GCP Cloud Security Specialist

Bank of America; Denver (CO); On-site; USD 100,000 - 141,000; Full time

Benefits offered by this job

Industry-leading benefits

Job summary

Bank of America is seeking a Cloud Security Specialist to assess bank technologies, applications, and security controls in Cloud platforms, identify risks, and guide teams in implementing robust defenses. You will ensure compliance with Global Information Security policies and adapt testing to evolving cyber threats.

The role requires hands-on expertise in cloud security, vulnerability management, and collaboration with engineering to implement proactive security controls and regulatory

Qualifications

• 3+ years of experience with Google GCP native services and security controls.
• Experience in cloud security principles and practice.
• Understanding of vulnerability management and scanning tools.
• Ability to communicate complex security concepts to technical and non-technical stakeholders.

Responsibilities

• Improve vulnerability identification quality for Cloud environments with Vulnerability Management.
• Align cloud security strategy and roadmaps across security functions and capabilities.
• Perform gap analyses of controls and develop actionable remediation plans.
• Provide cloud vulnerability identification SME consulting and guidance to engineering teams.
• Lead efforts to identify misconfigurations in Cloud platforms and workloads and oversee security tool operations.

Skills

Cloud security concepts

Vulnerability management

DevSecOps

Threat modeling

CI/CD security integration

Analytical thinking

Independent work

Technical leadership

Education

Bachelor's degree in a technical field

Tools

Aqua

Wiz

Qualys

CrowdStrike

Job description

Bank of America is seeking a Cloud Security Specialist to assess bank technologies, applications, and security controls in Cloud platforms, identify risks, and guide teams in implementing robust defenses. You will ensure compliance with Global Information Security policies and adapt testing to evolving cyber threats.

The role requires hands-on expertise in cloud security, vulnerability management, and collaboration with engineering to implement proactive security controls and regulatory