Senior Cloud Security Analyst

Bank of America; Chicago (IL); On-site; USD 145,000 - 193,000; Full time

Job summary

Bank of America in Chicago seeks a Sr. Cloud Security Analyst to design, implement, and manage security controls across multi-cloud environments (AWS, Azure, GCP). You will partner with cross-functional teams to secure cloud-based applications, data, and infrastructure.

The role requires deep cloud security expertise, architecture principles, and industry standards. You will help integrate security into CI/CD pipelines, participate in risk assessments, and evaluate security solutions.

Qualifications

• 5+ years of experience with cloud platforms (AWS, Azure, Google Cloud).
• Detail-oriented with ability to identify risks, inconsistencies, and gaps in cloud security configurations, documentation, and assessment findings.
• Effective communication skills to explain technical risks, recommendations, and requirements to both technical and non-technical stakeholders.
• Demonstrated problem-solving skills, with the ability to analyze complex security issues, evaluate options, and support practical, risk-based solutions.
• Experience with CI/CD pipelines and tools (Jenkins, GitLab CI/CD).
• Familiarity with AI tools to enhance work (Github Copilot, Claude Code).
• Knowledge of scripting or programming languages (Java, Python, etc.) is a plus.

Responsibilities

• Act as the security authority for cloud architecture reviews, technical risk assessments, and solution design across AWS, Azure, and/or GCP environments.
• Support and automate security assessments and governance using Infrastructure as Code (IaC) and Policy as Code (PaC) tools.
• Collaborate with DevOps, architecture, and risk teams to integrate security into CI/CD pipelines and cloud-native development.
• Contribute to the evaluation, selection, and onboarding of cloud-native and third-party security solutions.
• Support remediation activities tied to compliance audits or third-party risk assessments.
• Conduct security risk assessments for cloud applications, services, and infrastructure.
• Collaborate with application and infrastructure teams to ensure secure design, configuration, and operation of cloud-native services.

Skills

Critical Thinking

Customer and Client Focus

Information Systems Management

Problem Solving

Threat Analysis

Cyber Security

Policies

Procedures and Guidelines Management

Quality Assurance

Education

Bachelor's degree

Tools

Jenkins

GitLab CI/CD

Github Copilot

Claude Code

Job description

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates' physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact.

Join us!

The Sr. Cloud Security Analyst is responsible for designing, implementing, and managing security controls across multi-cloud environments, to ensure the protection of organizational data and systems. This role requires deep expertise in cloud security, architecture principles, and industry standards. The ideal candidate will partner with cross-functional teams to ensure the security of cloud-based applications, data, and infrastructure.

Responsibilities

• Act as the security authority for cloud architecture reviews, technical risk assessments, and solution design across AWS, Azure, and/or GCP environments.
• Support and automate security assessments and governance using Infrastructure as Code (IaC) and Policy as Code (PaC) tools.
• Collaborate with DevOps, architecture, and risk teams to integrate security into CI/CD pipelines and cloud-native development.
• Contribute to the evaluation, selection, and onboarding of cloud-native and third-party security solutions.
• Support remediation activities tied to compliance audits or third-party risk assessments.
• Conduct security risk assessments for cloud applications, services, and infrastructure.
• Collaborate with application and infrastructure teams to ensure secure design, configuration, and operation of cloud-native services.

Required Qualifications

• 5+ Years experience and certifications with cloud platforms AWS, Azure, Google Cloud
• Thorough attention to detail, with the ability to identify risks, inconsistencies, and gaps in cloud security configurations, documentation, and assessment findings.
• Effective communication skills with the ability to clearly explain technical risks, recommendations, and requirements to both technical and non-technical stakeholders.
• Demonstrated problem-solving skills, with the ability to analyze complex security issues, evaluate options, and support practical, risk-based solutions.
• Experience with CI/CD pipelines and tools (Jenkins, GitLab CI/CD).
• Familiarity with AI tools to enhance work (Github CoPilot, Claude Code).
• Knowledge of scripting or programming languages (Java, Python, etc.) is a plus.

Desired Qualifications

• Bachelor's degree or equivalent in Computer Science, Information Technology, Engineering, or a related field.

Required Skills

1. Critical Thinking
2. Customer and Client Focus
3. Information Systems Management
4. Problem Solving
5. Threat Analysis
6. Cyber Security
7. Policies
8. Procedures
9. and Guidelines Management
10. Quality Assurance

Shift: 1st shift (United States of America)

Hours Per Week: 40

Pay Transparency details

• US - CO - Denver - 1144 15th St - Denver Gis (CO9926)
• US - DC - Washington - 1800 K St NW - 1800 K Street NW (DC1842)
• US - IL - Chicago - 540 W Madison St - Bank Of America Plaza (IL4540)

Pay and benefits information

Pay range

$145,000.00 - $192,500.00 annualized salary, offers to be determined based on experience, education and skill set.

Discretionary incentive eligible

This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.