Google Cloud Security Specialist (GCP exp. required)
Assesses cloud security risks in GCP environments for Bank of America, identifying vulnerabilities, aligning with security policies, and guiding teams on threat mitigation and compliance.
- Compensation
- $100K–$141.3K / yr
- Location
- Denver
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- 3+ years understanding of Google GCP native services, tools, and architecture
- Understanding of cloud security principles and practice
- Working knowledge of cloud threat landscape
- Technical experience in infrastructure and/or security functions
- Understanding of DevSecOps and CI/CD pipeline integration through security engineering lifecycles
- Understanding of threat modeling and frameworks
- Understanding of vulnerability management and scanning tools
- Experience in project management
- Well-developed analytic, qualitative, and quantitative reasoning skills with creative problem-solving ability
- Ability to work independently with little oversight on complex initiatives
- Ability to communicate complex concepts to all levels of understanding
Nice to have
- CISSP/CCSP/CISM certification
- Cloud-specific security certifications (e.g., SANS/GIAC)
- Vendor-specific and relevant certifications
- Bachelor’s degree in a technical field
Full description
Job Description:
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.
Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.
We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.
Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!
Position Summary:
This job is responsible for assessing the bank's technologies, applications, and overall security controls in Cloud platforms to identify potential risks and vulnerabilities that may impact Bank of America's information security. Key responsibilities include understanding and complying of the Bank’s Global Information Security policy and relevant cyber security threats to complete security assessments. Job expectations include providing expert technical guidance to support partners and adapting testing methods to emerging cyber security regulations and evolving threats, while developing others on the team.
LOB Specific Job Responsibilities:
- Improve vulnerability identification quality control for the Cloud environment; collaborating across Vulnerability Management to support end-to-end adoption.
- Collaborate to align strategy and roadmaps across Cloud Security, Cyber Security Operational Controls, Security Functions and Capabilities outlining goals/outcomes, milestones, and key initiatives to track progress and provide visibility into issues.
- Perform gap analysis of current controls, identifying deficiencies, formulating recommendations, and developing action plans.
- Provide consulting services as a cloud vulnerability identification subject matter expert.