Senior Cloud Detection Engineer

Cloud Detection Engineer

Bank of America is looking for an experienced Cloud Detection Engineer to join our Cyber Security Operations team. The role focuses on developing and tuning AWS detections, fostering a detection engineering lifecycle, and providing L2 escalation support for complex AWS‑related alerts while maintaining close operational alignment with the SOC.

• Design, build, and tune AWS security detections using Splunk.
• Reduce false positives and improve alert fidelity.
• Partner with cloud and security teams to increase detection coverage.
• Translate threat scenarios into actionable detections.
• Act as L2 escalation support for complex AWS‑related alerts.
• Validate and investigate high‑risk findings.
• Provide feedback and guidance to L1 analysts.
• Use real investigations to continuously improve detection logic.

• Minimum of eight (8) years of relevant Cyber Security experience, including at least five (5) years in Cloud SOC and/or Purple Team roles.
• Experience writing and tuning detections with SIEM tools such as Splunk.
• Experience designing and implementing technical solutions to enhance visibility, alerting capabilities, and reduce risk within AWS.
• Experience reviewing applications, infrastructure, and architectural designs to identify threats and vulnerabilities.
• Knowledge of AWS native services and tools (Guard Duty, Cloud Trail, Security Hub).
• Understanding of threat frameworks (MITRE ATT&CK for Cloud, D3
  
  FEND) and Risk Management principles.
• Experience building, configuring, operating, and securing cloud infrastructure and applications in AWS.
• Ability to independently assess risks and identify vulnerabilities in infrastructure, and to suggest process improvements.
• Experience partnering with incident response teams, threat intelligence researchers, Red/Purple teams, and/or HUNT researchers.
• Familiarity with Information Security and data protection frameworks (CIS, NIST, HIPAA, GDPR, PCI DSS, ISO 27001).
• Excellent verbal and written communication skills.

• CCSP / CCSK, CISSP / CISM / Security+, Bachelor’s or Master’s Degree in Computer Science, Information Systems, Cyber Security, or related field.

Shift: 1st shift (United States of America). Hours per week: 40.

Pay range: $ – $ annually (based on experience, education, and skill set) and includes discretionary incentive eligibility.