AWS Cloud Security & CSPM Specialist

Bank of America; Chicago (IL); On-site; USD 120,000 - 170,000; Full time

Job summary

Bank of America seeks an experienced AWS CSPM Specialist to support the Cloud Security Assurance team, ensuring public cloud environments are securely configured, governed, and monitored in line with enterprise standards and risk expectations.

The role maintains CSPM detections, partners with cloud platform, infrastructure, DevOps and engineering teams, and communicates findings with clear risk-based reporting to CSA leadership, aiding audit readiness across enterprise cloud platforms.

Qualifications

• 3+ years of CSPM experience and secure cloud configuration practice.
• Experience identifying cloud misconfigurations and weaknesses.
• Hands-on with AWS compute, network, storage, and identity.
• Ability to communicate findings to technical and non-technical audiences.
• Strong analytical and documentation skills.
• Self-sufficient and capable of scoping tasks from high-level requirements.

Responsibilities

• Ensure cloud environments are securely configured and governed in alignment with CSA security standards and baselines.
• Maintain continuous visibility into cloud configuration and security posture across in-scope platforms.
• Identify cloud misconfigurations, policy violations, and control gaps across infrastructure and platform services.
• Build, maintain, and refine CSPM detections aligned to defined security baselines and control expectations.
• Support onboarding, tuning, and operationalization of CSPM tooling and posture reporting.
• Partner with cloud platform and engineering teams to remediate CSPM findings.
• Triage posture findings, assess risk and blast radius, and support remediation prioritization.
• Provide CSPM posture metrics, reporting, and risk transparency to CSA leadership.
• Contribute to cloud security standards, baseline documentation, and audit readiness efforts.
• Track evolving cloud service features and configuration risks impacting security posture.

Skills

CSPM principles

AWS core services

Risk assessment & communication

Cloud security monitoring

Documentation & analytics

Education

Bachelor’s degree in technical or security field

Tools

Wiz

Prisma Cloud

Defender

Orca

Job description

Bank of America seeks an experienced AWS CSPM Specialist to support the Cloud Security Assurance team, ensuring public cloud environments are securely configured, governed, and monitored in line with enterprise standards and risk expectations.

The role maintains CSPM detections, partners with cloud platform, infrastructure, DevOps and engineering teams, and communicates findings with clear risk-based reporting to CSA leadership, aiding audit readiness across enterprise cloud platforms.