AWS Cloud-Native Security Engineer

Bank of America - Vancouver, WA

Full-time - Mid Level

Vancouver, WA

Credit Intermediation and Related Activities

About the position

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities, and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We're devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being. Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization. Working at Bank of America will give you a great career with opportunities to learn, grow, and make an impact, along with the power to make a difference. Join us! We invite you to join the Global Information Security (GIS) team at Bank of America as an Application Security Engineer. In this role, you will utilize the experience you have gained throughout your career to provide hands-on operational deployment and support for a Cloud-native security solution on the Bank's cloud-based platforms with emphasis on AWS. This is an individual contributor role working with cloud computing technologies in on-premise cloud and AWS cloud environments. Security Engineers may interact with and have visibility to members of the GIS senior leadership team as well as key business unit stakeholders. In this position, you will work across technology to deploy Cloud-native security solutions to align with the Bank's cloud strategy. You will perform vendor product design activities as required, analyze, design, and implement new Cloud-native security solutions as part of our cloud security strategy, and maintain/enhance existing solutions. You will also participate in requirements, design, and architecture review meetings.

Responsibilities

• Create and sustain compliance to security standards in all environments, patching of vulnerabilities and maintaining application currency.
• Ensure the design and approach are consistent with the security solution.
• Support our vulnerability management teams with the identified vulnerabilities and vendor security advisories detected by the Cloud-native security solution.
• Support teams with CI/CD capabilities to ensure efficient functioning of the Cloud-native security solution in the CI/CD pipelines.
• Collaborate with our team of recognized information security experts on high visibility security initiatives.

Requirements

• 3+ years of professional Information Technology/Security experience
• Experience with container deployment and management on OpenShift/Kubernetes and AWS
• Experience deploying applications on Kubernetes using Helm Charts
• Demonstrate implementation experience with AWS Cloud Security services
• Support Java/.NET application management on RHEL/Windows virtual machines using Tomcat/IIS
• Experience utilizing Splunk for application management, including creation dashboards and alerts
• Experience automating infrastructure deployment via Ansible and management via Terraform
• Ability to diagnose and resolve issues in applications (Java, .NET) and infrastructure (RHEL, Win), both in large scale on-premise and public cloud environments
• Ability to troubleshoot and escalate issues in middleware (Tomcat, IIS, Websphere) and Cloud (AWS, Azure) services
• Understanding of infrastructure architecture including load balancing, database, storage, proxy and network

Nice-to-haves

• AWS Certification in related areas
• Experience in scripting/automation using python or PowerShell
• Proficient in Windows and RHEL server support and access systems
• Understanding of CI/CD pipeline process, including security integrations
• Understanding of complex environments, their sub-components, concepts, and interactions
• Ability to work independently on initiatives with little oversight
• Strong analytical skills/problem solving/conceptual thinking
• Ability to identify, analyze and resolve risk to the organization
• Ability to effectively communicate to stakeholders with varying degrees of technical understanding
• Ability to work across management levels and lead technical peers
• Security certifications such as CISSP, Security+, various SANS
• Managed code development experience with .NET and/or Java

Benefits

• Competitive benefits to support physical, emotional, and financial well-being