Cloud Container Security Specialist | 3+ yrs, CI/CD

Bank of America; Denver (CO); On-site; USD 100,000 - 141,000; Full time

Benefits offered by this job

Discretionary incentive

Annual discretionary award

Competitive benefits

Job summary

Bank of America is seeking an Information Security professional to support container security and vulnerability management across hybrid cloud environments, helping identify risks and guide remediation.

You will partner with Vulnerability Management, Cloud Security, and Container Security teams, applying secure-by-design principles and staying ahead of evolving threats through practical engineering guidance.

Qualifications

• Strong understanding of container and software supply chain security risks.
• Experience with cloud-native services, tooling, and architectures.
• Knowledge of security principles for applications and CI/CD workflows.
• Ability to document technical information clearly for stakeholders.
• Familiarity with threat modeling and vulnerability management concepts.

Responsibilities

• Support container vulnerability identification and remediation activities.
• Collaborate with Vulnerability Management, Cloud Security, and Container Security teams.
• Assist with gap analyses of existing controls and document findings.
• Learn emerging technologies to enhance cloud/container vulnerability management.
• Assist in security audits, risk, and regulatory activities with data gathering.

Skills

Container security

Cloud-native security

Application security

DevSecOps & CI/CD

Technical documentation

Threat modeling

Vulnerability management

Communication to stakeholders

Education

Bachelor’s degree in Computer Science, Cyber Security, Information Technology, or related field

Tools

Aqua

Wiz

Qualys

CrowdStrike

Job description

Bank of America is seeking an Information Security professional to support container security and vulnerability management across hybrid cloud environments, helping identify risks and guide remediation.

You will partner with Vulnerability Management, Cloud Security, and Container Security teams, applying secure-by-design principles and staying ahead of evolving threats through practical engineering guidance.