field_remote_option

field_job_occupational_field_parents_all

job_upgrade_is_featured

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Enterprise Cloud Platforms Team: Our team designs, builds, and maintains Public Cloud platforms for Bank of America’s. We provide our customers an innovative platform with bult-in integrations that allow for a faster time-to-market with reduced complexity. We believe in a high-quality engineering culture, a customer focused mindset, and building for scale and resiliency. As part of this team, you will have a large impact on the evolution of next generation Cloud services for Bank of America and explore an extensive list of new technologies that will drive innovation across our company. We are seeking Senior Site Reliability Engineers (SREs) to design, build, and maintain our next-gen platforms. The role provides opportunity to work with wide range of technologies and build a unique perspective that comes with integrating disparate services (both on-prem/off-prem) which must interact seamlessly with each other. You will work with colleagues that are fun, smart, hardworking, and driven. You will be part of a global team that is growing, giving you room to innovate and be creative. Position Summary <ul> <li>Collaborates with a diverse set of engineers, architects, and teams to design, develop, test, and implement secure, robust, highly available and scalable solutions for BofA’s External Cloud Platform</li> <li>Collaborates other software engineers and teams to design and implement deployment approaches using highly scalable, automated, continuous integration and continuous delivery pipelines.</li> <li>Responsible for all aspects of reliability, collaborates with technical experts, key stakeholders, and team members to resolve complex problems, owning the issue until you are sure it will not reoccur.</li> <li>Deep understanding of SRE practices, service level indicators, and service level objectives; proactively utilize them to resolve issues before they impact customers.</li> <li>Gather, analyze, synthesize, and develop visualizations and reporting from large, diverse data sets in service of continuous improvement of the platform.</li> <li>Implement infrastructure, configuration, and network as code for the applications and platforms in your remit.</li> <li>Identify opportunities to eliminate toil and automate the triage of issues to improve overall operational stability.</li> <li>Collaborate with a global team to identify, analyze, and resolve platform vulnerabilities.</li> <li>Proactively promotes the adoption of site reliability engineering best practices within the team and organization.</li> <li>Participate in 24x7 on-call coverage follow the sun model and performs blameless Postmortems (RCAs) as needed.</li> </ul> Required Skills: <ul> <li>15 years of combined experience in either SRE, software development, or infrastructure engineering (10 years with an advanced degree in Computer Science or related technical field).</li> <li>7+ years of hands-on experience building and maintaining cloud platforms on a major cloud service provider.</li> <li>Strong experience in implementing, monitoring, and maintaining a highly scalable and resilient Data Services platform on major CSP’s like AWS, Azure or GCP.</li> <li>Strong experience with monitoring tools such as Grafana, Prometheus, Splunk, or Dynatrace, as well as cloud native tools like CloudWatch &amp; CloudTrail, Azure Monitor and Log Analytics</li> <li>Proficiency in implementing, monitoring, and maintaining a Databricks, RDS, or OpenAI platform.</li> <li>Proficient in at least one programming language such as Python, Java/Spring Boot, and .Net; 5+ years applied experience in Python/Java</li> <li>Proficiency in implementing CI/CD pipelines with tools such as git and Jenkins, familiarity with using a GitOps model.</li> <li>Advanced knowledge of networking (firewalls, DNS, Load Balancing, Proxies, etc.)</li> <li>Advanced understanding of Linux &amp; Windows operating systems including shell scripting</li> <li>Excellent interpersonal, organizational and communication (written, verbal, and presentation) skills are a must.</li> <li>Proven ability to work independently with minimal supervision and as part of a global team with direct responsibilities and an ability to juggle competing priorities and adapt to changes in project scope.</li> </ul> Desired Skills <ul> <li>Strong experience working with a complex IAM infrastructure, including Active Directory, Azure AD Connect, Azure AD, and PingIdentity, Okta, or other SSO solutions.</li> <li>Proficiency in creating automation using Python, Terraform, or Ansible</li> <li>Proficiency in implementing, monitoring, and maintaining a Databricks, CosmosDB, or OpenAI platform.</li> <li>Experience in implementing, monitoring, and maintaining a highly scalable and resilient enterprise platform on Microsoft Azure using native services related to compute, storage, networking, security, and observability.</li> <li>Experience with containerization technologies such as EC2, EKS, Fargate, Openshift, or Kubernetes.</li> <li>Understanding of cost management, inventory management, FinOps model</li> </ul>

Bank of America

Senior Site Reliability Engineer, Enterprise Cloud Platforms, Global Technology, Australia

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being. Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization. Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us! Your background Bank of America is seeking to expand and diversify their Digital Forensics and Incident Response (DFIR) capability with motivated and adaptable individuals from a range of different backgrounds and experience. This role is open to individuals with at least 3 years of Digital Forensics experience. Required Background and Experience <ul> <li>Identify, analyze, and present evidential data from workstation orientated systems, including but not limited to systems installed with Microsoft Windows; and</li> <li>Such candidates will have experience in investigating specific facets or workstreams of various incident scenarios/investigations as part of a broader DFIR/investigative team; and</li> <li>This particular type of candidate will have accumulated some form of generalist or broad knowledge in computing and networking, together with at least a generalist understanding of information security technologies, techniques, and processes.</li> <li>This candidate may also have led or started to lead a limited amount of incident scenarios/investigations from commencement to cessation, though not a requirement.</li> </ul> Desired Background and Experience <ul> <li>Identify, analyze, and present evidential data from a wide range of enterprise systems for a wide range of incident or investigative scenarios. Scenarios involving cloud technology, such as Azure or AWS, would be especially advantageous; and</li> <li>Such candidates will have experience in investigating and leading various incident scenarios/investigations as part of a broader DFIR/investigative team from commencement to cessation; and</li> <li>This particular type of candidate will be able to draw upon their well-versed knowledge in computing and networking, together with information security technologies, techniques and processes.</li> <li>This candidate may also have initiated or driven initiatives to transform, evolve or upgrade incident scenarios/investigative processes and/or technologies.</li> </ul> For all candidates, please refer to the following in terms of skills and qualifications: <ul><li> One of the below qualifications or certifications are a requirement: <ul> <li>Bachelor’s, Masters or Doctorate Degree in a Computer Science, Computer Engineering, Information Security or Cyber/Digital Forensics related discipline; or</li> <li>Digital Forensics and Incident Response Certification (i.e., EnCE or related SANS certification, such as GCFA).</li> </ul> </li></ul> <ul><li> One or more of the following qualifications or certifications are highly advantageous, though not essential: <ul> <li>A Cloud related qualification or certification, such as Certified Cloud Security Professional (CCSP), or related to Microsoft Azure and Amazon Web Services (AWS); or</li> <li>Linux Qualification or Certification, e.g Red Hat Certified System Administrator</li> </ul> </li></ul> <ul><li> One or more of the following skills or experience are also highly advantageous and would be particularly exciting, though not essential: <ul><li> Programming and scripting skills or experience, such as: <ul> <li>Programming skills and experience, such as Java, C++, Python; or</li> <li>Batch or shell scripting experience within Windows or Linux environments; or</li> </ul> </li></ul> </li></ul> <ul><li> Experience in one of the following Digital Forensics and Incident Response (DFIR) backgrounds: <ul> <li>Cloud and/or containerization technologies (i.e., Docker and Kubernetes) within an enterprise environment; or</li> <li>Linux/Unix systems with particular focus on RedHat or other enterprise scale distributions (distros). This experience should also include excellent knowledge of operating system nuances, file systems and inner workings.</li> </ul> </li></ul> What you can expect The Cyber Threat Defense (CTD) team’s aim is to protect the bank and has an end-to-end view and influence over all security controls at the Bank. Digital Forensics (DF), which is part of CTD, is a reactive team that responds to events or incidents in order to identify and mitigate risk to the Bank. Digital Forensics purview encompasses a wide breadth of incidents, which includes but are not limited to third party breaches, determining data exfiltration and anything else in-between. The Digital Forensics team are well trained and comprise of individuals with a number of different backgrounds, which range from law enforcement, consulting and from within industry. The Digital Forensics team has a vested interest in taking members of the team to the next level. Regardless of levels of experience, training and certification opportunities are commonplace and actively encouraged, as well as the empowerment to invest time in learning new and upcoming technologies that improve on the way that we respond to incidents. What you will do Not one day is the same for Cyber Threat Defense (CTD) team and this is especially true for Digital Forensics (DF). Anyone working within the Digital Forensics team can expecting the following: <ul> <li>Utilizing your extensive Digital Forensics and Incident Response experience to conduct and manage your individual caseload across the entire incident response or investigative lifecycle from start to finish.</li> <li>Discovering unfamiliar technology or data during the midst of an incident or investigation and assessing its relevance to the issues at hand, i.e., stored information, auditing capability, evidential value etc.</li> <li>Leveraging upon your ability to communicate, both written and verbal, in a clear, concise, and inclusive manner to technical and non-technical audiences with colleagues, peers and stakeholders at all levels.</li> <li>Embracing new and upcoming technologies and assessing how they could apply and improve on the way in which the team responds to incidents.</li> <li>Working alongside a global team with colleagues in the USA and Europe, whilst placing emphasis on collaboration and sharing of ideas and methodologies.</li> <li>Undertaking and sharing the responsibilities of working an on-call schedule so that the bank is well placed to respond to incidents or investigations when required.</li> </ul>

Vice President, Digital Forensics, Global Information Security

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Overview: The Cloud Security Controls Enablement Specialist is responsible for designing, implementing, and managing security controls across multi-cloud environments, with a specific emphasis on Azure and AWS platforms, to ensure the protection of organizational data and systems. This role requires deep expertise in cloud security, architecture principles, and industry standards. The ideal candidate will work closely with various teams to ensure the security of cloud-based applications, data, and infrastructure, particularly on platforms like AWS and Azure. Key Responsibilities: <ul> <li>Lead the design and implementation of secure cloud architectures and solutions, ensuring alignment with business objectives and security requirements.</li> <li>Develop and document security architectures in partnership with CST solutions architecture team, including detailed diagrams and written explanations.</li> <li>Evaluate and recommend new cloud security technologies and practices to improve the organization's security posture.</li> <li>Develop and implement security controls for cloud infrastructure (IaaS, PaaS, SaaS) based on industry best practices and compliance requirements.</li> <li>Ensure appropriate security measures are in place to protect against threats, vulnerabilities, and breaches in Azure and AWS environments.</li> <li>Monitor and evaluate the effectiveness of existing cloud security controls and recommend enhancements.</li> <li>Define and implement security controls and policies for cloud environments, ensuring compliance with industry standards (e.g., ISO 27001, NIST, GDPR, HIPAA) and bank security policies.</li> <li>Conduct regular security assessments and audits of cloud environments to identify and mitigate risks.</li> <li>Conduct risk assessments to identify potential security threats and vulnerabilities in cloud environments.</li> <li>Develop risk mitigation strategies and work with relevant teams to implement solutions.</li> <li>Maintain and update risk registers and ensure continuous monitoring of cloud security risks.</li> <li>Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, NIST, GDPR, HIPAA).</li> <li>Develop and maintain documentation for security controls, policies, and procedures.</li> <li>Participate in internal and external audits to demonstrate compliance with cloud security requirements.</li> <li>Provide guidance and training to stakeholders on cloud security best practices and the implementation of security controls.</li> <li>Act as a liaison between the security team and other departments to promote a security-first culture. </li> <li>Collaborate with DevOps, IT, and business teams to integrate security controls into cloud deployments and CI/CD pipelines.</li> <li>Act as a subject matter expert on cloud security architecture, providing guidance and support to various stakeholders.</li> <li>Stay current with emerging cloud security trends, technologies, and best practices.</li> <li>Continuously improve security controls and processes to enhance the organization's security posture.</li> <li>Participate in security research, community engagements, industry forums, and knowledge-sharing initiatives.</li> </ul> Required Skills: <ul> <li>Strong understanding of cloud security principles and best practices for Azure and AWS platforms.</li> <li>Extensive knowledge of security tools and technologies such as SIEM, IDS/IPS, DLP, firewalls, PKI, and identity management.</li> <li>Experience architecting SIEM systems, threat intelligence platforms, security automation and orchestration.</li> <li>Knowledgeable in network security, including AWS networking primitives, security groups, network access control lists, proxies, firewall and WAF technologies.</li> <li>Experience building and implementing IaC/PaC governance strategies.</li> <li>Experience with cloud and containerized technologies, AKS, EKS, ECS, serverless, Kubernetes and Docker</li> <li>Experience with PKI secrets management platforms (e.g., Azure Key Vault, AWS, KMS, AWS Secrets Manager, HashiCorp Vault).</li> <li>DevSecOps experience building and deploying infrastructure with build and test automation technologies terraform, cloudformation, ansible, docker, jenkins</li> <li>Hands on experience designing and deploying cloud security controls at scale.</li> <li>Extensive knowledge of public cloud service providers and the threats to workloads within those environments</li> <li>Hands-on experience with cloud security solutions, including Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWPP).</li> <li>5 years of experience in cloud security</li> <li>Currently hold active AWS Security Specialty or Azure AZ-500 certification</li> <li>In-depth understanding of cloud security principles, best practices, and industry frameworks such as OWASP Top 10, NIST, CSA, CIS benchmarks</li> </ul> Desired Skills: <ul> <li>Relevant industry certifications such as ISC2 and SANS GIAC are highly desirable.</li> <li>Strong communication and interpersonal skills to work effectively with cross-functional teams.</li> <li>Ability to manage multiple projects and priorities in a fast-paced environment.</li> </ul>

Vice President, Senior Cloud Security Controls Enablement Specialist, Global Information Security, Australia

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Description: As an Azure Senior Cloud Operations Specialist, you will play a pivotal role in our organization’s growth and evolution. You will be responsible for modernizing our existing and future cloud operations workflows to simplify, optimize and ensure consistency in quality and urgency of investigations within our organization and a well-defined decision matrix for escalations to our partner organizations. You will also collaborate with partner teams to continually identify opportunities to reduce event volume, to increase event fidelity, and to engineer detections for new threats and risks. Additionally, you will support development and maintenance of innovate training programs to quickly upskill existing cybersecurity operations professionals to operate in an Azure cloud operations environment as well as to be a representative for the organization on cloud related operations in any audit or regulatory examinations. Key Responsibilities: <ul> <li>Investigate security events and incidents within cloud environments, utilizing advanced tools and techniques to identify threats and vulnerabilities.</li> <li>Design and implement comprehensive workflows for handling security events, ensuring timely and effective response procedures.</li> <li>Collaborate with cross-functional teams to develop and refine security policies, procedures, and best practices tailored to Azure cloud security operations.</li> <li>Provide guidance and mentorship to junior team members, fostering their professional development and enhancing overall team capabilities.</li> <li>Stay abreast of emerging threats, vulnerabilities, and industry trends, continually updating skills and knowledge to maintain expertise in cloud security.</li> </ul> Qualifications: <ul> <li>Extensive experience (7+ years) in cybersecurity operations, with a focus on Azure.</li> <li>Proven expertise in investigating security events and incidents within cloud environments, demonstrating strong analytical and problem-solving skills.</li> <li>Solid understanding of regulatory compliance requirements, particularly in highly regulated industries (e.g., healthcare, finance, government).</li> <li>Experience in designing and implementing workflows for security event investigation and response.</li> <li>Strong communication and interpersonal skills, with the ability to effectively collaborate with cross-functional teams and mentor junior team members.</li> <li>Ability to thrive in a fast-paced environment, managing multiple priorities and deadlines effectively.</li> </ul> Required Skills: <ul> <li>Understanding of Azure and its associated technologies, both from Security and Cloud Ops perspective.</li> <li>8+ years relevant Cyber Security experience with at least five (5) years in Cloud SOC and/or Purple Team roles.</li> <li>Experience designing and implementing technical solutions to enhance visibility, alerting capabilities, and reduce risk within Cloud IaaS, PaaS, and M365 environments.</li> <li>Experience reviewing applications, infrastructure, and architectural designs to identify threats and vulnerabilities.</li> <li>Experience with a range of Azure native services and tools.</li> <li>Experience writing and modifying Analytic Rules.</li> <li>Experience designing and implementing SOAR capabilities within Azure.</li> <li>Deep understanding of Cyber Security control environments and their relationship to zero-trust networks.</li> <li>Understanding of Terraform.</li> <li>Understanding of threat frameworks, such as MITRE ATT&amp;CK for Cloud and D3FEND.</li> <li>Understanding of Risk Management principles.</li> <li>Experience in building, configuring, operating and/or securing cloud infrastructure and applications in Azure with either native cloud service provider capabilities or 3rd party vendor tools.</li> <li>Proven ability to leverage Azure native capabilities to build custom reports and dashboards.</li> <li>Ability to independently assess risks and identify vulnerabilities in infrastructure with an eagerness to suggest new processes, policies, and overall improvements to internal security controls.</li> <li>Ability to perform root cause analyses.</li> <li>Experience partnering with incident response teams, threat intelligence researchers, Red/Purple teams, and/or HUNT researchers.</li> <li>Ability to support 24x7x365 global support through rotational on-call.</li> <li>Highly organized and motivated self-starter who can deliver results with minimal direction.</li> <li>Ability to navigate and collaborate effectively within a geographically complex and dispersed global corporation.</li> <li>Excellent verbal and written communication skills with ability to distill key data points and effectively present information.</li> </ul> Preferable Certifications: <ul> <li>AZ-500: Azure Security Engineer Associate</li> <li>CISSP</li> <li>CISM</li> </ul>

Azure Cloud Security Operations Sr Analyst, Global Information Security

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! What you can expect The Cyber Security Operations (CSO) function within Global Information Security enables the various businesses of Bank of America to conduct operations in a secure, trusted, and safe manner by defending the organization and our customers from cyberattacks. Insider Threat Investigators (ITI) within CSO investigates risks and protects against threats posed to the bank by insiders and works closely with peer teams across the enterprise to ensure comprehensive and proactive controls and monitoring are in place to detect and mitigate insider risks. Insider Threat Investigator is responsible for conducting data analysis of insider threat auditing and monitoring software resources to detect and identify insider risk activities. In addition, they will be required to complete investigations by analyzing and verifying information through various investigative techniques, internal resources, and conversations/interviews with persons of interest. The role will also require regular collaboration with experts in and out of the team, both in country and in other regions, where excellent communication skills will also be necessary. What you will do <ul> <li>Conduct investigations by analyzing and verifying information through various investigative techniques, internal resources, and conversations/interviews with persons of interest;</li> <li>Complete written reports in compliance with current reporting procedures and policies. Must have the ability to write detailed, concise, and accurate reports;</li> <li> Ability to manage high risk regional information security incidents by working in conjunction with response partners and other risk teams; </li> <li>Utilizing next generation tools and technology to conduct deep behavioral analytics assessments/ investigations with a focus on mitigating information security related insider threats;</li> <li>Ability to collect and analyze data from various applications to fulfill an investigation/support request(s)</li> <li>Document each stage of the investigation with clear &amp; concise notes </li> <li>Effectively pivot communication style &amp; verbiage based on audience (i.e. non-technical)</li> <li>Ability to collaborate well with other teams to drive resolution to an investigation, across multiple regions/countries</li> <li>Ability to effectively multi-task between several competing efforts</li> <li>Maintain an awareness of industry challenges and advancements to add value to enhancing processes &amp; technologies </li> </ul> Your background <ul> <li>5+ years’ work experience with an insider threat focus or technical background that could be applied to understand key insider risk components </li> <li>Curiosity, diversity of thought, critical thinking, willingness to learn, and persistence to identify risk</li> <li>Methodical and systematical approach to utilizing technical tools, applications, etc. </li> <li>Familiarity with Splunk, ENCASE, CrowdStrike and other similar investigative and/or monitoring tools</li> <li>Exceptional written and verbal communication skills to various audiences </li> <li>Mindset of curiosity: not afraid to learn new things </li> <li>Excellent organizational skills to manage caseload, projects and ad hoc requests</li> <li>Experience in conducting complex investigations with an Insider Threat emphasis</li> <li>Knowledge in how to conduct computer forensics </li> <li>Familiarity with participating/driving incident response events</li> </ul> Desired Skills <ul> <li>An understanding of human behavior / human psychology or investigative background </li> <li>Technical experience with information security / data loss prevention tools or controls such as Intrusion Detection &amp; Prevention technologies (IDS/IPS) and/or SIEM systems and other data correlation engines. </li> <li>Extensive experience in Splunk, ENCASE, CrowdStrike and other similar investigative and/or monitoring tools</li> <li>Certifications - Security+, Network+, CEH, CISSP, CCNA, CCNP, EnCE other cyber security related certifications</li> <li>Familiarity with sleuthing in OSINT </li> <li>Familiarity with working in cloud </li> <li>Networking/System administration experience </li> <li>Experience in scripting languages for databases </li> <li>Bachelor’s in computer science or related fields</li> </ul>

Vice President, Insider Threat Investigations, Global Information Security, Australia

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Description: The Senior Cloud Information Security Exposure Management Specialist is responsible for assessing the bank's technologies, applications, and overall security controls in Cloud platforms to identify potential risks and vulnerabilities that may impact Bank of America's information security. Key responsibilities include understanding and complying of the Bank’s Global Information Security policy and relevant cyber security threats to complete security assessments. Job expectations include providing expert technical guidance to support partners and adapting testing methods to emerging cyber security regulations and evolving threats, while developing others on the team. Key Responsibilities: <ul> <li>Lead and oversee efforts to identify vulnerabilities and misconfigurations in Cloud platforms and workloads. Improve vulnerability identification quality control for the Cloud environment; collaborating across Vulnerability Management to support end-to-end adoption.</li> <li>Manage daily operations of Cloud security solutions such as Aqua, Wiz, Qualys, CrowdStrike</li> <li>Enhance vulnerability identification process for Hybrid Cloud platforms.</li> <li>Drive Cloud Security solutions in alignment with the Bank’s cloud strategy and in accordance with security best practices</li> <li>Leads the analysis, implementation, execution, and improvement of proactive security controls to prevent external threat actors from infiltrating company systems or information.</li> <li>Conducts research and provides leadership updates regarding advanced threats to compromise security controls and protocols.</li> <li>Monitors new threats and complex attempts to compromise security controls while developing a deep expertise in the early lifecycle for security techniques to identify vulnerabilities before they present a risk to the bank.</li> <li>Develops strong partnerships by demonstrating operational expertise as a subject matter expert.</li> <li>Collaborate to align strategy and roadmaps across Cloud Security, Cyber Security Operational Controls, Security Functions and Capabilities outlining goals/outcomes, milestones, and key initiatives to track progress and provide visibility into issues.</li> <li>Provide consulting services as a cloud vulnerability identification subject matter expert.</li> <li>Quickly learn and evaluate new technologies for integration into cloud vulnerability management workstreams.</li> <li>Providing support for audit and regulatory related inquiries.</li> <li>Offer technical guidance to engineering staff to solve complex challenges.</li> </ul> Skills and experience requirements: <ul> <li>Deep understanding of Microsoft Azure and/or AWS native services, tools, and architecture.</li> <li>Deep understanding of cloud security</li> <li>Deep working knowledge of cloud threat landscape</li> <li>Deep technical experience in infrastructure and security functions</li> <li>Experience in DevSecOps and CI/CD pipeline integration through security engineering lifecycles.</li> <li>Experience writing requirements documentation.</li> <li>Understanding of Threat modeling and frameworks</li> <li>Understanding of vulnerability management and scanning tools</li> <li>Experience in project management</li> <li>Well-developed analytic, qualitative, and quantitative reasoning skills with a demonstrated creative problem-solving ability.</li> <li>Ability to work independently with little oversight on complex initiatives.</li> <li>Ability to communicate complex concepts to all levels of understanding and technical ability.</li> </ul> Desired Skills: <ul> <li>CISSP/CCSP/CISM</li> <li>Cloud specific Security certifications such as SANS/GIAC</li> <li>Vendor specific and relevant certifications – AZ-500, SC-400, AWS Certified Security Specialty, CKA, CKS, RHCE, etc</li> <li>Bachelor’s and/or Masters degree in a technical field</li> </ul>

Vice President, Cloud Information Security Exposure Management Specialist, Global Information Security, Australia

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Role and Responsibilities As a Vice President, Payment Application Support Engineer, you will be responsible for support of cloud (AWS, Azure) deployed applications related to Payment industry, which: <ul> <li>receive card transactions from POS Terminals, Hosted Payment Pages, and forwarding them to Payment Processors</li> <li>onboard merchants to transaction processing applications, platforms</li> </ul> You can look forward to: <ul> <li>Supporting Gateway applications that process card transactions for Visa, MC, AMEX, DISC.</li> <li>Analyzing transaction failures and make recommendations to improve application reliability and quality, support processes, practices, and procedures.</li> <li>Making strong technical decisions and complete tasks &amp; assignments under limited supervision.</li> <li>Recognizing problems that need further investigations, seeking assistance when needed, and demonstrating initiative and self-motivation.</li> <li>Ensuring documentation of production incidents and collaborate with different support and development teams and resolve issues.</li> <li>Assisting the team in devising new support processes and ensure their implementation as per company policy.</li> </ul> Required Experience Qualifications for Consideration: <ul> <li>Bachelor’s degree or foreign equivalent in Computer Engineering, Computer Science, Information Technology, or a related field.</li> <li>Solid understanding of the SDLC, ITIL processes, change management, release management and configuration management.</li> <li>Knowledge of Payment industry, Cards, ATM &amp; POS Terminal and transaction processing protocols i.e. ISO 8583, fixed length message formats, etc.</li> <li>Solid Project Management skills.</li> <li>Knowledge of information systems elements (hardware, software, network) and their application to business functions/processes</li> <li>Knowledge database concepts and MS Office.</li> <li>Must have good communication and vendor management skills.</li> </ul> Preferred Skills, Experience, and Domain Knowledge: <ul> <li>Server Administration experience would be a plus to compliment the card industry experience.</li> <li>Administration of tools relative to Payment industry, Cards, ATM &amp; POS Terminal and transaction processing protocols i.e. ISO 8583, fixed length message formats etc.</li> <li>Experience with UL, Pargon and Astrex simulators, or other payment transaction simulators</li> <li>Python, Shell scripting, Putty, Oracle, SQL Server, MySQL</li> </ul> Domain Knowledge: 2-5 years of experience supporting payment gateway or acquiring systems. Familiarity with below areas of payments is necessary. <ul> <li>Knowledge of ISO 8583 message standard, and its versions for different card networks like Visa, MC, Discover, Amex.</li> <li>E-commerce<ul> <li>Hosted Payment Pages/Secure Acceptance</li> <li>Recurring and Tokenized payments</li> <li>Knowledge of payment modules of SPreedly, Shopify, Recurly, Netsuite,</li> <li>E-signature services like Docusign, rightSignature</li> </ul> </li> <li>Mobile Payments<ul> <li>Apple Pay</li> <li>Google Pay</li> </ul> </li> <li>Point of Sale Technologies<ul> <li>NCR</li> <li>PAX</li> </ul> </li> <li>REST APIs<ul><li>VISA Developer APIs</li></ul> </li> <li>Fraud and Transactional Risk Management domain</li> <li>Settlements</li> </ul> Technologies Several years of experience with the technologies listed below is necessary. <ul> <li>Linux –<ul> <li>Scripting - python, shell</li> <li>Tools – Grep, awk, netstat, pstat, free, vmstat</li> </ul> </li> <li>SQL – Oracle or Postgress</li> <li>Programming Language<ul> <li>Java (enterprise JBOSS)</li> <li>Ruby (Ruby On Rails)</li> <li>Python</li> </ul> </li> <li>Network monitoring<ul><li>VPC flow logs</li></ul> </li> <li>Cloud<ul><li>AWS ( EC2, ECS, ALB, NLB, RDS, SQS, cloudwatch)</li></ul> </li> </ul> List of payment processors <a href="https://en.wikipedia.org/wiki/List_of_online_payment_service_providers" target="_blank">https://en.wikipedia.org/wiki/List_of_online_payment_service_providers</a> Names of Gateway applications that are popular in APAC <ul> <li>MIGS - Mastercard Internet Payment Gateway Service.</li> <li>Smarvista EPG and Integration Platform - <a href="https://www.bpcbt.com/integration-platform" target="_blank">https://www.bpcbt.com/integration-platform</a></li> <li>Compass Plus - <a href="https://compassplustechnologies.com/solutions/acquiring-solutions.html" target="_blank">https://compassplustechnologies.com/solutions/acquiring-solutions.html</a></li> </ul>

Vice President, Payment Application Support Engineer, Global Technology, Australia

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Job Description: The Global Information Security (GIS) Cyber Crime Defense team investigates and engages external digital threats that impact the bank’s interests. This includes identifying, investigating, and remediating cybersecurity threats. This role would help lead the Protective Intelligence (PI) team in intelligence gathering, manual scanning for cyber threats, managing vendor relationships, performing takedowns, and creating detailed, executive-level reporting. Additionally, the role will provide strategic white glove response functionality to executives, reacting in real-time to threats as they arise utilizing a follow-the-sun methodology. Protective Intelligence Lead role with responsibility for helping drive collaboration, coordination, and response activities across the executive landscape. The role will support the development and implementation of cohesive security strategies that protect our executive leadership, assets, and sensitive information. Key Responsibilities: <ul> <li>Support the Threat Assessment team and partner in the planning and coordination of information across Cyber Security, Corporate Security, Executive Protection functions to ensure unified intelligence-driven protection strategies.</li> <li>Collaborate closely with senior leadership to understand security risks and align protection strategies with organizational priorities.</li> <li>Support a holistic approach to threat management, balancing physical and digital security considerations.</li> <li>Protective Intelligence Coordination:<ul> <li>Support the planning, coordination, and execution of protective measures for executives and key personnel.</li> <li>Ensure that executive protection strategies are informed by real-time intelligence, risk assessments, and situational awareness.</li> <li>Work closely with the Executive Protection team to ensure the safety of executives during travel, public appearances, and in-office environments.</li> <li>Understanding of how to apply open source intelligence (OSINT) skills to gather information and conduct analysis to create intelligence reports. Must be able to convey findings to senior executives orally or in written reports.</li> </ul> </li> </ul> a) Cybersecurity Collaboration: <ul> <li>Collaborate with Information Security teams to ensure the security of critical organizational data, intellectual property, and digital communications.</li> <li>Ensure cross-functional collaboration between physical and cyber security teams to mitigate emerging hybrid threats.</li> <li>Facilitate the integration of cybersecurity and physical security data for a unified understanding of security risks.</li> </ul> b) Crisis Management and Incident Response: <ul> <li>Lead the development and implementation of crisis management plans related to cyber security incidents involving our executive team members, ensuring coordination between all involved teams.</li> <li>Provide leadership during high-stakes cyber security incidents and crises, ensuring a swift and coordinated response across departments.</li> <li>Develop and execute training programs to prepare teams for potential security events, including simulations and tabletop exercises.</li> </ul> c) External Relationship Management: <ul> <li>Build and maintain relationships with law enforcement, intelligence agencies, and other relevant external stakeholders.</li> <li>Represent the company in industry forums, collaborating with peers to stay informed of evolving security trends and best practices.</li> </ul> Required skills: <ul> <li>Demonstrated leadership skills and ability to pivot program based on strategic threat landscape analysis.</li> <li>Should be comfortable working with incomplete facts, be able to quickly rationalize and drive clarity, translate to actionable tasks, and demonstrate tenacity by working assigned tasks through to completion.</li> <li>Understanding of the process to contact hosting providers to remove domains that being used to commit fraud or conducts social engineering attacks including legal parameters and investigative mindset.</li> <li>Proficiency with executive-level tracking and reporting, including expertise in Jira and Excel</li> <li>Must be comfortable in delivering messages to a wide spectrum of individuals having varying degrees of technical understanding.</li> <li>Confident and capable written and oral presentation skills, including proficiency in PowerPoint.</li> <li>Strong project management skills</li> <li>Completing written reports in compliance with current reporting procedures and policies.</li> <li>Document each stage of the investigation and maintain a focus on case logs and details.</li> <li>Ability to work independently with little oversight managing multiple investigations simultaneously.</li> <li>Ability to analyze investigations and data to find patterns and make risk based decisions to improve the processes and program</li> <li>Must have strong leadership skills and qualities which enable you to work with peers and various levels of management.</li> <li>Demonstrated vendor management skills.</li> <li>A broad knowledge of computer networking, log analysis, information security principles, and adversarial tools and techniques</li> <li>Strong analytical skills/problem solving/conceptual thinking.</li> <li>Able to identify, analyze and address cyber security issues or threats, including emerging tactics or techniques.</li> <li>Capability to convey a cybersecurity issue or threat to an external firm in a way that demonstrates how it violates the Terms of Service or Community Standards</li> <li>Ability to resolve issues with minimal negative impact and risk to the organization.</li> </ul> Desired skills: <ul> <li>Bachelor's degree in Information Technology or related field</li> <li>Open source Intelligence skills (OSINT)</li> <li>Experience in the remediation of information security risks/vulnerabilities</li> <li>Experience with network monitoring and intrusion detection systems</li> <li>Ability to work with technical and non-technical individuals.</li> </ul>

Senior Vice President, Protective Intelligence Lead, Global Information Security

Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Enterprise Cloud Platforms Team: Our team designs, builds, and maintains Public Cloud platforms for Bank of America’s. We provide our customers an innovative platform with bult-in integrations that allow for a faster time-to-market with reduced complexity. We believe in a high-quality engineering culture, a customer focused mindset, and building for scale and resiliency. As part of this team, you will have a large impact on the evolution of next generation Cloud services for Bank of America and explore an extensive list of new technologies that will drive innovation across our company. We are seeking Site Reliability Engineers (SREs) to design, build, and maintain our next-gen platforms. The role provides opportunity to work with wide range of technologies and build a unique perspective that comes with integrating disparate services (both on-prem/off-prem) which must interact seamlessly with each other. You will work with colleagues that are fun, smart, hardworking, and driven. You will be part of a global team that is growing, giving you room to innovate and be creative. Position Summary <ul> <li>Collaborates with a diverse set of engineers, architects, and teams to design, develop, test, and implement secure, robust, highly available and scalable solutions for BofA’s External Cloud Platform</li> <li>Collaborates other software engineers and teams to design and implement deployment approaches using highly scalable, automated, continuous integration and continuous delivery pipelines.</li> <li>Responsible for all aspects of reliability, collaborates with technical experts, key stakeholders, and team members to resolve complex problems, owning the issue until you are sure it will not reoccur.</li> <li>Deep understanding of SRE practices, service level indicators, and service level objectives; proactively utilize them to resolve issues before they impact customers.</li> <li>Gather, analyze, synthesize, and develop visualizations and reporting from large, diverse data sets in service of continuous improvement of the platform.</li> <li>Implement infrastructure, configuration, and network as code for the applications and platforms in your remit.</li> <li>Identify opportunities to eliminate toil and automate the triage of issues to improve overall operational stability.</li> <li>Collaborate with a global team to identify, analyze, and resolve platform vulnerabilities.</li> <li>Proactively promotes the adoption of site reliability engineering best practices within the team and organization.</li> <li>Participate in 24x7 on-call coverage follow the sun model and performs blameless Postmortems (RCAs) as needed.</li> </ul> Required Skills: <ul> <li>7 years of combined experience in either SRE, software development, or infrastructure engineering (4 years with an advanced degree in Computer Science or related technical field).</li> <li>3+ years of hands-on experience building and maintaining cloud platforms on a major cloud service provider.</li> <li>Strong experience in implementing, monitoring, and maintaining a highly scalable and resilient Data Services platform on major CSP’s like AWS, Azure or GCP.</li> <li>Strong experience with monitoring tools such as Grafana, Prometheus, Splunk, or Dynatrace, as well as cloud native tools like CloudWatch &amp; CloudTrail, Azure Monitor and Log Analytics</li> <li>Proficiency in implementing, monitoring, and maintaining a Databricks, RDS, or OpenAI platform.</li> <li>Proficient in at least one programming language such as Python, Java/Spring Boot, and .Net; 5+ years applied experience in Python/Java</li> <li>Proficiency in implementing CI/CD pipelines with tools such as git and Jenkins, familiarity with using a GitOps model.</li> <li>Advanced knowledge of networking (firewalls, DNS, Load Balancing, Proxies, etc.)</li> <li>Advanced understanding of Linux &amp; Windows operating systems including shell scripting</li> <li>Excellent interpersonal, organizational and communication (written, verbal, and presentation) skills are a must.</li> <li>Proven ability to work independently with minimal supervision and as part of a global team with direct responsibilities and an ability to juggle competing priorities and adapt to changes in project scope.</li> </ul> Desired Skills <ul> <li>Strong experience working with a complex IAM infrastructure, including Active Directory, Azure AD Connect, Azure AD, and PingIdentity, Okta, or other SSO solutions.</li> <li>Proficiency in creating automation using Python, Terraform, or Ansible</li> <li>Proficiency in implementing, monitoring, and maintaining a Databricks, CosmosDB, or OpenAI platform.</li> <li>Experience in implementing, monitoring, and maintaining a highly scalable and resilient enterprise platform on Microsoft Azure using native services related to compute, storage, networking, security, and observability.</li> <li>Experience with containerization technologies such as EC2, EKS, Fargate, Openshift, or Kubernetes.</li> <li>Understanding of cost management, inventory management, FinOps model</li> </ul>

Site Reliability Engineer, Enterprise Cloud Platforms, Global Technology, Australia

Job Description: <h2>Job Description: </h2> Come join an exciting team within Global Information Security (GIS). Cyber Security Technology (CST) is a globally distributed team responsible for cyber security innovation, architecture, engineering, solutions and capabilities development, cyber resiliency, access management engineering, data strategy, deployment maintenance, technical project management and information technology security control support. We are seeking a highly skilled and experienced Senior Cybersecurity Engineer to join our team. In this role, you will be responsible for integrating security controls as code within our cloud platforms. You will work closely with cross-functional teams, including DevOps, software engineering, and IT operations, to design, implement, and maintain robust security solutions that protect our cloud infrastructure from emerging threats. <h2>Key Responsibilities:</h2> <ul> <li> Threat Modeling &amp; Risk Assessment: Conduct threat modeling and risk assessments to identify potential vulnerabilities in cloud environments and develop strategies to mitigate these risks.</li> <li> Design &amp; Implementation: Develop and integrate security controls as code across multiple cloud platforms (e.g., AWS, Azure, GCP) to ensure the security and compliance of cloud infrastructure.</li> <li> Build Controls: Automate security processes and controls, leveraging Infrastructure as Code (IaC) tools (e.g., Terraform) to embed security at every stage of the cloud lifecycle.</li> <li> Delivery Controls: Create rules scanning of Infrastructure as Code at deployment to prevent non-Compliant code from creating Cloud Resources.</li> <li> Runtime Controls: Automate the detection and remediation of Non-Compliant Cloud Resources moving them back to a known good state without the need for human interaction.</li> <li> Compliance &amp; Governance: Demonstrate that our cloud environments comply with internal control requirements and regulatory obligations, with robust reporting and dashboards.</li> <li> Advocacy: Communicate the possibilities the Cloud Provides for Cybersecurity vision and roadmap to stakeholders and the team and drive user adoption.</li> <li> Collaboration: Work closely with DevOps, engineering, and IT teams to integrate security best practices into CI/CD pipelines, ensuring secure and efficient deployment processes.</li> <li> Documentation: Maintain comprehensive documentation of security controls, policies, and procedures for cloud environments.</li> </ul> <h2>Experience &amp; Qualifications:</h2> <ul> <li> Experience: Significant experience in cybersecurity across multiple domains, with a strong focus on cloud security and integrating controls as code.</li> <li> Technical Expertise: Deep knowledge of cloud platforms (AWS, Azure, GCP) and significant experience building and operating cloud-native security tools and services.</li> <li> Programming &amp; Scripting: Proficiency in programming and scripting languages (e.g., Python, Go, Shell) used for automation and security integration.</li> <li> Infrastructure as Code (IaC): Signifciant Hands-on experience building Cloud Services with IaC tools such as Terraform, CloudFormation, or similar.</li> <li> Security Frameworks: Familiarity with security frameworks and standards (e.g., NIST, CIS, ISO) and their application in cloud environments.</li> <li> DevSecOps: Strong understanding of DevSecOps principles and experience integrating security into CI/CD pipelines and operational processes.</li> <li> Problem-Solving: Excellent problem-solving skills, with the ability to think critically and adapt to new challenges and communicate insights in simple terms.</li> <li> Communication: Strong written and verbal communication skills, with the ability influence at all levels by explain complex security concepts to non-technical stakeholders.</li> <li> Certifications: Relevant certifications such as CISSP, CCSP, AWS Solutions Architect; AWS Security Specialty AWS Certified Security; Azure Developer Associate &amp; Azure Security Engineer Associate.</li> </ul> <h2>Skills:</h2> <ul> <li> Planful: Thoughtfully setting, proactively managing, and predictably achieving commitments through strategy, process, communication, and delivery.</li> <li> Ownership: Acceptance of full responsibility for delivery outcome – “buck stops here” mentality. And collaboratively addressing problems as they arise.</li> <li> Connected: Clear orientation and understanding of where you, your team, your work/priorities join with others in a common goal.</li> <li> Consistency: Drive toward and adoption of logical, efficient, and sustainable processes and tools to achieve predictable results.</li> <li> Accuracy: Achieving business value (as agreed with key stakeholders and control partners) within defined tolerance across measurable parameters (scope, schedule, cost).</li> </ul>

11 IT Jobs in Sydney NSW, Australia