Mainframe Security Analyst (contract)

At BNY, our culture allows us to run our company better and enables you to grow and succeed. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide. Recognized as a top destination for innovators and champions of inclusion, BNY is where bold ideas meet advanced technology and exceptional talent.

About the role

BNY is seeking a Mainframe Security Analyst to support critical vulnerability management, hardening, and modernization initiatives across the bank’s mainframe environment. This role will provide day-to-day tactical execution across security-focused projects, including detailed analysis of security-related data, documentation of project activities, and collaboration with engineering and information security teams to strengthen the control environment.

This role is preferred to be based in Pittsburgh, PA, Lake Mary, FL, NYC or remote. The expectation is 4 days onsite per week for local candidates, with work hours aligned to 8:00 AM – 4:00 PM Eastern Time.

Responsibilities

• Mainframe Security Project Execution: Provide day-to-day tactical execution for mainframe security and vulnerability management projects, including detailed analytics, project tracking, asset modeling support, and required documentation updates.
• Mainframe Security Subject Matter Expertise: Serve as a subject matter expert in z/OS mainframe security systems, including RACF, ACF2, and Top Secret (TSS), supporting teams with guidance on access control, security configuration, and remediation strategies.
• Vulnerability Management Support: Partner with engineering, security, and data owner teams to identify, assess, and help remediate vulnerabilities affecting mainframe systems and data.
• zSecure Audit Leadership: Leverage deep experience with zSecure Audit to perform scans, analyze reports, evaluate audit controls, and support hardening and compliance efforts across the environment.
• z/OS Hardening & Security Standards: Determine and help implement security standards related to z/OS hardening, security controls, STIG-aligned remediation, and vulnerability reduction initiatives.
• Automation & Modernization Enablement: Support automation and modernization efforts by developing or advising on solutions using REXX, JCL, IBM SyncSort, and ICETOOL where applicable.
• Cross-Functional Collaboration: Act as a liaison between mainframe engineering teams, information security teams, and client/data owner stakeholders to ensure clear communication, effective risk remediation, and alignment on security priorities.
• Training & User Support: Interface directly with client staff and data owners to answer day-to-day questions, provide training on home-grown vulnerability tooling and utility tools, and promote adoption of security processes.
• Process Documentation & Governance: Create and maintain mainframe security processes, procedural documentation, and supporting materials to improve consistency, repeatability, and operational maturity.
• Security Consulting & Assessment: Apply prior z/OS security consulting and/or penetration testing experience to help evaluate current-state controls and recommend improvements to strengthen mainframe security posture.

Requirements

• 7–10+ years of experience with zSecure Audit
• Strong hands-on experience with RACF required, with additional expertise in ACF2 and/or Top Secret (TSS) highly valued
• Strong proficiency with REXX
• Experience with JCL and IBM SyncSort
• Experience leveraging z/OS RACF STIG and/or related hardening standards in security remediation efforts
• Strong understanding of mainframe security frameworks, controls, and access management concepts
• Demonstrated experience in vulnerability management, security remediation, or related mainframe security initiatives
• Ability to analyze scan results, interpret audit findings, and translate technical issues into actionable remediation guidance
• Strong written and verbal communication skills, including the ability to document processes and explain technical concepts clearly
• Bachelor’s degree in Computer Science or a related discipline required, or equivalent combination of education and significant relevant experience

Preferred Qualifications

• 10+ years of experience with ACF2 or Top Secret (TSS)
• Experience with ICETOOL
• Background in z/OS security consulting or penetration testing
• Experience working in financial services or another regulated environment
• Familiarity with JIRA, Confluence, and SharePoint
• Experience partnering directly with data owners, business stakeholders, and client teams in security-focused initiatives

Why Join Us

This role offers the opportunity to play a meaningful part in strengthening BNY’s mainframe security environment through vulnerability management, hardening, automation, and modernization efforts. You will work closely with engineering, information security, and business stakeholders to help protect critical data, improve control effectiveness, and build durable security processes across a complex enterprise environment.

At BNY, our culture speaks for itself. Here’s a few of our recent awards:

• America’s Most Innovative Companies, Fortune, 2025
• World’s Most Admired Companies, Fortune 2025
• “Most Just Companies”, Just Capital and CNBC, 2025

Pay

Pay Rate Range: 65.6 - 82 USD hourly

This posting is for a contract assignment with Tundra Technical Solutions to provide services to Bank of New York (BNY). Candidates selected for this role will be engaged as contractors for the specified duration of the project.

Benefits

Optional benefits offering includes medical, dental, vision and retirement benefits via Tundra Technical Solutions.