Private Cloud Security Specialist (Container exp. required)

About this role

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Position Summary:

This role supports Container Information Security activities for Bank of America, including: • Assist in identifying potential security configuration issues, risks, and vulnerabilities within container environments.

• Support container vulnerability assurance efforts, including compliance with configuration requirements, security controls, and remediation activities.

• Collaborate with internal partners and stakeholders to support security initiatives and maintain effective working relationships.

Job expectations include applying technical knowledge to support partners, assisting with security assessments, and learning evolving cybersecurity threats.

Job Responsibilities: • Support efforts to improve vulnerability identification quality and consistency across container environments.

• Collaborate with teams across Vulnerability Management, Cloud Security, and Container Security to support strategic initiatives and roadmap execution.

• Assist with gap analyses of existing controls, documenting findings and recommendations for improvement.

• Provide technical support and consultation related to container vulnerability identification and remediation activities.

• Learn and evaluate emerging technologies that may support cloud and container vulnerability management capabilities.

• Support audit, risk, and regulatory activities by gathering information and responding to requests.

• Assist engineering teams in addressing security-related technical challenges.

• Demonstrate strong organization, accountability, and a willingness to learn new technologies and processes.

• Support efforts to identify vulnerabilities and misconfigurations in container platforms, Continuous Integration/Continuous Delivery (CI/CD) pipelines, and workloads.

• Assist with the daily operations and administration of container security solutions such as Aqua, Wiz, Qualys, and CrowdStrike.

• Participate in efforts to improve vulnerability identification processes across hybrid cloud platforms.

• Support cloud and container security initiatives aligned with the Bank’s security strategy and industry best practices.

• Assist in the implementation and monitoring of security controls designed to protect company systems and information.

• Conduct research on emerging threats and security trends and share findings with team members.

• Monitor security alerts and assist with investigations of potential threats and vulnerabilities.

• Apply secure-by-design principles and assist with activities focused on identifying vulnerabilities early in the development lifecycle.

• Build partnerships with technology teams by providing operational support and security guidance.

Required Qualifications: • Understanding of container and software supply chain security risks.

• 3 + years exp in foundational understanding of cloud-native services, tools, and architecture.

• Understanding of application security principles.

• Experience or coursework in infrastructure, cloud, or security technologies.

• Familiarity with DevSecOps concepts and CI/CD pipeline security practices.

• Ability to create and maintain technical documentation.

• Basic understanding of threat modeling concepts and security frameworks.

• Familiarity with vulnerability management concepts and security scanning tools.

• Strong analytical and problem-solving skills.

• Ability to work independently on assigned tasks while seeking guidance when needed.

• Strong desire to learn and develop technical expertise.

• Ability to communicate technical concepts clearly to both technical and non-technical audiences.

Desired Qualifications:

• Progress toward or interest in obtaining industry certifications such as Security+, CCSP, CISSP, or CISM.

• Cloud or container-related certifications such as AZ-900, AZ-500, AWS Cloud Practitioner, CKA, or similar.

• Bachelor’s degree in Computer Science, Cyber Security, Information Technology, or a related technical field.

• Internship, academic, or hands-on experience with cloud, container, or cybersecurity technologies.

Job Skills: • Problem Solving

• Information Systems Management

• Threat Analysis

• Critical Thinking

• Customer and Client Focus

• Cyber Security

• Policies, Procedures & Guidelines

• Technology Systems Assessment

• Risk Analytics

• Quality Assurance

• Business Acumen

• Stakeholder Management

• Data Privacy and Protection

• Data and Trend Analysis

This job will be open and accepting ap

Similar jobs

• Cloud & Container Security Specialist — Pru · Newark, NJ
• Staff Cloud Security Specialist — Waystar · Atlanta, GA | Lehi, UT
• Federal Private Cloud Support Engineer (Active Secret Security Clearance-Required) — Hewlett Packard Enterprise · All, Maryland, United States | All, Utah, United States | All, Alabama, United States
• Senior Security Engineer (Cloud) — Chainguard · Remote
• Senior Vulnerability Researcher (Cloud & Containers) — CACI · Florham Park, NJ
• Senior Cloud Security Engineer — Reltio · United States
• Senior Cloud Security Engineer — Scopely · US - Bellevue, United States
• Senior Cloud Security Engineer — Roblox · San Mateo, CA, United States