Cloud Security Governance Analyst - Remediation & IaC

Cyber Security Jobs; Chicago (IL); Sur place; USD 145 000 - 193 000; Plein temps

Résumé du poste

Bank of America is seeking a Sr. Cloud Security Analyst to design, implement, and manage security controls across multi-cloud environments.

You will partner with cross-functional teams to secure cloud-based applications, data, and infrastructure, including AWS, Azure, and Google Cloud. Responsibilities include leading cloud architecture reviews, automating security assessments with IaC and PaC, integrating security into CI/CD pipelines, and supporting remediation for audits and third-party risk

Qualifications

• 5+ years experience with cloud platforms (AWS, Azure, Google Cloud).
• Detail-oriented with ability to identify risks and gaps in cloud security.
• Strong communication skills to explain risks to stakeholders.
• Experience with CI/CD pipelines and related tools.
• Familiarity with AI tools to enhance work (Github CoPilot, Claude Code).
• Scripting or programming skills (Java, Python) are a plus.

Responsabilités

• Act as security authority for cloud architecture reviews and risk assessments.
• Automate security assessments using IaC and PaC tools.
• Integrate security into CI/CD pipelines and cloud-native development.
• Evaluate, select, and onboard security solutions.
• Support remediation tied to audits and third-party risk assessments.
• Conduct security risk assessments for cloud applications, services, and infrastructure.
• Collaborate with teams to ensure secure design and operation of cloud services.

Connaissances

Cloud security

CI/CD pipelines

Communication

Problem solving

Scripting (Java/Python)

Formation

Bachelor's degree in CS/IT/Engineering

Outils

Jenkins

GitLab CI/CD

Description du poste

Bank of America is seeking a Sr. Cloud Security Analyst to design, implement, and manage security controls across multi-cloud environments.

You will partner with cross-functional teams to secure cloud-based applications, data, and infrastructure, including AWS, Azure, and Google Cloud. Responsibilities include leading cloud architecture reviews, automating security assessments with IaC and PaC, integrating security into CI/CD pipelines, and supporting remediation for audits and third-party risk