Cloud Security Controls Deployment Specialist

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. Were devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us

The Cloud Security Technology & Controls Deployment specialist will be responsible for management of cloud security tools and end-end controls UAT/ production deployments within multi cloud platforms. You will be responsible to establish new process and support on multiple cloud initiatives to help mature the cloud security posture management. You'll work with internal Cloud security engineering teams to ensure that code is developed based on the cloud security requirements and perform end-end UAT and implementations of Cloud environments. You'll be responsible for all production deployments as part of the cloud initiatives.

This role requires deep knowledge of cloud configurations, industry standards and related security controls. The specialist must also develop and maintain documentation that accurately describes the current cloud control environment, for review by oversight organizations (Audit, Compliance, Operational Risk, Regulators, etc.)

The successful candidate is an intellectually curious self-starter who requires minimal oversight and who has hands-on experience to hit ground day 1 with cloud control deployments. Along with a strong work ethic, the candidate must have cloud experience and a proven history executing and evaluating proof of concept and pilot programs. Working with and influencing at various levels of the organization, engaging with executive leadership across the enterprise, as well as with third parties to enable solutions at Bank of America are required experience for success. The successful candidate must be familiar with information security concepts and can speak to processes, tools, and technologies.

Role needs to demonstrate abilities and/or a proven record of success cloud experience building and delivering solutions across the major cloud service providers in the following areas:

• Enterprise Cloud Strategy Planning and Transformation
• Cloud Account and Subscription Architecture, and Organizational Management
• Cloud Service Management and Adoption
• Workload and Data Migration
• Cloud infrastructure and platform deployment (using Infrastructure-as-Code and Policy-as-Code)
• CI/CD Pipeline Management, Testing Orchestration, and Monitoring
• Cloud Configuration, Posture Management and Drift Monitoring
• Cloud Logging and Event Monitoring

Required skills:

• 5+ years of experience in cyber security or a technology-related field
• 5+ years of experience in cloud security (AWS|Azure|GCP)
• Demonstrated passion for cyber security, good understanding of security operations, cyber defense, network security, threat intelligence, incident response.
• Experience/Understanding of Cloud based services, technologies and providers (e.g. SaaS, IaaS, PaaS, etc.)
• Hands-on experience with implementing native cloud security services and WIZ platform with multi cloud environments for CNAPP.
• Significant experience with one or more of the following cloud environments at a large enterprise: AWS, Google Cloud, or Azure
• Experience with container security and orchestration - Docker, Containerd, Kubernetes, Cloud Foundry etc
• Detailed understanding of IaaS and virtualization - service orientated architecture designed around the delivery of Infrastructure components as a service.
• Familiar with configuration & release management tools commonly used in CI/CD pipelines (e.g. Ansible, Chef, Puppet, etc.)
• Experience with POC with WIZ platform and implementing to support multi cloud environments.
• Excellent written and verbal communication skills to describe security event details and technical analysis with audiences within the cybersecurity organization and other technology groups
• Experience with configuring cloud security native services and performing end-end UAT with key stakeholders.
• Experience with any CSPM/SSPM/CIEM/CWPP vendor solutions, and aligning cloud security to hardening standards and frameworks (CIS, NIST, ISO)
• Exhibiting familiarity with Cloud Security Alliance, Center for Internet Security, ISC2, and SANS Cloud Security Standards for securing cloud applications, IaaS, PaaS, SaaS, containers, and microservices
• Experience in building CSPM/SSPM test cases for performing proof of concepts with vendor solutions
• Experience in other security technologies such as: Security information and event management (SIEM), IDS/IPS, Web Application Firewall (WAF), endpoint protection, Sandboxing, network- and host- based firewalls, Encryption, Threat Intelligence, Penetration Testing, etc. is a plus.
• Knowledge of security and privacy-related industry standards and frameworks (e.g. NIST CSF, CIS, ISO 27001 series, COBIT, HIPAA, MITRE)
• Experience using scripting languages (Python, PowerShell, Bash, etc.) to parse machine-generated data, interact with REST APIs and automate repetitive tasks
• Proficient in Microsoft Office tools (Excel, PowerPoint, Word, SharePoint) with ability to analyze data and document policy/standards/project documentation
• Excellent verbal and written communication skills; ability to articulate technical knowledge to non-technical audience; production of policy/standards/project documentation
• Ability to take ownership of an initiative/issue through completion and work in a collaborative environment.

Preferred Qualifications:

• Certified Information Systems Security Professional (CISSP), or equivalent
• AWS Certified Solutions Architect, AWS Certified Security (or equivalent)
• CCSK+ (Certified Cloud Security Knowledge)

Desired Skills:

• Bachelor's degree in Information Technology, information security or related field
• Certifications: CCSK, CCAK (CSA), CCSP, CISSP, CCFP (ISC2), CISA, CRISC, CISM (ISACA), CCIE (Cisco), TOGAF, CCTA (McAfee),
• In-depth understanding of cloud native services and hands-on experience with implementing cloud security changes within multi cloud platforms
• Familiarity with financial industry laws, rules and regulations and guidance documents.
• Experience within Audit, Operational Risk, Compliance, Regulatory or related oversight organizations
• Experience in implementation of information security strategy, including compliance with industry best practices and regulatory requirements.
• Assist with internal efficiencies projects and development.
• Experience with Azure Security Center, AWS Cloud Security Hub, or Google Cloud Security
• Excels at adapting to changing business needs with ability to balance multiple competing priorities in an extremely dynamic environment.
• Ability to proactively anticipate problems and execute solutions.

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Shift:

Hours Per Week: