Cloud Security Design and Controls Lead
Bank of America · Denver, CO · 3 wk ago
Information TechnologyFull-time
Key Responsibilities
- Integration with CI/CD Pipelines
- Custom Solutions Development
- Collaboration with Security Teams
- Governance and Regulatory Compliance
- Conduct risk assessments
- Evidence Package Creation
- Participate in internal and external audits
Required Skills
- Minimum of 5 years of professional experience designing and implementing cloud security controls.
- Bachelor’s degree in Information Systems or Computer Science, and/or equivalent combination of education and work experience within the domain areas of Cloud Security.
- In-depth understanding of cloud security principles, best practices for Azure and/or AWS platforms, and industry frameworks such as OWASP Top 10, NIST, CSA, CIS benchmarks.
- Experience building and implementing Infrastructure as Code and/or Policy as Code governance strategies.
- Experience conducting security assessments, risk analyses, and developing security concepts.
- Hands-on experience with cloud security tools and technologies such as AWS Security Hub, Azure Security Center, Google Cloud Security Command Center, and/or Wiz.
- Extensive knowledge of security tools and technologies such as SIEM, IDS/IPS, DLP, firewalls, PKI, and identity management and how they work in cloud environments. Specifically in network security, including AWS networking primitives, security groups, network access control lists, proxies, firewall and WAF technologies.
- Experience with cloud and containerized technologies, AKS, EKS, ECS, serverless, Kubernetes and Docker.
- Extensive knowledge of public cloud service providers and the threats to workloads within those environments.
- Currently hold active AWS Security Specialty or Azure AZ-500 certification.
Desired Qualifications
- Master’s degree in Information Systems or Computer Science, and/or equivalent combination of education and work experience within the domain areas of Cloud Security.
- Relevant industry certifications such as ISC2 and SANS GIAC are highly desirable.
- Strong communication and interpersonal skills to work effectively with cross-functional teams.
- Ability to manage multiple projects and priorities in a fast-paced environment.