Application Security Solution Architect

Bank of America; Addison (IL); Vor Ort; USD 140.000 - 190.000; Vollzeit

Zusammenfassung

Bank of America is seeking an experienced Application Security Solution Architect within Global Information Security. The role focuses on designing secure solutions across the application lifecycle, collaborating with Lines of Business and CIO teams to strengthen security posture.

The candidate will apply knowledge of laws and standards (NIST, ISO, OWASP) to establish policies and drive risk reductions, while guiding architecture and security best practices across enterprise projects.

Qualifikationen

• Knowledge of application security laws, rules, and guidelines (OWASP, NIST, ISO, CIS, SOX, OCC, PCI, DGPR, FISMA, FFIEC).
• Experience with SDLC security practices and pipelines.
• 2+ years in application security in a large organization.
• Cloud and on-prem designs knowledge for security.
• Strong data management and metadata handling skills.

Aufgaben

• Consults with business and operations to identify challenges and opportunities to improve technology use and effectiveness.
• Plans and prioritizes architecture runway to enable business epics/features.
• Performs design reviews to ensure non-functional requirements (security, performance, maintainability, scalability, usability, reliability).
• Leads high-level architecture shaping with evolving requirements, ensuring modularity and flexibility.
• Educates team members on best practices and standardized methods.
• Clarifies architecture and assists with system design for development teams.
• Uses templates and documentation to create architectural designs and suggest improvements.

Kenntnisse

Analytical Thinking

Architecture

Result Orientation

Solution Design

Technical Strategy

Application Development

Collaboration

Data Management

DevOps

Risk Management

Agile

Automation

Influence

Solution Delivery

Test Engineering

Ausbildung

CISSP certification (advantage)

Tools

Static/Dynamic SAST/DAST

Bill of Materials

Penetration Testing

Jobbeschreibung

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits. We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Position Summary

We are seeking an experienced Application Security Solution Architect to join an exciting team within Global Information Security (GIS). Cyber Security Technology (CST) is a globally distributed team responsible for cyber security innovation and architecture, engineering, solutions and capabilities development, cyber resiliency, access management engineering, data strategy, deployment maintenance, technical project management, and information technology security control support.

The Application Security Solution Architect will facilitate designing, strengthening, and securing solutions that Bank applications use to increase security posture across their entire lifecycle. This role focuses on collaboration across all Lines of Business and CIO teams to continuously improve the organization’s security adherence. The Solution Architect will design, identify, and document inefficiencies, and prioritize improvement opportunities across the application development lifecycle and authentication related projects.

Additionally, the role also will actively apply knowledge of laws, rules, regulations, and information security concepts (e.g., NIST, COBIT, ISO, OWASP) to establish and maintain information security policies and standards. Job expectations include working with information security engineering and product teams to identify risk gaps and direct the overall application security design strategy.

Key Responsibilitie s

• Analyze, design, develop, and deliver secure application security solutions.
• Create and leverage security patterns that align application designs with business requirements.
• Lead solution design, including security requirements, risk identification, opportunities, and policy alignment.
• Collaborate across lines of business, security, engineering, and platform architecture teams.
• Serve as a technical security design SME for products supporting the Software Development Lifecycle (SDLC).
• Own solution architecture and design documentation for application security platforms and components.
• Define application development architecture, standards, patterns, and security best practices.
• Maintain security blueprints, portfolio designs, and reference architectures.
• Communicate risks, challenges, and design considerations to engineering, operations, developers, information security, and senior leadership.

Required Qualifications

• Knowledge and understanding of Application Security specific laws, rules, regulations, and Guidelines such as OWASP, NIST, ISO/EC, CIS, SOX, OCC, PCI, DGPR, FISMA, FFIEC within the financial services sector.
• Possession of CISSP certification would be an advantage.
• Knowledge of application security and pen testing methodologies, techniques, and technologies.
• Knowledge of software development lifecycle related tools and methodology which support automated security compliance integration within different pipeline solutions would be an advantage.
• 2+ years relevant hands-on experience in application security fields in a large and complex organization.
• Security knowledge which covers core technology infrastructure, cloud technologies, and application security practice.
• Experience with application development tools, Static and Dynamic Application Security Testing, Bill of Materials, Penetration Testing, Threat Modeling, common development Pipelines, and common cloud and on-premise designs and architectures.
• Proficient in articulating facts and data-driven plans and ability to partner with stakeholders to implement intended solutions to drive risk reductions and adherence to relevant Secure by Design requirements within.
• Strong attention to detail and advanced analytical skills.
• Excellent communication and presentation skills.
• Excellent organizational skills and be able to effectively prioritize multiple tasks.
• Hands on experience and involvement in large and complex projects.
• Proficient in data management which includes strong data analytical capabilities with advanced understanding of the collection and management of metadata.

Job Description:
This job is responsible for defining an architectural vision and solution aligned to the enterprise architecture strategy, technology, and platform choices. Key responsibilities include describing the solution intent/associated operating environment, evaluating system impacts, determining the primary systems/sub-systems and their interfaces, and assisting with end-to-end solution design. Job expectations include defining non-functional requirements/architectural runway to support new epics/features and ensuring solutions are fit for purpose by working with stakeholders and service providers.

Responsibilities:

• Consults with the business and operations to identify and understand challenges and opportunities to improve the use and effectiveness of technology, find creative solutions through knowledge of the domain, practical experiments, and Proof of Concepts, and aligns the solution intent and architectural vision to an evolving backlog of technology change
• Works with product management and other stakeholders to plan and prioritize technology focused backlog items for the architecture runway to enable business epics/features
• Performs design and code reviews to ensure all non-functional requirements for a solution are sufficiently met (for example, security, performance, maintainability, scalability, usability, and reliability)
• Leads rapid shaping of a high level architecture with details filled in with emerging business requirements and ensures architecture is flexible, modular, and designed to adapt easily
• Educates team members on the technology practices, standardization strategies, and best practices to create innovative solutions
• Clarifies the architecture and assists with system design for the development teams to support implementation and provides solution options to resolve any architectural impediments
• Utilizes the defined best practices, templates, and documentation to create architectural designs and suggests improvements to best practices and templates

Skills:

• Analytical Thinking
• Architecture
• Result Orientation
• Solution Design
• Technical Strategy Development
• Application Development
• Collaboration
• Data Management
• DevOps Practices
• Risk Management
• Agile Practices
• Automation
• Influence
• Solution Delivery Process
• Test Engineering

Shift:

1st shift (United States of America)

Hours Per Week:

40