Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Job Description:

The Cloud Security Technology & Controls Deployment specialist will be responsible for management of cloud security tools and end-end controls UAT/ production deployments within multi cloud platforms. You will be responsible to establish new process and support on multiple cloud initiatives to help mature the cloud security posture management. You'll work with internal Cloud security engineering teams to ensure that code is developed based on the cloud security requirements and perform end-end UAT and implementations of Cloud environments. You'll be responsible for all production deployments as part of the cloud initiatives.

This role requires deep knowledge of cloud configurations, industry standards and related security controls. The specialist must also develop and maintain documentation that accurately describes the current cloud control environment, for review by oversight organizations (Audit, Compliance, Operational Risk, Regulators, etc.)

The successful candidate is an intellectually curious self-starter who requires minimal oversight and who has hands-on experience to hit ground day 1 with cloud control deployments. Along with a strong work ethic, the candidate must have cloud experience and a proven history executing and evaluating proof of concept and pilot programs. Working with and influencing at various levels of the organization, engaging with executive leadership across the enterprise, as well as with third parties to enable solutions at Bank of America are required experience for success. The successful candidate must be familiar with information security concepts and can speak to processes, tools, and technologies. 

Role needs to demonstrate abilities and/or a proven record of success cloud experience building and delivering solutions across the major cloud service providers in the following areas:

Enterprise Cloud Strategy Planning and TransformationCloud Account and Subscription Architecture, and Organizational ManagementCloud Service Management and AdoptionWorkload and Data MigrationCloud infrastructure and platform deployment (using Infrastructure-as-Code and Policy-as-Code)CI/CD Pipeline Management, Testing Orchestration, and MonitoringCloud Configuration, Posture Management and Drift MonitoringCloud Logging and Event Monitoring

Required skills:

5+ years of experience in cyber security or a technology-related field5+ years of experience in cloud security (AWS|Azure|GCP)Demonstrated passion for cyber security, good understanding of security operations, cyber defense, network security, threat intelligence, incident response.Experience/Understanding of Cloud based services, technologies and providers (e.g. SaaS, IaaS, PaaS, etc.)Hands-on experience with implementing native cloud security services and WIZ platform with multi cloud environments for CNAPP.Significant experience with one or more of the following cloud environments at a large enterprise: AWS, Google Cloud, or AzureExperience with container security and orchestration - Docker, Containerd, Kubernetes, Cloud Foundry etcDetailed understanding of IaaS and virtualization - service orientated architecture designed around the delivery of Infrastructure components as a service.Familiar with configuration & release management tools commonly used in CI/CD pipelines (e.g. Ansible, Chef, Puppet, etc.)Experience with POC with WIZ platform and implementing to support multi cloud environments.Excellent written and verbal communication skills to describe security event details and technical analysis with audiences within the cybersecurity organization and other technology groupsExperience with configuring cloud security native services and performing end-end UAT with key stakeholders.Experience with any CSPM/SSPM/CIEM/CWPP vendor solutions, and aligning cloud security to hardening standards and frameworks (CIS, NIST, ISO)Exhibiting familiarity with Cloud Security Alliance, Center for Internet Security, ISC2, and SANS Cloud Security Standards for securing cloud applications, IaaS, PaaS, SaaS, containers, and microservicesExperience in building CSPM/SSPM test cases for performing proof of concepts with vendor solutionsExperience in other security technologies such as: Security information and event management (SIEM), IDS/IPS, Web Application Firewall (WAF), endpoint protection, Sandboxing, network- and host- based firewalls, Encryption, Threat Intelligence, Penetration Testing, etc. is a plus.Knowledge of security and privacy-related industry standards and frameworks (e.g. NIST CSF, CIS, ISO 27001 series, COBIT, HIPAA, MITRE)Experience using scripting languages (Python, PowerShell, Bash, etc.) to parse machine-generated data, interact with REST APIs and automate repetitive tasksProficient in Microsoft Office tools (Excel, PowerPoint, Word, SharePoint) with ability to analyze data and document policy/standards/project documentationExcellent verbal and written communication skills; ability to articulate technical knowledge to non-technical audience; production of policy/standards/project documentationAbility to take ownership of an initiative/issue through completion and work in a collaborative environment.

Preferred Qualifications:

Certified Information Systems Security Professional (CISSP), or equivalentAWS Certified Solutions Architect, AWS Certified Security (or equivalent)CCSK+ (Certified Cloud Security Knowledge)

Desired Skills:

Bachelor's degree in Information Technology, information security or related fieldCertifications: CCSK, CCAK (CSA), CCSP, CISSP, CCFP (ISC2), CISA, CRISC, CISM (ISACA), CCIE (Cisco), TOGAF, CCTA (McAfee),In-depth understanding of cloud native services and hands-on experience with implementing cloud security changes within multi cloud platformsFamiliarity with financial industry laws, rules and regulations and guidance documents.Experience within Audit, Operational Risk, Compliance, Regulatory or related oversight organizationsExperience in implementation of information security strategy, including compliance with industry best practices and regulatory requirements.Assist with internal efficiencies projects and development.Experience with Azure Security Center, AWS Cloud Security Hub, or Google Cloud SecurityExcels at adapting to changing business needs with ability to balance multiple competing priorities in an extremely dynamic environment.Ability to proactively anticipate problems and execute solutions.

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Shift:

1st shift (United States of America)

Hours Per Week: 

40