Application Security Solution Architect
Listed on 2026-11-04
-
IT/Tech
Cybersecurity, Systems Engineer, IT Consultant, Information Security & Data Protection
Job Description:
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.
Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.
We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.
Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!
Position Summary
We are seeking an experienced Application Security Solution Architect to join an exciting team within Global Information Security (GIS). Cyber Security Technology (CST) is a globally distributed team responsible for cyber security innovation and architecture, engineering, solutions and capabilities development, cyber resiliency, access management engineering, data strategy, deployment maintenance, technical project management, and information technology security control support.
The Application Security Solution Architect will facilitate designing, strengthening, and securing solutions that Bank applications use to increase security posture across their entire lifecycle. This role focuses on collaboration across all Lines of Business and CIO teams to continuously improve the organization’s security adherence. The Solution Architect will design, identify, and document inefficiencies, and prioritize improvement opportunities across the application development lifecycle and authentication related projects.
Additionally, the role also will actively apply knowledge of laws, rules, regulations, and information security concepts (e.g., NIST, COBIT, ISO, OWASP) to establish and maintain information security policies and standards. Job expectations include working with information security engineering and product teams to identify risk gaps and direct the overall application security design strategy.
Key Responsibilitie s
- Analyze, design, develop, and deliver secure application security solutions.
- Create and leverage security patterns that align application designs with business requirements.
- Lead solution design, including security requirements, risk identification, opportunities, and policy alignment.
- Collaborate across lines of business, security, engineering, and platform architecture teams.
- Serve as a technical security design SME for products supporting the Software Development Lifecycle (SDLC).
- Own solution architecture and design documentation for application security platforms and components.
- Define application development architecture, standards, patterns, and security best practices.
- Maintain security blueprints, portfolio designs, and reference architectures.
- Communicate risks, challenges, and design…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).