GCP Cloud Security Specialist

Bank of America; Denver (CO); Sur place; USD 100 000 - 141 000; Plein temps

Avantages offerts par ce poste

Industry-leading benefits

Résumé du poste

Bank of America is seeking a Cloud Security Specialist to assess bank technologies, applications, and security controls in Cloud platforms, identify risks, and guide teams in implementing robust defenses. You will ensure compliance with Global Information Security policies and adapt testing to evolving cyber threats.

The role requires hands-on expertise in cloud security, vulnerability management, and collaboration with engineering to implement proactive security controls and regulatory

Qualifications

• 3+ years of experience with Google GCP native services and security controls.
• Experience in cloud security principles and practice.
• Understanding of vulnerability management and scanning tools.
• Ability to communicate complex security concepts to technical and non-technical stakeholders.

Responsabilités

• Improve vulnerability identification quality for Cloud environments with Vulnerability Management.
• Align cloud security strategy and roadmaps across security functions and capabilities.
• Perform gap analyses of controls and develop actionable remediation plans.
• Provide cloud vulnerability identification SME consulting and guidance to engineering teams.
• Lead efforts to identify misconfigurations in Cloud platforms and workloads and oversee security tool operations.

Connaissances

Cloud security concepts

Vulnerability management

DevSecOps

Threat modeling

CI/CD security integration

Analytical thinking

Independent work

Technical leadership

Formation

Bachelor's degree in a technical field

Outils

Aqua

Wiz

Qualys

CrowdStrike

Description du poste

Bank of America is seeking a Cloud Security Specialist to assess bank technologies, applications, and security controls in Cloud platforms, identify risks, and guide teams in implementing robust defenses. You will ensure compliance with Global Information Security policies and adapt testing to evolving cyber threats.

The role requires hands-on expertise in cloud security, vulnerability management, and collaboration with engineering to implement proactive security controls and regulatory