Network Security Engineer - Threat Engineer

Bank of America - Plano, TX

Full-time - Mid Level

Plano, TX

Credit Intermediation and Related Activities

About the position

At Bank of America, the Network Security Engineer - Threat Engineer plays a crucial role in supporting the Cybersecurity Release & Deployment initiatives, which involve the deployment of new security systems for high-profile projects, as well as Lifecycle Management Refresh initiatives aimed at upgrading hardware and software to mitigate risks associated with end-of-life equipment or non-permitted technologies. This position is responsible for tool and service designs within a technical domain that align with business strategies while adhering to architectural governance, standards, and policies. The Threat Engineer will be tasked with creating infrastructure tools and their integration as a service, facilitating the deployment of technical solutions by developing templates, playbooks, and automation used during implementation. The individual in this role will be expected to identify opportunities for improving efficiency in the implementation and maintenance of tools and services, fostering a culture of innovation and continuous improvement. They will provide subject matter expertise and consulting services on a range of technologies, assisting Technical Analysts and Infrastructure Engineers to ensure compliance with enterprise system design and engineering standards. The Threat Engineer will also translate business requirements into technical definitions, reference models, blueprints, and playbooks for deployment, ensuring that all solutions are fit for purpose and compliant with architecture standards and policies. In addition to technical responsibilities, the Threat Engineer will promote an inclusive and healthy working environment, helping to resolve organizational impediments and blockers. They will contribute to the creation and selection of functional and non-functional product evaluation requirements across domains, ensuring that the organization adopts the best practices in security solutions. This dynamic position requires strong collaboration, communication skills, and the ability to manage multiple technical project engagements while meeting deadlines and priorities.

Responsibilities

• Provides subject matter expertise and consulting services on a range of technologies and assists Technical Analysts and Infrastructure Engineers to ensure that technology solutions comply with enterprise system design and engineering standards.
• Assists with translating business requirements into technical definitions, reference models, blueprints, and playbooks for deployment in compliance with architecture standards and policies.
• Assists in the evaluation of reference models, blueprints and playbooks to ensure they are fit for purpose.
• Develops software solutions to address manual and repeatable work or inefficient processes.
• Conducts on-site evaluations of third-party products being considered for firm adoption.
• Promotes an inclusive and healthy working environment and helps to resolve organizational impediments/blockers.
• Contributes to the creation/selection of functional and non-functional product evaluation requirements within and across domains.
• Ensures technical planning and logistics occur to achieve targeted schedules and annual commitment to refresh and build requirements are met, while incurring zero impact to the network.
• Identifies opportunities to improve service delivery and objectively measures the effects of these efforts over time.

Requirements

• 5+ years of security experience with Threat solutions.
• In-depth engineering experience in Threat solutions, including the design, low-level engineering, and delivery of new hardware systems for client applications.
• Strong experience with Proxies (ex. SkyHigh or Broadcom).
• Experience building/operating/deploying various Threat platforms including SkyHigh Secure Web Gateway, Broadcom BlueCoat, F5 SSLO, Trellix FireEye.
• Strong attention to detail and ability to follow an existing refined process, while also seeking continual improvements.
• Strong analytical, problem solving, and organizational skills required.
• Proven ability to effectively collaborate with others, make decisions to initiate action, and adapt to change.
• Ability to work nights and weekends as required to support change activities.

Nice-to-haves

• B.S. degree in Business Management, Computer Science, or equivalent preferred.
• Knowledge of DMZ Networking and Cisco Routing/Switching is a plus.
• Security and networking professional certifications highly preferred; ISC2 (CISSP), Cisco (CCNP).
• Bank experience highly recommended.
• Programming skills a plus: sh, Perl, Python, Golang, C, C++.
• Administrator level ability with UNIX (Linux or another variant) is highly desirable.

Benefits

• Competitive benefits to support physical, emotional, and financial well-being.
• Opportunities to learn, grow and make an impact.
• Flexible working arrangements depending on the role.