Senior Cybersecurity Engineer – Cloud Field Engineering

4 weeks ago


Washington, United States Bank of America Full time

Senior Cybersecurity Engineer – Cloud Field Engineering

Locations: Denver, Colorado; Washington, District of Columbia; Seattle, Washington; Addison, Texas; Chicago, Illinois

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities, and shareholders every day.

We’re devoted to being a diverse and inclusive workplace for everyone and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Working at Bank of America will give you a great career with opportunities to learn, grow, and make an impact, along with the power to make a difference. Join us

Role Overview:

We are seeking a highly skilled and experienced Senior Cybersecurity Engineer to join our Global Information Security (GIS) team. You will be responsible for integrating security controls as code within our cloud platforms and working closely with cross-functional teams to design, implement, and maintain robust security solutions that protect our cloud infrastructure from emerging threats.

Key Responsibilities:

  1. Threat Modeling & Risk Assessment: Conduct threat modeling and risk assessments to identify potential vulnerabilities in cloud environments and develop strategies to mitigate these risks.
  2. Design & Implementation: Develop and integrate security controls as code across multiple cloud platforms (e.g., AWS, Azure, GCP) to ensure the security and compliance of cloud infrastructure.
  3. Build Controls: Automate security processes and controls, leveraging Infrastructure as Code (IaC) tools (e.g., Terraform) to embed security at every stage of the cloud lifecycle.
  4. Delivery Controls: Create rules scanning of Infrastructure as Code at deployment to prevent non-compliant code from creating Cloud Resources.
  5. Runtime Controls: Automate the detection and remediation of non-compliant Cloud Resources moving them back to a known good state without the need for human interaction.
  6. Compliance & Governance: Ensure our cloud environments comply with internal control requirements and regulatory obligations, with robust reporting and dashboards.
  7. Advocacy: Communicate the possibilities the Cloud provides for Cybersecurity vision and roadmap to stakeholders and the team and drive user adoption.
  8. Collaboration: Work closely with DevOps, engineering, and IT teams to integrate security best practices into CI/CD pipelines.
  9. Documentation: Maintain comprehensive documentation of security controls, policies, and procedures for cloud environments.

Experience & Qualifications:

  1. Experience: Significant experience in cybersecurity across multiple domains, with a strong focus on cloud security and integrating controls as code.
  2. Technical Expertise: Deep knowledge of cloud platforms (AWS, Azure, GCP) and significant experience building and operating cloud-native security tools and services.
  3. Programming & Scripting: Proficiency in programming and scripting languages (e.g., Python, Go, Shell) used for automation and security integration.
  4. Infrastructure as Code (IaC): Significant hands-on experience building Cloud Services with IaC tools such as Terraform, CloudFormation, or similar.
  5. Security Frameworks: Familiarity with security frameworks and standards (e.g., NIST, CIS, ISO) and their application in cloud environments.
  6. DevSecOps: Strong understanding of DevSecOps principles and experience integrating security into CI/CD pipelines and operational processes.
  7. Problem-Solving: Excellent problem-solving skills, with the ability to think critically and adapt to new challenges.
  8. Communication: Strong written and verbal communication skills, with the ability to influence at all levels.
  9. Certifications: Relevant certifications such as CISSP, CCSP, AWS Solutions Architect, AWS Security Specialty, Azure Developer Associate & Azure Security Engineer Associate.

Skills:

  1. Planful: Thoughtfully setting, proactively managing, and predictably achieving commitments through strategy, process, communication, and delivery.
  2. Ownership: Acceptance of full responsibility for delivery outcome.
  3. Connected: Clear understanding of where you, your team, and your work/priorities join with others in a common goal.
  4. Consistency: Drive toward and adoption of logical, efficient, and sustainable processes and tools to achieve predictable results.
  5. Accuracy: Achieving business value within defined tolerance across measurable parameters.
  6. Influence
  7. Result Orientation
  8. Solution Design
  9. Stakeholder Management

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Shift: 1st shift (United States of America)

Hours Per Week: 40

#J-18808-Ljbffr

  • Washington DC, United States OneGlobe LLC Full time

    Job Opportunity: Our team is seeking a talented Cloud Cybersecurity Engineer to work in Washington, DC location. What You'll Get to Do as a Cloud Cybersecurity Engineer: Experience in successful cATO advisory, implementation, and sustainment for US federal Government agencies. You'll Bring These Qualifications: BS degree with 10+ years of...


  • Washington, United States LIGHTFEATHER IO LLC Full time

    LightFeather is seeking a highly skilled Cybersecurity Engineer to join our team in Washington D.C. and enhance the security posture of enterprise applications across a diverse technology stack. This hybrid role involves implementing security controls, automating security processes, and ensuring compliance with federal cybersecurity standards. You will work...


  • Washington, United States LIGHTFEATHER IO LLC Full time

    LightFeather is seeking a highly skilled Cybersecurity Engineer to join our team in Washington D.C. and enhance the security posture of enterprise applications across a diverse technology stack. This hybrid role involves implementing security controls, automating security processes, and ensuring compliance with federal cybersecurity standards. You will work...


  • Washington, United States Global Channel Management Full time

    Remote Cybersecurity Engineer needs 6+ years' experience Cybersecurity Engineer requires: • Demonstrated experience as a Cybersecurity Engineer • Remote Washington DC, VA • Extensive knowledge of security protocols, cryptography, and security frameworks. • Significant experience in managing network IDS/IPS systems, including FireEye NX and Cisco...


  • Washington, United States Department of Homeland Security Full time

    The Department of Homeland Security (DHS) is recruiting professionals to support a range of technical roles in Cybersecurity Engineering, including. Cybersecurity Engineer, Information Security Analyst, Network Engineer, and Lead Software Developer. All positions are in the DHS Cybersecurity Service.DHS Cybersecurity Service (DHS-CS) uses a multi-phase...


  • Washington, Washington, D.C., United States z SofTech Solutions, INC Full time

    About Our TeamWe are a team of experts at z SofTech Solutions, specializing in cybersecurity, systems engineering, network operations, and program management services for U.S. government and commercial customers. Our team is dedicated to delivering high-quality solutions that meet the evolving needs of our clients.We are committed to fostering a...


  • Washington, United States IQUASAR LLC Full time

    Job DescriptionJob DescriptionBenefits:401(k) matchingDental insuranceHealth insurancePaid time offMSM Technology is seeking to fill the Senior Cloud Engineer position. We strive to provide the next generation of cutting-edge technologies. Our growth means exciting career opportunities for talented professionals in engineering, software development, and...


  • Washington, United States Jobleads-US Full time

    OverviewOwn Your Future. Modern Technology Solutions, Inc. (MTSI) is seeking a Senior Cloud Integration Engineer at Joint Base Anacostia Bolling, in Washington D.C.The Senior Cloud Integration Engineer will provide technical and programmatic advice and support services on a suite of advanced weapon systems, sensors and computer processing-related...


  • Washington, United States Jobleads-US Full time

    OverviewOwn Your Future. Modern Technology Solutions, Inc. (MTSI) is seeking a Senior Cloud Integration Engineer at Joint Base Anacostia Bolling, in Washington D.C.The Senior Cloud Integration Engineer will provide technical and programmatic advice and support services on a suite of advanced weapon systems, sensors and computer processing-related...


  • Washington, Washington, D.C., United States Google Full time

    Your ImpactIn this role, you will have the opportunity to make a meaningful impact on our customers' businesses and careers. You will be responsible for developing and implementing innovative cloud solutions that meet the evolving needs of our customers. Your expertise and knowledge will enable you to provide strategic guidance and technical support to our...


  • washington, United States IDR, Inc. Full time

    IDR is seeking a dynamic and experienced Cybersecurity Engineer to join one of our top clients in WASHINGTON, D.C. This role is perfect for a seasoned professional with a strong background in cybersecurity, system engineering, and firewall administration. If you are looking for an opportunity to join a large, growing organization and work within a...


  • Washington, United States IDR, Inc. Full time

    IDR is seeking a dynamic and experienced Cybersecurity Engineer to join one of our top clients in WASHINGTON, D.C. This role is perfect for a seasoned professional with a strong background in cybersecurity, system engineering, and firewall administration. If you are looking for an opportunity to join a large, growing organization and work within a...


  • Washington, United States z SofTech Solutions, INC Full time

    Job DescriptionJob DescriptionWe are seeking an experienced AWS Cloud Computing Engineer / Architect to support the design and delivery of a secure, monitored, cloud-hosted laboratory and cloud-hosted applications.  The ideal candidate will have hands-on experience with data science and analytics with extensive use of AI/ML and LLM models, AI/MLOps,...


  • Washington, United States SourcePro Search Full time

    SourcePro Search is conducting a search for an experienced Senior Application Security Engineer in Washington, DC. The ideal candidate will serve as subject matter expert integrating secure design for applications and services within the system development lifecycle. This position collaborates with business units, project management, and engineering teams...

  • Cloud Security Expert

    14 hours ago


    Washington, United States Innovative Management Concepts, Inc. Full time

    Position SummaryThis senior-level cybersecurity position involves providing expertise in designing, implementing, and maintaining secure systems and networks for a government customer.Main ResponsibilitiesDevelop cloud security strategies and implement secure cloud technologies.Configure and manage Kubernetes clusters (EKS) securely.Create and implement...


  • Washington, United States Humana Full time

    Become a part of our caring community and help us put health first The Senior Cloud Security Engineer ensures that cybersecurity policies are engineered and deployed in cloud environments to meet compliance requirements. They automate cloud security controls to minimize and reduce threats, vulnerabilities, and risks. They ensure that cross-functional...


  • Washington, United States 4 Staffing Corp Full time

    About the job Cloud Security Engineer Job Description:Our client is looking for a skilled and experienced Cloud Security Engineer to join their team. As a Cloud Security Engineer, you will be responsible for designing, implementing, and maintaining the security infrastructure and practices for our cloud-based systems. You will work closely with...


  • Washington DC, United States IDR, Inc. Full time

    IDR is seeking a dynamic and experienced Cybersecurity Engineer to join one of our top clients in WASHINGTON, D.C . This role is perfect for a seasoned professional with a strong background in cybersecurity, system engineering, and firewall administration. If you are looking for an opportunity to join a large, growing organization and work within a...


  • Washington, United States Jobleads-US Full time

    **Job Description**We are seeking a seasoned Senior Cloud Engineering Manager to lead our high-impact projects. As a technical expert, you will oversee critical business initiatives from inception to completion, ensuring alignment with company OKRs and delivering on time.This role requires strong influencing skills, the ability to simplify complex...


  • Washington, United States MindPoint Group Full time

    Cloud Security EngineerDepartment: GRCLocation: Washington, DCTyto Athene is searching for an experienced Security Engineer to help deploy a Cloud Security Posture Management (CSPM) to a federal client.Responsibilities:Assist in the documentation, implementation, and management security control integration with cloud environments to protect sensitive OCC...