Private Cloud Security Specialist (Container exp. required)

Bank of America; Washington (District of Columbia); On-site; USD 100,000 - 141,000; Full time

Benefits offered by this job

Discretionary incentive plan

Industry-leading benefits

Paid time off

Job summary

Bank of America is seeking a Container Security professional to support its security program for container environments and cloud-native workloads. You will collaborate across Vulnerability Management, Cloud Security, and Container Security to improve defenses and governance.

The role emphasizes learning evolving cybersecurity threats, applying secure-by-design principles, and enabling secure software development across hybrid cloud platforms.

Qualifications

• Understanding container and software supply chain security risks.
• 3+ years of foundational understanding of cloud-native services, tools, and architecture.
• Understanding of application security principles.
• Experience or coursework in infrastructure, cloud, or security technologies.
• Familiarity with DevSecOps concepts and CI/CD pipeline security practices.
• Ability to create and maintain technical documentation.
• Basic understanding of threat modeling concepts and security frameworks.
• Familiarity with vulnerability management concepts and security scanning tools.
• Strong analytical and problem-solving skills.
• Ability to work independently on assigned tasks while seeking guidance when needed.
• Strong desire to learn and develop technical expertise.
• Ability to communicate technical concepts clearly to both technical and non-technical audiences.

Responsibilities

• Improve vulnerability identification quality and consistency across container environments.
• Collaborate with Vulnerability Management, Cloud Security, and Container Security teams to support initiatives and roadmap execution.
• Conduct gap analyses of existing controls and document findings and recommendations.
• Provide technical support and consultation on container vulnerability identification and remediation.
• Learn and evaluate emerging technologies to support cloud and container vulnerability management.
• Support audit, risk, and regulatory activities by gathering information and responding to requests.
• Assist engineering teams in addressing security-related challenges.
• Demonstrate organization, accountability, and willingness to learn new technologies and processes.

Skills

Container security

Cloud-native services

CI/CD security

Threat modeling

Vulnerability management

Documentation

DevSecOps

Communication

Independent work

Analytical thinking

Learning agility

Education

Bachelor's degree in Computer Science/Cyber Security/IT

Tools

Aqua

Wiz

Qualys

CrowdStrike

Job description

Job Description

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates' physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Position Summary

This role supports Container Information Security activities for Bank of America, including:

• Assist in identifying potential security configuration issues, risks, and vulnerabilities within container environments.
• Support container vulnerability assurance efforts, including compliance with configuration requirements, security controls, and remediation activities.
• Collaborate with internal partners and stakeholders to support security initiatives and maintain effective working relationships.

Job expectations include applying technical knowledge to support partners, assisting with security assessments, and learning evolving cybersecurity threats.

Job Responsibilities

• Support efforts to improve vulnerability identification quality and consistency across container environments.
• Collaborate with teams across Vulnerability Management, Cloud Security, and Container Security to support strategic initiatives and roadmap execution.
• Assist with gap analyses of existing controls, documenting findings and recommendations for improvement.
• Provide technical support and consultation related to container vulnerability identification and remediation activities.
• Learn and evaluate emerging technologies that may support cloud and container vulnerability management capabilities.
• Support audit, risk, and regulatory activities by gathering information and responding to requests.
• Assist engineering teams in addressing security-related technical challenges.
• Demonstrate strong organization, accountability, and a willingness to learn new technologies and processes.

• Support efforts to identify vulnerabilities and misconfigurations in container platforms, Continuous Integration/Continuous Delivery (CI/CD) pipelines, and workloads.
• Assist with the daily operations and administration of container security solutions such as Aqua, Wiz, Qualys, and CrowdStrike.
• Participate in efforts to improve vulnerability identification processes across hybrid cloud platforms.
• Support cloud and container security initiatives aligned with the Bank's security strategy and industry best practices.
• Assist in the implementation and monitoring of security controls designed to protect company systems and information.
• Conduct research on emerging threats and security trends and share findings with team members.
• Monitor security alerts and assist with investigations of potential threats and vulnerabilities.
• Apply secure-by-design principles and assist with activities focused on identifying vulnerabilities early in the development lifecycle.
• Build partnerships with technology teams by providing operational support and security guidance.

Required Qualifications

• Understanding of container and software supply chain security risks.
• 3 + years exp in foundational understanding of cloud-native services, tools, and architecture.
• Understanding of application security principles.
• Experience or coursework in infrastructure, cloud, or security technologies.
• Familiarity with DevSecOps concepts and CI/CD pipeline security practices.
• Ability to create and maintain technical documentation.
• Basic understanding of threat modeling concepts and security frameworks.
• Familiarity with vulnerability management concepts and security scanning tools.
• Strong analytical and problem-solving skills.
• Ability to work independently on assigned tasks while seeking guidance when needed.
• Strong desire to learn and develop technical expertise.
• Ability to communicate technical concepts clearly to both technical and non-technical audiences.

Desired Qualifications

• Progress toward or interest in obtaining industry certifications such as Security+, CCSP, CISSP, or CISM.
• Cloud or container-related certifications such as AZ-900, AZ-500, AWS Cloud Practitioner, CKA, or similar.
• Bachelor's degree in Computer Science, Cyber Security, Information Technology, or a related technical field.
• Internship, academic, or hands-on experience with cloud, container, or cybersecurity technologies.

Job Skills

• Problem Solving
• Information Systems Management
• Threat Analysis
• Critical Thinking
• Customer and Client Focus
• Cyber Security
• Policies, Procedures & Guidelines
• Technology Systems Assessment
• Risk Analytics
• Quality Assurance
• Business Acumen
• Stakeholder Management
• Data Privacy and Protection
• Data and Trend Analysis

This job will be open and accepting applications for a minimum of seven days from the date it was posted

Shift

1st shift (United States of America)

Hours Per Week

40

Pay Transparency details

US - CO - Denver - 1144 15th St - Denver Gis (CO9926), US - DC - Washington - 1800 K St NW - 1800 K Street NW (DC1842), US - IL - Chicago - 540 W Madison St - Bank Of America Plaza (IL4540)

Pay range

$100,000.00 - $141,300.00 annualized salary, offers to be determined based on experience, education and skill set.

Discretionary incentive eligible

This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.