Bank Of America Cloud Security Controls Deployment Specialist 

United States, Illinois, Chicago 

727076587

Job Description:

Job Description:

The Cloud Security Technology & Controls Deployment specialist will be responsible for management of cloud security tools and end-end controls UAT/ production deployments within multi cloud platforms. You will be responsible to establish new process and support on multiple cloud initiatives to help mature the cloud security posture management. You'll work with internal Cloud security engineering teams to ensure that code is developed based on the cloud security requirements and perform end-end UAT and implementations of Cloud environments. You'll be responsible for all production deployments as part of the cloud initiatives.

This role requires deep knowledge of cloud configurations, industry standards and related security controls. The specialist must also develop and maintain documentation that accurately describes the current cloud control environment, for review by oversight organizations (Audit, Compliance, Operational Risk, Regulators, etc.)

Role needs to demonstrate abilities and/or a proven record of success cloud experience building and delivering solutions across the major cloud service providers in the following areas:

• Enterprise Cloud Strategy Planning and Transformation
• Cloud Account and Subscription Architecture, and Organizational Management
• Cloud Service Management and Adoption
• Workload and Data Migration
• Cloud infrastructure and platform deployment (using Infrastructure-as-Code and Policy-as-Code)
• CI/CD Pipeline Management, Testing Orchestration, and Monitoring
• Cloud Configuration, Posture Management and Drift Monitoring
• Cloud Logging and Event Monitoring

Required skills:

• 5+ years of experience in cyber security or a technology-related field
• 5+ years of experience in cloud security (AWS|Azure|GCP)
• Demonstrated passion for cyber security, good understanding of security operations, cyber defense, network security, threat intelligence, incident response.
• Experience/Understanding of Cloud based services, technologies and providers (e.g. SaaS, IaaS, PaaS, etc.)
• Hands-on experience with implementing native cloud security services and WIZ platform with multi cloud environments for CNAPP.
• Significant experience with one or more of the following cloud environments at a large enterprise: AWS, Google Cloud, or Azure
• Experience with container security and orchestration - Docker, Containerd, Kubernetes, Cloud Foundry etc
• Detailed understanding of IaaS and virtualization - service orientated architecture designed around the delivery of Infrastructure components as a service.
• Familiar with configuration & release management tools commonly used in CI/CD pipelines (e.g. Ansible, Chef, Puppet, etc.)
• Experience with POC with WIZ platform and implementing to support multi cloud environments.
• Excellent written and verbal communication skills to describe security event details and technical analysis with audiences within the cybersecurity organization and other technology groups
• Experience with configuring cloud security native services and performing end-end UAT with key stakeholders.
• Experience with any CSPM/SSPM/CIEM/CWPP vendor solutions, and aligning cloud security to hardening standards and frameworks (CIS, NIST, ISO)
• Exhibiting familiarity with Cloud Security Alliance, Center for Internet Security, ISC2, and SANS Cloud Security Standards for securing cloud applications, IaaS, PaaS, SaaS, containers, and microservices
• Experience in building CSPM/SSPM test cases for performing proof of concepts with vendor solutions
• Experience in other security technologies such as: Security information and event management (SIEM), IDS/IPS, Web Application Firewall (WAF), endpoint protection, Sandboxing, network- and host- based firewalls, Encryption, Threat Intelligence, Penetration Testing, etc. is a plus.
• Knowledge of security and privacy-related industry standards and frameworks (e.g. NIST CSF, CIS, ISO 27001 series, COBIT, HIPAA, MITRE)
• Experience using scripting languages (Python, PowerShell, Bash, etc.) to parse machine-generated data, interact with REST APIs and automate repetitive tasks
• Proficient in Microsoft Office tools (Excel, PowerPoint, Word, SharePoint) with ability to analyze data and document policy/standards/project documentation
• Excellent verbal and written communication skills; ability to articulate technical knowledge to non-technical audience; production of policy/standards/project documentation
• Ability to take ownership of an initiative/issue through completion and work in a collaborative environment.

Preferred Qualifications:

• Certified Information Systems Security Professional (CISSP), or equivalent
• AWS Certified Solutions Architect, AWS Certified Security (or equivalent)
• CCSK+ (Certified Cloud Security Knowledge)

Desired Skills:

• Bachelor's degree in Information Technology, information security or related field
• Certifications: CCSK, CCAK (CSA), CCSP, CISSP, CCFP (ISC2), CISA, CRISC, CISM (ISACA), CCIE (Cisco), TOGAF, CCTA (McAfee),
• In-depth understanding of cloud native services and hands-on experience with implementing cloud security changes within multi cloud platforms
• Familiarity with financial industry laws, rules and regulations and guidance documents.
• Experience within Audit, Operational Risk, Compliance, Regulatory or related oversight organizations
• Experience in implementation of information security strategy, including compliance with industry best practices and regulatory requirements.
• Assist with internal efficiencies projects and development.
• Experience with Azure Security Center, AWS Cloud Security Hub, or Google Cloud Security
• Excels at adapting to changing business needs with ability to balance multiple competing priorities in an extremely dynamic environment.
• Ability to proactively anticipate problems and execute solutions.

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

1st shift (United States of America)