Senior Cloud Security Analyst — Multi-Cloud Defender

Bank of America; Denver (CO); On-site; USD 120,000 - 170,000; Full time

Job summary

Bank of America is seeking a Sr. Cloud Security Analyst to design, implement, and manage security controls across multi-cloud environments (AWS, Azure, GCP) to protect data and systems.

The role partners with cross-functional teams to embed security into cloud-native development. You will act as the security authority for architecture reviews and risk assessments, automate security using IaC and PaC, and contribute to CI/CD security across pipelines.

Qualifications

• 5+ years of cloud security experience across AWS, Azure, and Google Cloud.
• Experience with CI/CD pipelines and tools (Jenkins, GitLab CI/CD).
• Strong risk assessment and threat analysis capabilities.
• Excellent communication to explain risks to stakeholders.

Responsibilities

• Act as security authority for cloud architecture reviews and risk assessments.
• Support and automate security assessments using IaC and PaC tools.
• Collaborate with DevOps, architecture, and risk teams to integrate security into CI/CD pipelines.
• Evaluate and onboard cloud-native security solutions.
• Support remediation tied to audits or third-party risk assessments.
• Conduct security risk assessments for cloud applications, services, and infrastructure.
• Collaborate with teams to ensure secure design and operation of cloud-native services.

Skills

Critical Thinking

Communication

Problem Solving

Threat Analysis

Cyber Security

Quality Assurance

Education

Bachelor’s degree or equivalent in Computer Science, Information Technology, Engineering, or a related field

Tools

Jenkins

GitLab CI/CD

Job description

Bank of America is seeking a Sr. Cloud Security Analyst to design, implement, and manage security controls across multi-cloud environments (AWS, Azure, GCP) to protect data and systems.

The role partners with cross-functional teams to embed security into cloud-native development. You will act as the security authority for architecture reviews and risk assessments, automate security using IaC and PaC, and contribute to CI/CD security across pipelines.