Sr. Network Security Engineer Operations Lead

Bank of America - Denver, CO

Full-time - Senior

Denver, CO

Credit Intermediation and Related Activities

About the position

The Network Security Assurance Operations Lead at Bank of America plays a critical role in maintaining the security and integrity of the network infrastructure across multiple regions, including the Americas, EMEA, and Asia Pacific. This position is pivotal in ensuring that the Network Boundary Protection team's configuration management and network security implementation monitoring processes are effectively managed. The Operations Lead is responsible for overseeing the daily performance of tools health checks management and monitoring, ensuring that the organization is prepared to respond to Priority Cyber incidents in a timely manner. This role requires a proactive approach to network security, necessitating cross-organization partnerships to address key issues that impact the enterprise's security posture. In this role, the Operations Lead will be tasked with reviewing and making decisions on network security engineering implementation requests promptly. They will also oversee the network security configuration monitoring and detection program, ensuring that any coverage gaps are identified and mitigated swiftly. The Operations Lead will maintain 24/7/365 operational coverage, providing technical guidance and mentorship to team members while tracking, resolving, and reporting on network security configuration thematic issues. Additionally, they will contribute to strategic tool deployment initiatives and ensure timely escalation of issues and impacts to Senior Executive Leadership, maintaining a continuous update on the status of critical security operations. The position demands a high level of expertise in network security engineering, with a focus on maintaining a secure and resilient network environment. The Operations Lead will need to navigate a fast-paced environment, demonstrating a superior sense of urgency and the ability to prioritize deliverables effectively. Exceptional communication skills, both written and verbal, are essential for this role, as is a willingness to coach and mentor teammates towards achieving their career growth goals.

Responsibilities

• Responsible for timely review and decision of network security engineering implementation requests
• Responsible for network security configuration monitoring and detection program
• Responsible for network security configuration coverage gap mitigation
• Responsible for timely response to engagements from the Cyber Incident Response and Management
• Responsible for maintaining 24 X 7 X 365 operations coverage
• Provide technical guidance and mentorship to team members
• Responsible for network security configuration thematic issue tracking, resolution, and reporting
• Key contributor to strategic tool deployment initiatives
• Responsible for timely Issue/impact escalation and continuous update to Senior Executive Leadership

Requirements

• Minimum 10 years Network Security Engineering Experience
• Advanced Knowledge and Ability in Splunk Search App Query development, Dashboard creation and Alert generation
• Router & Switch engineering experience
• Load Balancer engineering experience
• Network Proxy engineering experience
• Network Intrusion / Prevention Detection engineering experience
• Advanced knowledge of Enterprise-grade Firewall Architecture and Engineering best practices
• Conceptual understanding of mainstream attacker techniques, tactics, and procedures (i.e., MITRE ATT&CK Framework)
• Working knowledge of Network architecture and Engineering concepts
• Experience managing small-to-midsize groups of highly skilled security practitioners
• Experience working and managing a Security Operations Capability with 24/7/365 coverage requirements
• Superior sense of urgency and ability to effectively prioritize deliverables
• Exceptional written and verbal communication Skills
• Willingness to coach and mentor teammates towards career growth goals

Nice-to-haves

• BS or MS in Information technology/security or related areas of study
• Familiarity with compliance regulations, frameworks, and certifications (e.g., NIST, FFIEC)
• Experience with deploying and managing Cloud-based Vulnerability scanning solutions
• Windows & UNIX platform Administration

Benefits

• Competitive benefits to support physical, emotional, and financial well-being