Cloud Security Engineer AWS Vulnerability & Misconfiguration Management

Overview

Cloud Security Engineer AWS Vulnerability & Misconfiguration Management at Bank of America. The role focuses on proactively identifying, analyzing, and mitigating vulnerabilities and misconfigurations across cloud-native environments (IaaS, PaaS, SaaS). The ideal candidate will have deep knowledge of cloud security principles, hands-on experience with vulnerability assessment tools, and the ability to drive remediation through collaboration with engineering, operations, and governance teams.

This role requires 3 years of experience.

Responsibilities

• Identify vulnerabilities and misconfigurations across the AWS platform, resources, and workloads.
• Maintain cloud security posture management (CSPM) and vulnerability management tools such as Inspector, Wiz, Qualys, CrowdStrike.
• Develop automated detection and monitoring for insecure configurations, excessive permissions, and non-compliant deployments.
• Partner with engineering, DevOps, and application teams to provide remediation guidance and drive secure by design solutions.
• Triage and report vulnerabilities with risk ratings to ensure timely remediation.
• Research and stay ahead of emerging cloud threats, vulnerabilities, and industry best practices.
• Contribute to cloud security standards, baselines, and playbooks to improve enterprise-wide security posture.
• Support governance, risk, and compliance requirements by ensuring alignments with regulatory and internal policy standards.
• Drive Cloud Security solutions in alignment with the Banks cloud strategy and in accordance with security best practices.
• Develop strong partnerships by demonstrating operational expertise as a subject matter expert.

Required Qualifications

Desired Qualifications

Shift

1st shift (United States of America)

Hours Per Week

40

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

#J-18808-Ljbffr