Experience Inc. Jobs

Cloud Security Controls Deployment Specialist – Global Information Security

Chicago, Illinois;Washington, District of Columbia; Denver, Colorado

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Job Description:

The Cloud Security Technology & Controls Deployment specialist will be responsible for management of cloud security tools and end-end controls UAT/ production deployments within multi cloud platforms. You will be responsible to establish new process and support on multiple cloud initiatives to help mature the cloud security posture management. You'll work with internal Cloud security engineering teams to ensure that code is developed based on the cloud security requirements and perform end-end UAT and implementations of Cloud environments. You'll be responsible for all production deployments as part of the cloud initiatives.

This role requires deep knowledge of cloud configurations, industry standards and related security controls. The specialist must also develop and maintain documentation that accurately describes the current cloud control environment, for review by oversight organizations (Audit, Compliance, Operational Risk, Regulators, etc.)

The successful candidate is an intellectually curious self-starter who requires minimal oversight and who has hands-on experience to hit ground day 1 with cloud control deployments. Along with a strong work ethic, the candidate must have cloud experience and a proven history executing and evaluating proof of concept and pilot programs. Working with and influencing at various levels of the organization, engaging with executive leadership across the enterprise, as well as with third parties to enable solutions at Bank of America are required experience for success. The successful candidate must be familiar with information security concepts and can speak to processes, tools, and technologies.

Role needs to demonstrate abilities and/or a proven record of success cloud experience building and delivering solutions across the major cloud service providers in the following areas:

• Enterprise Cloud Strategy Planning and Transformation

• Cloud Account and Subscription Architecture, and Organizational Management

• Cloud Service Management and Adoption

• Workload and Data Migration

• Cloud infrastructure and platform deployment (using Infrastructure-as-Code and Policy-as-Code)

• CI/CD Pipeline Management, Testing Orchestration, and Monitoring

• Cloud Configuration, Posture Management and Drift Monitoring

• Cloud Logging and Event Monitoring

Required skills:

• 5+ years of experience in cyber security or a technology-related field

• 5+ years of experience in cloud security (AWS|Azure|GCP)

• Demonstrated passion for cyber security, good understanding of security operations, cyber defense, network security, threat intelligence, incident response.

• Experience/Understanding of Cloud based services, technologies and providers (e.g. SaaS, IaaS, PaaS, etc.)

• Hands-on experience with implementing native cloud security services and WIZ platform with multi cloud environments for CNAPP.

• Significant experience with one or more of the following cloud environments at a large enterprise: AWS, Google Cloud, or Azure

• Experience with container security and orchestration - Docker, Containerd, Kubernetes, Cloud Foundry etc

• Detailed understanding of IaaS and virtualization - service orientated architecture designed around the delivery of Infrastructure components as a service.

• Familiar with configuration & release management tools commonly used in CI/CD pipelines (e.g. Ansible, Chef, Puppet, etc.)

• Experience with POC with WIZ platform and implementing to support multi cloud environments.

• Excellent written and verbal communication skills to describe security event details and technical analysis with audiences within the cybersecurity organization and other technology groups

• Experience with configuring cloud security native services and performing end-end UAT with key stakeholders.

• Experience with any CSPM/SSPM/CIEM/CWPP vendor solutions, and aligning cloud security to hardening standards and frameworks (CIS, NIST, ISO)

• Exhibiting familiarity with Cloud Security Alliance, Center for Internet Security, ISC2, and SANS Cloud Security Standards for securing cloud applications, IaaS, PaaS, SaaS, containers, and microservices

• Experience in building CSPM/SSPM test cases for performing proof of concepts with vendor solutions

• Experience in other security technologies such as: Security information and event management (SIEM), IDS/IPS, Web Application Firewall (WAF), endpoint protection, Sandboxing, network- and host- based firewalls, Encryption, Threat Intelligence, Penetration Testing, etc. is a plus.

• Knowledge of security and privacy-related industry standards and frameworks (e.g. NIST CSF, CIS, ISO 27001 series, COBIT, HIPAA, MITRE)

• Experience using scripting languages (Python, PowerShell, Bash, etc.) to parse machine-generated data, interact with REST APIs and automate repetitive tasks

• Proficient in Microsoft Office tools (Excel, PowerPoint, Word, SharePoint) with ability to analyze data and document policy/standards/project documentation

• Excellent verbal and written communication skills; ability to articulate technical knowledge to non-technical audience; production of policy/standards/project documentation

• Ability to take ownership of an initiative/issue through completion and work in a collaborative environment.

Preferred Qualifications:

• Certified Information Systems Security Professional (CISSP), or equivalent

• AWS Certified Solutions Architect, AWS Certified Security (or equivalent)

• CCSK+ (Certified Cloud Security Knowledge)

Desired Skills:

• Bachelor's degree in Information Technology, information security or related field

• Certifications: CCSK, CCAK (CSA), CCSP, CISSP, CCFP (ISC2), CISA, CRISC, CISM (ISACA), CCIE (Cisco), TOGAF, CCTA (McAfee),

• In-depth understanding of cloud native services and hands-on experience with implementing cloud security changes within multi cloud platforms

• Familiarity with financial industry laws, rules and regulations and guidance documents.

• Experience within Audit, Operational Risk, Compliance, Regulatory or related oversight organizations

• Experience in implementation of information security strategy, including compliance with industry best practices and regulatory requirements.

• Assist with internal efficiencies projects and development.

• Experience with Azure Security Center, AWS Cloud Security Hub, or Google Cloud Security

• Excels at adapting to changing business needs with ability to balance multiple competing priorities in an extremely dynamic environment.

• Ability to proactively anticipate problems and execute solutions.

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Shift:

1st shift (United States of America)

Hours Per Week:

40

Pay Transparency details

US - CO - Denver - 1144 15th St (CO9926), US - DC - Washington - 1800 K St NW - 1800 K Street NW (DC1842)

Pay and benefits information

Pay range

$76,500.00 - $136,400.00 annualized salary, offers to be determined based on experience, education and skill set.

Discretionary incentive eligible

This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.

Bank of America and its affiliates consider for employment and hire qualified candidates without regard to race, religious creed, religion, color, sex, sexual orientation, genetic information, gender, gender identity, gender expression, age, national origin, ancestry, citizenship, protected veteran or disability status or any factor prohibited by law, and as such affirms in policy and practice to support and promote the concept of equal employment opportunity and affirmative action, in accordance with all applicable federal, state, provincial and municipal laws. The company also prohibits discrimination on other bases such as medical condition, marital status or any other factor that is irrelevant to the performance of our teammates.

To view the "EEO is the Law" poster, CLICK HERE (https://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf) .

To view the "EEO is the Law" Supplement, CLICK HERE (https://www.dol.gov/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf) .

View the LA County Fair Chance Ordinance (https://dcba.lacounty.gov/wp-content/uploads/2024/08/FCOE-Official-Notice-Eng-Final-8.30.2024.pdf) .

Bank of America aims to create a workplace free from the dangers and resulting consequences of illegal and illicit drug use and alcohol abuse. Our Drug-Free Workplace and Alcohol Policy (“Policy”) establishes requirements to prevent the presence or use of illegal or illicit drugs or unauthorized alcohol on Bank of America premises and to provide a safe work environment.

To view Bank of America’s Drug-free Workplace and Alcohol Policy, CLICK HERE .

This communication provides information about certain Bank of America benefits. Receipt of this document does not automatically entitle you to benefits offered by Bank of America. Every effort has been made to ensure the accuracy of this communication. However, if there are discrepancies between this communication and the official plan documents, the plan documents will always govern. Bank of America retains the discretion to interpret the terms or language used in any of its communications according to the provisions contained in the plan documents. Bank of America also reserves the right to amend or terminate any benefit plan in its sole discretion at any time for any reason.