AWS Specialist
Bank of America · Denver, CO · 2 days ago
OTHRFull-time
Position Summary
We are seeking a skilled and motivated AWS Specialist to support the Cloud Security Assurance (CSA) organization by ensuring public cloud environments are securely configured, governed, and continuously monitored in alignment with enterprise security standards and risk expectations.
Responsibilities
- Ensure cloud environments are securely configured and governed in alignment with CSA security standards and baselines.
- Maintain continuous visibility into cloud configuration and security posture across in-scope platforms.
- Identify cloud misconfigurations, policy violations, and control gaps across infrastructure and platform services.
- Build, maintain, and refine CSPM detections aligned to defined security baselines and control expectations.
- Support onboarding, tuning, and operationalization of CSPM tooling and posture reporting.
- Partner with cloud platform and engineering teams to remediate CSPM findings.
- Triage posture findings, assess risk and blast radius, and support remediation prioritization.
- Provide CSPM posture metrics, reporting, and risk transparency to CSA leadership.
- Contribute to cloud security standards, baseline documentation, and audit readiness efforts.
- Track evolving cloud service features and configuration risks impacting security posture.
Required Qualifications
- 3+ years understanding of Cloud Security Posture Management (CSPM) principles and secure cloud configuration practices.
- Experience identifying cloud misconfigurations and control weaknesses.
- In-depth, real-world experience with core AWS services (compute, network, storage, and identity).
- Ability to assess risk and communicate findings to technical and non-technical audiences.
- Strong analytical and documentation skills.
- Ability to be self-sufficient and scope necessary tasks based on high-level requirements.
Desired Qualifications
- Experience supporting cloud security assurance or posture management programs.
- Hands-on experience with CSPM tools (e.g., Wiz, Prisma Cloud, Defender, Orca).
- Familiarity with cloud security benchmarks or control frameworks (e.g., CIS).
- Experience supporting audits, risk assessments, or compliance initiatives.
- Bachelor’s degree in a technical or security-related field.
- Relevant cloud or security certifications preferred.