VP, Infrastructure Security & DevSecOps Architect

BNY; New York (NY); On-site; USD 260,000 - 360,000; Full time

Job summary

BNY is seeking a Senior Vice President, Infrastructure Solution Engineer to join our controls hub team in New York. You will own security remediation programs at scale, design CI/CD pipelines, and lead platform improvements across applications and infrastructure.

Responsibilities include automating remediation workflows, managing patching and cluster upgrades with robust controls, and collaborating with AIM teams to provide tooling and advisory support.

Qualifications

• 5+ years in platform, DevSecOps, or infrastructure engineering with ownership of security remediation programs.
• Hands-on experience building and operating CI/CD pipelines for automated testing and deployment.
• Proficiency in Java/JVM, Go, or Python, including dependency management and vulnerability scanning.
• Experience with Kubernetes operations including cluster lifecycle management and upgrades.
• Familiarity with OS-level patch management tooling and host configuration management (Ansible, Chef).
• Understanding CVE scoring, exploit maturity, and risk-based prioritization.

Responsibilities

• Monitor vulnerability intelligence to identify CVEs and policy violations affecting apps and infra.
• Design CI/CD-integrated remediation pipelines with change scoping, testing, release, and approvals.
• Build pipelines for app dependencies, host patching, and cluster upgrades across surfaces.
• Identify bottlenecks and automate to accelerate migration and reduce delays.
• Partner with application teams across AIM to provide automation tooling and advisory support.

Skills

Security remediation program ownership

CI/CD pipelines

Java/JVM

Go

Python

Kubernetes operations

OS patch management

Vulnerability lifecycle

Tools

GitLab CI

Jenkins

GitHub Actions

Kubernetes

Ansible

Chef

Job description

BNY is seeking a Senior Vice President, Infrastructure Solution Engineer to join our controls hub team in New York. You will own security remediation programs at scale, design CI/CD pipelines, and lead platform improvements across applications and infrastructure.

Responsibilities include automating remediation workflows, managing patching and cluster upgrades with robust controls, and collaborating with AIM teams to provide tooling and advisory support.