Description
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection.
Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.
One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone.
We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.
Bank of America is looking for an experienced Senior Cloud Security Engineer to join our Azure Cloud Security Operations team.
The ideal candidate must have deep knowledge of security controls, tools, features, and operations for Microsoft Azure and M365.
Candidate should be able to demonstrate relevant experience with implementing and enhancing visibility and detective capabilities in a fully managed Azure environment.
The candidate should be intellectually curious about technology and have a strong desire to find and mitigate risks.
This role will help to build a continuous improvement process as part of the Azure Cloud Security Operations team. It will partner across GIS to identify, escalate, and drive corrective actions related to lack of visibility or monitoring within the Azure environments.
You may lead cross functional teams within Global Technology that research, engineer, test, implement, communicate, monitor, and maintain solutions supporting the Bank’s information security policies and / or procedures.
You will utilize your in-depth knowledge and business requirements to design and engineer secure solutions to meet partner teams’ needs, or to address critical audit findings while protecting the Bank's cloud assets.
Required Skills
- Bachelor’s or Master’s Degree in Computer Science, Information Systems, Cyber Security, or related field.
- Eight (8) or more years relevant Cyber Security experience with at least five (5) years in Cloud SOC and / or Purple Team roles.
- Highly organized and motivated self-starter who can deliver results with minimal direction.
- Experience designing and implementing technical solutions to enhance visibility, alerting capabilities, and reduce risk within Cloud IaaS, PaaS, and M365 environments.
- Experience reviewing applications, infrastructure, and architectural designs to identify threats and vulnerabilities.
- Experience with a range of Azure native services and tools.
- Experience writing and modifying Analytic Rules.
- Experience designing and implementing SOAR capabilities within Azure.
- Deep understanding of Microsoft Azure.
- Deep understanding of Cyber Security control environments and their relationship to zero-trust networks.
- Understanding of threat frameworks, such as MITRE ATT&CK for Cloud and D3FEND.
- Understanding of Risk Management principles.
- Deep experience in building, configuring, operating and / or securing cloud infrastructure and applications in Azure with either native cloud service provider capabilities or 3rd party vendor tools.
- Proven ability to leverage Azure native capabilities to build custom reports and dashboards.
- Ability to independently assess risks and identify vulnerabilities in infrastructure with an eagerness to suggest new processes, policies, and overall improvements to internal security controls.
- Experience partnering with incident response teams, threat intelligence researchers, Red / Purple teams, and / or HUNT researchers.
- Familiarity with common Information Security and data protection frameworks and standards (i.e. CIS, NIST, HIPAA, GDPR, PCI DSSS, ISO 270001).
- Ability to navigate and collaborate effectively within a geographically complex and dispersed global corporation.
- Excellent verbal and written communication skills with ability to distill key data points and effectively present information.
Preferred Certifications
- AZ-500
- SC-200
- CCSP / CCSK
- CISSP / CISM / Security +
- Network +
This job will be open and accepting applications for a minimum of seven days from the date it was posted.
Shift :
1st shift (United States of America)
Hours Per Week :
Azure Cloud Security Architect - Remote
Implement and use cloud native tools like Log Analytics, Azure Monitor, Azure Security Center and Azure Sentinel. Network Engineering/Architecture - Acts as the department subject matter expert in TCP/IP network connectivity, subnet segmentation, security zones, secure ports/protocols, network authe...
Cloud Security Engineer
At Regions, the Cybersecurity Cloud Security Engineer contributes to the advancement of Cybersecurity strategy. Bachelor's degree in Information Security, Information Technology, Information Systems Management, Computer Science, Engineering, or related field with eight years (8) years of Information...
VP / Senior Director Cloud Security Operations
As the VP / Senior Director of CloudSecurity Operations, you will be the senior leader responsible for ensuring theoperational cybersecurity of the organization's global public cloud Software asa Service. Partner Management: Very experienced inevaluating cybersecurity and cloud security technologies...
Senior Cloud Platform / Infrastructure Engineer
This may include infrastructure as code, programming, scripting languages, multi-cloud environments, system engineering and software development. This is an exciting opportunity to make a big impact on the organization by helping to create cloud platform and transform the application environment. De...
Oracle Cloud Security and Risk Management Senior Consultant
As a Senior Consultant in our Cyber Application Security team, you will be responsible for delivering Oracle Cloud Applications Security & Controls implementation s and Risk Management Cloud (RMC) modules. A minimum of 3+ years of experience with implementing Oracle Cloud Financials / HCM Securi...
Senior Information Security Engineer
The Senior Security Engineer is expected to be a strong IT generalist with experience across a wide variety of technologies and a specialist in one or more security domains. Areas of focus for individual engineers may vary, but potential specialties include Cloud Security, Log Management & SIEM, Con...
Remote Senior Information Security Engineer/ Microsoft Security Engineer
This Senior Information Security Engineer role is an IT generalist position- targeting broad experience and deep expertise in one or more security domains such as Cloud Security, Log Management & SIEM, Continuous Monitoring, Malware Prevention, Firewalls and Intrusion Detection, Vulnerability Manage...
Information Security Officer (Cloud - AWS/ Azure and SaaS Experience)
Provide risk assessment and security consultations on projects and BAU security issues; Advise controls owners on formation of appropriate security policies and standards. Deep specialized and/or broad functional knowledge in applied enterprise information security technologies including but not lim...
Remote Senior Information Security Engineer/ Microsoft Security Engineer
This Senior Information Security Engineer role is an IT generalist position- targeting broad experience and deep expertise in one or more security domains such as Cloud Security, Log Management & SIEM, Continuous Monitoring, Malware Prevention, Firewalls and Intrusion Detection, Vulnerability Manage...
Senior Network Security Engineer
Enpro is currently seeking a Senior Network Security Engineer to join our corporate Information Security Team based in Charlotte, NC. Senior Network Security Engineer (hybrid). Responsibilities of the Senior Network Security Engineer. Required Qualifications of the Senior Network Security Engineer:....