Security Analyst jobs in United States, Colorado, Denver
Bank Of America Vulnerability Identification Quality Control Analyst United States, Colorado, Denver
Share
Job Description:
Analyzes, improves, implements, and executes security controls proactively to prevent external threat actors from infiltrating company information or systems. Typically has 3-5+ years of relevant experience and will act as an individual contributor.
This position will be a member of the GIS Vulnerability Identification Assurance (VIA) Vulnerability Identification QC (Quality Control) team. In this role, you will help implement, manage, and monitor the effectiveness of infrastructure vulnerability identification efforts to protect the confidentiality, integrity, and availability of the line of businesses’ (LOB) information assets, primarily developing and implementing enhanced QC routines for remediation validation.
This role is responsible for establishing processes and controls to monitor CVE based vulnerabilities and associated risk on technology where we do not have GIS tools for automated scanning. They will work with stakeholders, Product Owners and Software Engineers to aid in the implementation of data requirements, analyze QC performance, conduct QC related research and troubleshoot any issues.
Analyze findings from vulnerability reporting workstreams, to perform targeted QC on the vulnerabilities being reported and QC around scope of inventory being assessed.
Review current existing vulnerability detection processes for ways to streamline and make them more efficient.
Respond to relevant requests received from stakeholders, or representatives of stakeholders, for investigation of potential technology-based identification reporting issues.
Performs other related duties incidental to the work described herein and all special assignments as needed or assigned.
Lead effective and sustainable activities associated with required VAI QC’s technology-based identification P2 closures evaluations.
Scope: where scanning signatures do not exist or findings are derived from vendor appliances where authenticated scanning cannot occur.
Support the expansion of a technology-based identification activity for GIS
Support the expansion of QC to cover workstation and ATM vulnerabilities, which are fed from non-GIS teams today.
Experience with CVE vulnerability analytics as a focus area within Information Security
Strong experience with CVE based vulnerability identification and risk analysis
Experience explaining analytics in plain English and ability with communicating associated risk
Ability to see the larger picture across the teams in the organization to build consensus and drive results
Demonstrated ability to self-direct, with minimal supervision to achieve assigned goals
Identify and develop proposals for program improvement
Independent and able to work in an ever changing, fast paced environment
Required Skills:
3-5+ years of experience in information security and/or data management roles
3-5+ years of experience with vulnerability management and/or assessment
Ability to creatively approach difficult problems to provide a viable solution for risk visibility and risk reduction in the enterprise
3-5+ years of experience with vulnerability management and/or assessment
Good communication skills, and the ability to understand and translate cyber security threats from a technical perspective to business-line understanding and execution; ability to communicate risks and propose counter measures to senior technology executives
Ability to review and analyze QC data to determine overall risk
Ability to work independently on initiatives with little oversight; Motivated and willing to learn
Broad technical background utilizing security technologies, such as Server and Workstation Operating Systems, Network Security, Vulnerability Scanning Engines, and Compliance Management solutions
Strong PC skills including Microsoft Office applications.
Desired Qualifications:
Strong analytical skills/problem solving/conceptual thinking
Ability to effectively communicate with Technical and Non-Technical business owners
Assist with internal efficiencies projects and development
These jobs might be a good fit
Amazon Senior AI Security SA Specialist Solutions Architecture United States, Colorado, Denver
Share
You will work with the world’s largest computing infrastructure. Your work involves some periods' independence from your team. You will learn the daily operations of a large data center. You will be working and troubleshooting hands on with servers and network equipment.You will interact with other teams like logistics, networking, security, and etc in order to get the job done. There is never a dull moment as each day presents itself with different challenges. Work with multiple teams (DC operations, DC Engineering, Logistics, Security and Projects etc.)Some of the key responsibilities you will undertake are:
- Perform diagnostics and troubleshoot all hardware and related problems
- Perform basic level OS troubleshooting
- Perform basic level configuration troubleshooting
- Perform replacement of our parts of and devices
- Perform storage media (HDD, SSD etc.) sanitization and destruction tasks
- Maintain a high level of system reliability by prioritizing resolution of trouble tickets efficiently
- Follow DC operations, Logistics, Security and Safety related processes and guidelines
About the team
Diverse Experiences
AWS values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Mentorship & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life Balance
These jobs might be a good fit
Amazon COMSEC Officer Information Security US Amazon Dedicated Clou... United States, Colorado, Denver
Share
Application deadline: Dec 30, 2025At AWS, we are hiring a Communications Security (COMSEC) Custodian/Officer to help manage and continue to develop the COMSEC Program. This will entail managing/dealing with multiple mission partners and COMSEC accounts found around the United States. It will also require continuous engagement with mission partners and vendors as we continue to scale the program to meet customer needs and requirements.This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph.Key job responsibilities
- Establish and maintain all COMSEC accounts regionally, to include on-site troubleshooting, network deployment, regular keying and inventorying of devices, and administrative tasks associated with account compliance.- Appoint and train partner teams to support ad-hoc requirements.- Update AWS policy doctrine to ensure compliance with overarching customer requirements.- Vigorously audit individuals accounts.
- Reviewing proposed new programs requiring COMSEC to ensure the security of the program.
- Serve as a COMSEC subject matter experts on Government inter-agency working groups, committees, and task forces.- Provide support and oversight over multiple COMSEC accounts and subaccounts across multiple sites.
- Develop and update operating procedures based on site, equipment and mission partners.
- Develop and update Emergency Action Plans (EAP) based on site, equipment and mission partners.
- Conduct semi-annual COMSEC training and EAP training per site for all AWS custodians.
- Perform all necessary backups, system upgrades, reconciliations, and inventories of COMSEC material.
- Support the semi-annual COMSEC training of all COMSEC custodians.
- Support the semi-annual EAP training of all COMSEC custodians.
- Maintain all COMSEC account and subaccount file plans as instructed per mission partner.
- Use and maintain common fill devices (KIK, SKL, SDS).
- Prepare and ship COMSEC material as instructed by mission partner policies as needed
- 5+ years of project management disciplines including scope, schedule, budget, quality, along with risk and critical path management experience
- 2+ years COMSEC experience as a Primary or Alternate COMSEC Custodian.
- Experience with various Type 1 Cryptographic devices, keys and loaders
- Current, active US Government Security Clearance of TS/SCI with Polygraph
Preferred Qualifications
- Experience communicating across technical and non-technical audiences, including executive level stakeholders or clients
- Experience with AWS products and services
- Experience developing and interpreting policies, procedures, and strategies governing the planning and delivery and execution of COMSEC programs.
- Experience in making recommendations for resolving COMSEC problems and requirements for multiple mission partners that utilize Type-1 encryptors to secure their networks.
- Experience providing technical advice, guidance, and recommendations to high level management officials and technical staff on critical COMSEC security issues.
- Experience in developing SOPs for all types of COMSEC actions. (E.g. Annual Rekey, Encryptor Upgrades, STE Use)
These jobs might be a good fit
Amazon Systems Development Engineer ADC Security Services A2SE United States, Colorado, Denver
Share
Application deadline: Oct 15, 2025Possessing a deep understanding of AWS products and services, as a Delivery Consultant you will be proficient in architecting complex, scalable, and secure solutions tailored to meet the specific needs of each customer. You’ll work closely with stakeholders to gather requirements, assess current infrastructure, and propose effective migration strategies to AWS. As trusted advisors to our customers, providing guidance on industry trends, emerging technologies, and innovative solutions, you will be responsible for leading the implementation process, ensuring adherence to best practices, optimizing performance, and managing risks throughout the project.
Key job responsibilities
As an experienced technology professional, you will be responsible for:
1. Designing and implementing complex, scalable, and secure AWS solutions tailored to customer needs
2. Providing technical guidance and troubleshooting support throughout project delivery
3. Collaborating with stakeholders to gather requirements and propose effective migration strategies
4. Acting as a trusted advisor to customers on industry trends and emerging technologies
5. Sharing knowledge within the organization through mentoring, training, and creating reusable artifactsDiverse Experiences
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Why AWS
Work/Life BalanceMentorship and Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.AWS Global Services
- 3+ years of experience in cloud architecture and implementation
- Bachelor's degree in Computer Science, Engineering, related field, or equivalent experience
- 1+ years in automating security operations including scripting and automation to build scalable and secure environments, automating security assessments and remediation workflows, and implementing security policies as code
- 1+ years in advanced incident response to lead response efforts including leading detection and analysis efforts and managing eradication processes
- 3+ years of experience with security services and best practices including: implementing security controls and optimizing security measures
Preferred Qualifications
- AWS experience preferred, with proficiency in a wide range of AWS services (e.g., EC2, S3, RDS, Lambda, IAM, VPC, CloudFormation)
- AWS Professional level certifications (e.g., Solutions Architect Professional, DevOps Engineer Professional, Certified Security Specialty) preferred
- Experience with automation and scripting (e.g., Terraform, Python)
- Knowledge of security and compliance standards (e.g., HIPAA, GDPR)
- Strong communication skills with the ability to explain technical concepts to both technical and non-technical audiences
- Understanding of industry standards (e.g., PCI-DSS, ISO 27001, HIPAA, NIST frameworks
- Implementation experience with enterprise security solutions (e.g., WAF, IPS, Anti-DDOS, SIEM)
These jobs might be a good fit
Amazon Amazon Dedicated Cloud Engineer ADC Security Services A2SE United States, Colorado, Denver
Share
This position requires that the candidate selected must currently possess and maintain an active TS/SCI security clearance with polygraph. The position further requires the candidate to opt into a commensurate clearance for each government agency for which they perform AWS work.Key job responsibilities
Utility Computing (UC)Work/Life Balance
Mentorship and Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.Diverse Experiences
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
- A+ or CND (Certified Network Defender) or Network+ or Security+
- 1+ years of systems administration experience (Linux/Windows).
- Experience working with scripting languages.
- In lieu of above relevant work experience, degree in Computer Science, Engineering or a related field.
- Current, active US Government Security Clearance of TS/SCI with Polygraph
Preferred Qualifications
- 1+ years experience with cloud computing technologies.
- 1+ years of networking experience.
- 1+ years of experience with support procedures and methodologies for production computing environments.
- Experience troubleshooting and automating routine tasks.
- Experience with performance and log analysis
These jobs might be a good fit
Amazon Security Consultant AWSI Professional Services United States, Colorado, Denver
Share
As part of our dynamic team, you'll have the opportunity to tackle complex challenges and drive transformative change for our customers worldwide. You will harness the power of the cloud to automate security operations and empower our clients with unparalleled capabilities. You will thrive in a fast-paced, high-impact environment where you can make a real difference. You will work on game-changing initiatives that deliver exceptional business outcomes globally.As a member of the AWS Professional Services Global Security, Risk, and Compliance practice you will pioneer technically advanced security solutions to enable impactful customer initiatives. Building on those experiences you’ll collaborate AWS service teams on new features, innovate with new technologies and explore new challenges. This is a customer facing role that requires travel to customer sites as needed.Key job responsibilities
About the team
Diverse Experiences
AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Mentorship & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life Balance
- 1+ year(s) of experience in IT security, compliance, or risk management
- 3+ years of IT implementation experience
- BS/BA degree or equivalent experience
- Experience in technology automation, implementation, integration, and/or deployment
- Knowledge of primary AWS services such as Amazon EC2, Amazon RDS, Amazon Route 53, and Amazon Simple Storage Service (S3)
Preferred Qualifications
- 3+ years of experience in IT security, compliance, or risk management
- Experience and technical expertise in cloud computing technologies (design and implementation)
- Hands-on technical expertise in building security capabilities in code and deploying infrastructure as code
- Strong scripting skills (e.g., PowerShell, Python, Node.js, JavaScript, Bash, Ruby, Perl)
- Implementation experience with enterprise security solutions (e.g., WAF, IPS, Anti-DDOS, SIEM)
- Experience building enterprise security strategy for cloud adoption, leading implementation of the strategy, and driving the program’s evolution to meet new requirements
- Understanding of industry standards (e.g., PCI-DSS, ISO 27001, HIPAA, NIST frameworks)
These jobs might be a good fit
Amazon Delivery Consultant - Security United States, Colorado, Denver
Share
Possessing a deep understanding of AWS products and services, as a Delivery Consultant you will be proficient in architecting complex, scalable, and secure solutions tailored to meet the specific needs of each customer. You’ll work closely with stakeholders to gather requirements, assess current infrastructure, and propose effective migration strategies to AWS. As trusted advisors to our customers, providing guidance on industry trends, emerging technologies, and innovative solutions, you will be responsible for leading the implementation process, ensuring adherence to best practices, optimizing performance, and managing risks throughout the project.
Key job responsibilities
As an experienced technology professional, you will be responsible for:
1. Designing and implementing complex, scalable, and secure AWS solutions tailored to customer needs
2. Providing technical guidance and troubleshooting support throughout project delivery
3. Collaborating with stakeholders to gather requirements and propose effective migration strategies
4. Acting as a trusted advisor to customers on industry trends and emerging technologies
5. Sharing knowledge within the organization through mentoring, training, and creating reusable artifactsDiverse Experiences
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Why AWS
Work/Life BalanceMentorship and Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.AWS Global Services
- 3+ years of experience in cloud architecture and implementation
- Bachelor's degree in Computer Science, Engineering, related field, or equivalent experience
- 1+ years in automating security operations including scripting and automation to build scalable and secure environments, automating security assessments and remediation workflows, and implementing security policies as code
- 1+ years in advanced incident response to lead response efforts including leading detection and analysis efforts and managing eradication processes
- 3+ years of experience with security services and best practices including: implementing security controls and optimizing security measures
Preferred Qualifications
- AWS experience preferred, with proficiency in a wide range of AWS services (e.g., EC2, S3, RDS, Lambda, IAM, VPC, CloudFormation)
- AWS Professional level certifications (e.g., Solutions Architect Professional, DevOps Engineer Professional, Certified Security Specialty) preferred
- Experience with automation and scripting (e.g., Terraform, Python)
- Knowledge of security and compliance standards (e.g., HIPAA, GDPR)
- Strong communication skills with the ability to explain technical concepts to both technical and non-technical audiences
- Understanding of industry standards (e.g., PCI-DSS, ISO 27001, HIPAA, NIST frameworks
- Implementation experience with enterprise security solutions (e.g., WAF, IPS, Anti-DDOS, SIEM)
These jobs might be a good fit
Share
Job Description:
Analyzes, improves, implements, and executes security controls proactively to prevent external threat actors from infiltrating company information or systems. Typically has 3-5+ years of relevant experience and will act as an individual contributor.
This position will be a member of the GIS Vulnerability Identification Assurance (VIA) Vulnerability Identification QC (Quality Control) team. In this role, you will help implement, manage, and monitor the effectiveness of infrastructure vulnerability identification efforts to protect the confidentiality, integrity, and availability of the line of businesses’ (LOB) information assets, primarily developing and implementing enhanced QC routines for remediation validation.
This role is responsible for establishing processes and controls to monitor CVE based vulnerabilities and associated risk on technology where we do not have GIS tools for automated scanning. They will work with stakeholders, Product Owners and Software Engineers to aid in the implementation of data requirements, analyze QC performance, conduct QC related research and troubleshoot any issues.
Analyze findings from vulnerability reporting workstreams, to perform targeted QC on the vulnerabilities being reported and QC around scope of inventory being assessed.
Review current existing vulnerability detection processes for ways to streamline and make them more efficient.
Respond to relevant requests received from stakeholders, or representatives of stakeholders, for investigation of potential technology-based identification reporting issues.
Performs other related duties incidental to the work described herein and all special assignments as needed or assigned.
Lead effective and sustainable activities associated with required VAI QC’s technology-based identification P2 closures evaluations.
Scope: where scanning signatures do not exist or findings are derived from vendor appliances where authenticated scanning cannot occur.
Support the expansion of a technology-based identification activity for GIS
Support the expansion of QC to cover workstation and ATM vulnerabilities, which are fed from non-GIS teams today.
Experience with CVE vulnerability analytics as a focus area within Information Security
Strong experience with CVE based vulnerability identification and risk analysis
Experience explaining analytics in plain English and ability with communicating associated risk
Ability to see the larger picture across the teams in the organization to build consensus and drive results
Demonstrated ability to self-direct, with minimal supervision to achieve assigned goals
Identify and develop proposals for program improvement
Independent and able to work in an ever changing, fast paced environment
Required Skills:
3-5+ years of experience in information security and/or data management roles
3-5+ years of experience with vulnerability management and/or assessment
Ability to creatively approach difficult problems to provide a viable solution for risk visibility and risk reduction in the enterprise
3-5+ years of experience with vulnerability management and/or assessment
Good communication skills, and the ability to understand and translate cyber security threats from a technical perspective to business-line understanding and execution; ability to communicate risks and propose counter measures to senior technology executives
Ability to review and analyze QC data to determine overall risk
Ability to work independently on initiatives with little oversight; Motivated and willing to learn
Broad technical background utilizing security technologies, such as Server and Workstation Operating Systems, Network Security, Vulnerability Scanning Engines, and Compliance Management solutions
Strong PC skills including Microsoft Office applications.
Desired Qualifications:
Strong analytical skills/problem solving/conceptual thinking
Ability to effectively communicate with Technical and Non-Technical business owners
Assist with internal efficiencies projects and development
These jobs might be a good fit
