GCP Cloud Security Specialist

Bank of America; Washington (District of Columbia); On-site; USD 100,000 - 141,000; Full time

Benefits offered by this job

Industry-leading benefits

Discretionary annual incentive

Paid time off

Job summary

Bank of America is seeking an experienced Cloud Security Specialist to assess technologies, applications, and security controls across Cloud platforms. You will guide testing methods to evolving threats and regulatory requirements, mentoring teammates and partnering with stakeholders.

The role emphasizes hands-on vulnerability management, cloud security tooling, and collaboration with audit and regulatory teams to strengthen defenses and protect financial data.

Qualifications

• 3+ years understanding of Google GCP native services, tools, and architecture.
• Understanding of cloud security principles and practice.
• Experience with threat modeling and security engineering lifecycles.
• Familiarity with vulnerability management and scanning tools.
• Ability to work independently on complex initiatives.

Responsibilities

• Lead and oversee cloud vulnerability identification in Cloud platforms and workloads.
• Collaborate to align cloud security strategy, roadmaps and key initiatives.
• Perform gap analysis and develop action plans for security controls.
• Provide consulting as a cloud vulnerability SME and support audit inquiries.
• Enhance vulnerability identification processes for Hybrid Cloud environments.
• Drive security controls to prevent external threats and ensure compliance.

Skills

Problem Solving

Information Systems Management

Threat Analysis

Critical Thinking

Cyber Security

Data Privacy

Data Analytics

Stakeholder Management

Business Acumen

Communication

Education

Bachelor's degree in a technical field

CISSP/CCSP/CISM

Cloud security certifications (SANS/GIAC)

Tools

Aqua

Wiz

Qualys

CrowdStrike

Job description

Bank of America is seeking an experienced Cloud Security Specialist to assess technologies, applications, and security controls across Cloud platforms. You will guide testing methods to evolving threats and regulatory requirements, mentoring teammates and partnering with stakeholders.

The role emphasizes hands-on vulnerability management, cloud security tooling, and collaboration with audit and regulatory teams to strengthen defenses and protect financial data.