Senior Cybersecurity Engineer

3 weeks ago

Washington, United States Bank Of America Full time
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We're devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us

Come join an exciting team within Global Information Security (GIS). Cyber Security Technology (CST) is a globally distributed team responsible for cyber security innovation, architecture, engineering, solutions and capabilities development, cyber resiliency, access management engineering, data strategy, deployment maintenance, technical project management and information technology security control support.

We are seeking a highly skilled and experienced Senior Cybersecurity Engineer to join our team. In this role, you will be responsible for integrating security controls as code within our cloud platforms. You will work closely with cross-functional teams, including DevOps, software engineering, and IT operations, to design, implement, and maintain robust security solutions that protect our cloud infrastructure from emerging threats.

Key Responsibilities:
  • Threat Modeling & Risk Assessment: Conduct threat modeling and risk assessments to identify potential vulnerabilities in cloud environments and develop strategies to mitigate these risks.
  • Design & Implementation: Develop and integrate security controls as code across multiple cloud platforms (e.g., AWS, Azure, Google Cloud Platform) to ensure the security and compliance of cloud infrastructure.
  • Build Controls: Automate security processes and controls, leveraging Infrastructure as Code (IaC) tools (e.g., Terraform) to embed security at every stage of the cloud lifecycle.
  • Delivery Controls: Create rules scanning of Infrastructure as Code at deployment to prevent non-Compliant code from creating Cloud Resources.
  • Runtime Controls: Automate the detection and remediation of Non-Compliant Cloud Resources moving them back to a known good state without the need for human interaction.
  • Compliance & Governance: Demonstrate that our cloud environments comply with internal control requirements and regulatory obligations, with robust reporting and dashboards.
  • Advocacy: Communicate the possibilities the Cloud Provides for Cybersecurity vision and roadmap to stakeholders and the team and drive user adoption.
  • Collaboration: Work closely with DevOps, engineering, and IT teams to integrate security best practices into CI/CD pipelines, ensuring secure and efficient deployment processes.
  • Documentation: Maintain comprehensive documentation of security controls, policies, and procedures for cloud environments.


Experience & Qualifications:
  • Experience: Significant experience in cybersecurity across multiple domains, with a strong focus on cloud security and integrating controls as code.
  • Technical Expertise: Deep knowledge of cloud platforms (AWS, Azure, Google Cloud Platform) and significant experience building and operating cloud-native security tools and services.
  • Programming & Scripting: Proficiency in programming and scripting languages (e.g., Python, Go, Shell) used for automation and security integration.
  • Infrastructure as Code (IaC): Significant Hands-on experience building Cloud Services with IaC tools such as Terraform, CloudFormation, or similar.
  • Security Frameworks: Familiarity with security frameworks and standards (e.g., NIST, CIS, ISO) and their application in cloud environments.
  • DevSecOps: Strong understanding of DevSecOps principles and experience integrating security into CI/CD pipelines and operational processes.
  • Problem-Solving: Excellent problem-solving skills, with the ability to think critically and adapt to new challenges and communicate insights in simple terms.
  • Communication: Strong written and verbal communication skills, with the ability influence at all levels by explain complex security concepts to non-technical stakeholders.
  • Certifications: Relevant certifications such as CISSP, CCSP, AWS Solutions Architect; AWS Security Specialty AWS Certified Security; Azure Developer Associate & Azure Security Engineer Associate


Skills:
  • Planful: Thoughtfully setting, proactively managing, and predictably achieving commitments through strategy, process, communication, and delivery.
  • Ownership: Acceptance of full responsibility for delivery outcome - "buck stops here" mentality.And collaboratively addressing problems as they arise.
  • Connected: Clear orientation and understanding of where you, your team, your work/priorities join with others in a common goal.
  • Consistency: Drive toward and adoption of logical, efficient, and sustainable processes and tools to achieve predictable results.
  • Accuracy: Achieving business value (as agreed with key stakeholders and control partners) within defined tolerance across measurable parameters (scope, schedule, cost).
  • Influence
  • Result Orientation
  • Solution Design
  • Stakeholder Management


This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Shift:
1st shift (United States of America)

Hours Per Week:
40

Pay Transparency details

US - CO - Denver - 1144 15th St - Denver Gis (CO9926), US - DC - Washington - 1800 K St NW - 1800 K Street NW (DC1842)

Pay and benefits information

Pay range

$147,700.00 - $190,000.00 annualized salary, offers to be determined based on experience, education and skill set.

Discretionary incentive eligible

This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.

Learn more about this role Senior Cybersecurity Engineer - Cloud Field Engineering

  • Senior Cybersecurity Engineer

    2 weeks ago

    Washington, Washington, D.C., United States Versar, Inc. Full time

    Job Title: Senior Cybersecurity EngineerBayFirst Solutions, a subsidiary of Versar, Inc., is seeking a highly skilled Senior Cybersecurity Engineer to support the Department of Homeland Security's Enterprise Engineering Division (EED) within the Office of the Chief Information Officer (OCIO).This role requires a strong background in cybersecurity and...

  • Senior Cybersecurity Engineer

    4 days ago

    Washington, United States SAIC Full time

    Job SummarySAIC is seeking a highly skilled Senior Cybersecurity Engineer to join our team in supporting the Department of Transportation's Cybersecurity mission. The successful candidate will assist in the implementation of IPv6 networking capabilities and collaborate with a dedicated team of cybersecurity professionals to maintain and enhance the security...

  • Senior Cybersecurity Engineer

    4 weeks ago

    Washington, Washington, D.C., United States Pennant Solutions Group Full time

    Job SummaryWe are seeking a highly skilled Senior SOC Engineer to join our team at Pennant Solutions Group. As a key member of our cybersecurity team, you will be responsible for responding to and resolving cybersecurity incidents, as well as proactively preventing their recurrence.Key ResponsibilitiesRespond to and resolve cybersecurity incidents in a...

  • Senior Cybersecurity Engineer

    2 days ago

    Washington, Washington, D.C., United States MAXISIQ, Inc. Full time

    Job Title: Senior Cybersecurity EngineerCompany DescriptionTechSilo, Inc. brings the highest quality Systems Engineering and Information Technology support services to our clients. We leverage our staff expertise to deliver creative, cost-effective solutions that leverage our team's professional expertise and specialized skills with teamwork, collaboration...

  • Cybersecurity Engineer

    2 days ago

    washington, United States MBO Partners Full time

    MBO Partners is a deep jobs platform that connects and enables independent professionals and microbusiness owners to do business safely and effectively with enterprise organizations. Its unmatched experience and industry leadership enable it to operate on the forefront of the independent economy and consistently advance the next way of working. Duration:...

  • Cybersecurity Engineer

    6 days ago

    Washington, United States MBO Partners Full time

    MBO Partners is a deep jobs platform that connects and enables independent professionals and microbusiness owners to do business safely and effectively with enterprise organizations. Its unmatched experience and industry leadership enable it to operate on the forefront of the independent economy and consistently advance the next way of working. Duration:...

  • Cybersecurity Engineer

    7 days ago

    Washington, United States MBO Partners Full time

    MBO Partners is a deep jobs platform that connects and enables independent professionals and microbusiness owners to do business safely and effectively with enterprise organizations. Its unmatched experience and industry leadership enable it to operate on the forefront of the independent economy and consistently advance the next way of working. Duration:...

  • Senior Cybersecurity Specialist

    4 weeks ago

    Washington, Washington, D.C., United States MAXISIQ, Inc. Full time

    Job Title: Senior Information Security EngineerCompany DescriptionMAXISIQ, Inc. is a leading provider of Systems Engineering and Information Technology support services. Our team of experts delivers creative, cost-effective solutions that leverage our staff's professional expertise and specialized skills with teamwork, collaboration, and forward thinking.Job...

  • Senior Cybersecurity Specialist

    4 weeks ago

    Washington, Washington, D.C., United States MAXISIQ, Inc. Full time

    Job Title: Senior Information Security EngineerCompany DescriptionTechSilo, Inc. brings high-quality Systems Engineering and Information Technology support services to clients.We leverage staff expertise to deliver creative, cost-effective solutions that leverage teamwork, collaboration, and forward thinking.Our staff has over 30 years of experience...

  • Senior Cybersecurity Analyst with Agile Engineering Expertise

    1 week ago

    Washington, Washington, D.C., United States VMD Corp Full time

    About VMD CorpVMD Corp is a leading provider of information technology solutions to the Federal government, delivering cutting-edge solutions in Agile Engineering, Cybersecurity, and Critical Infrastructure Protection.Job DescriptionWe are seeking a highly skilled Senior Cybersecurity Analyst to join our team. As a key member of our Agile Engineering team,...

  • Senior Cybersecurity Engineer

    3 weeks ago

    Washington, Washington, D.C., United States Peraton Full time

    Job SummaryWe are seeking a highly skilled Senior Network Defense Engineer to join our team at Peraton. As a key member of our cybersecurity team, you will be responsible for analyzing and mitigating threats to our computer network systems.ResponsibilitiesAnalyze and map vulnerabilities, intrusions, and threats in various computer network systems.Conduct...

  • Senior Cybersecurity Specialist

    1 day ago

    Washington, Washington, D.C., United States VTG Full time

    Job SummaryVTG is seeking a Senior Cybersecurity Engineer to provide professional support services for the Guided Missile Frigate (FFG) Program Office (PMS 515). The successful candidate will be responsible for organizing and coordinating information assurance accreditation, working closely with shipbuilders, PARMs, NAVSEA CIO, and other stakeholders.Key...

  • Senior Cybersecurity Specialist

    4 weeks ago

    Washington, Washington, D.C., United States Zachary Piper Full time

    Job Summary:Zachary Piper Solutions is seeking a seasoned Senior Information System Security Officer (Sr. ISSO) to join our team as a Zero Trust Cybersecurity Expert on a hybrid basis. In this role, you will provide expert guidance and support for a government cybersecurity and privacy program. You will be responsible for developing and refining Zero Trust...

  • Senior Cybersecurity Policy Analyst

    3 weeks ago

    Washington, Washington, D.C., United States Tik Tok Full time

    About the RoleWe are seeking a highly skilled and experienced Cybersecurity Policy Enforcement Senior Analyst to join our Global Security Organization. As a key member of our team, you will play a critical role in supporting our industry-leading cybersecurity policy program and ensuring operational compliance.ResponsibilitiesMonitor and assess compliance...

  • Senior Cybersecurity Analyst

    1 day ago

    Washington, Washington, D.C., United States VMD Corp Full time

    VMD Corp is seeking a Senior Cybersecurity Analyst to join our team in delivering information technology solutions to the Federal government. As a key member of our Agile Engineering, Cybersecurity, and Critical Infrastructure Protection team, you will be responsible for maintaining an expert knowledge base in expeditionary communications and networking...

  • Cybersecurity Policy Enforcement Senior Analyst

    4 weeks ago

    Washington, United States Tik Tok Full time

    Job Title: Cybersecurity Policy Enforcement Senior AnalystAt TikTok, we're committed to creating a secure and trustworthy environment for our users. As a Cybersecurity Policy Enforcement Senior Analyst, you'll play a critical role in ensuring our global cybersecurity policy program is effective and aligned with industry standards.Responsibilities:Monitor and...

  • Cybersecurity Engineer

    2 days ago

    Washington, Washington, D.C., United States ManTech Full time

    ManTech is seeking a skilled Cybersecurity Engineer to support the development of secure information systems and networks.Key Responsibilities:*Design and implement secure architectures for information systems and networks*Develop and integrate cybersecurity-enabled products and solutions*Collaborate with cross-functional teams to identify and mitigate...

  • Cybersecurity Engineer

    3 weeks ago

    Washington, United States Zachary Piper Full time

    Zachary Piper Solutions is hiring a Cybersecurity Engineer in Washington, DCWe are looking for:Bachelor’s degree or equivalent experienceExperience with Palo Alto (preferred) or Cisco firewall, network security appliance administration and cloud securityExperience with vulnerability scanners and management, preferably Tenable Nessus and Qualys, managing...

  • Cybersecurity Systems Engineer

    4 days ago

    Washington, Washington, D.C., United States KMS Solutions Full time

    Job Title: Cybersecurity Systems EngineerAt KMS Solutions, we are seeking a highly motivated and experienced Cybersecurity Systems Engineer to join our team. As a key member of our cybersecurity team, you will be responsible for developing and implementing security solutions to protect our clients' systems and data.Job Summary:The Cybersecurity Systems...

  • Senior Cybersecurity Manager

    2 days ago

    Washington, Washington, D.C., United States LMI Full time

    Job SummaryWe are seeking a highly experienced Senior Cybersecurity Manager to join our team at LMI. As a key member of our cybersecurity team, you will be responsible for overseeing the entire Risk Management Framework (RMF) cycle, developing and maintaining system security plans, and ensuring compliance with relevant security policies and guidelines.The...