving events and results, including false positive results, and verifications and finding closure in collaboration with other partners, including Enterprise Remediation Governance.
 * Participate in incident response activities and contribute pertinent information to maximize collaboration with control owners and remediation teams.
 * Support application teams in their understanding and resolution of security findings.
 * Participate in development and implementation of the technology strategy.
 * Conduct proof-of-concept testing for next-gen scanning technologies.
 * Optimize and ensure resiliency of scanning platforms, including operational process improvement.
 * Identify and map vulnerability detection gaps to appropriate technology solutions.
 * Data/trend analysis to feed harness development and vulnerability management lessons learned.