Sr. Network Security Engineer; Cloud

Job Description

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

Bank of America is committed to an in-office culture with specific requirements for office‑based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role‑specific considerations.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

We are seeking a skilled and motivated Network Security Engineer to join our GIS Core Engineering team. The Network Security Engineer is a key individual contributor that has accountability for researching, designing, engineering, implementing, and supporting network security solutions. You will utilize in‑depth technical knowledge and business requirements to help design and implement a secure solution to meet customer / client needs while protecting the Bank’s assets.

Develops and implements security standards, procedures, and guidelines for multiple platforms and diverse environment. Exercises judgment within broadly defined practices and policies in selecting methods, techniques, and evaluation criterion for obtaining results.

It is imperative that you have a solid knowledge of network security domains such as DDoS, Segmentation, Network Access, Web Content Inspection, Perimeter Defense, and Network monitoring. You will regularly collaborate with experts both in country and in other regions, so excellent communication skills are very important. If you are seeking a demanding role within Global Information Security (GIS) and have the required skills, this will be a great opportunity for you.

Typically, applicants should have 5 to 7 years of cybersecurity or engineering experience.

• Serves as a subject matter expert for one or more engineering initiatives and is the point of contact for clients
• Contributes to defining and ensuring security requirements are met based on BofA standards and Policies.
• Incorporates basic architecture components including threat‑models, diagrams, and technological requirements for in‑solution development.
• Understands and utilizes basic network, virtualization, and datacenter technologies for deployment strategies.
• Leads the delivery of the major engineering milestones and acts as the critical decision maker with regards to technical design and implementation
• Documents and communicates required information for deployment, maintenance, support, and business functionality.
• Adheres to team delivery/release process and cadence pertaining to solution deployment and release.
• Identifies and raises risks or potential vulnerabilities at all stages of the security‑engineering process
• Works closely with a diverse set of stakeholders with varying priorities to debate and negotiate paths forward
• Navigates and works effectively across a complex, geographically dispersed organization

• Strong fundamental understanding of information security principles, risks, and controls and of cyber security operations functions.
• Knowledge of how Web‑Based internet‑facing applications are deployed and set up and experience architecting complex enterprise cybersecurity solutions for data in transit across web, email and B2B environments. Including technology that provides proxy control, malware inspection, SSL termination, and Data Loss Prevention (DLP).
• Understanding of how Content Delivery Networks (CDNs) work, how they are designed to provide application services, and how they are used to mitigate network security threats.
• Detailed knowledge of Network Security solutions such as DDOS mitigations…