Application Security Solution Architect

Bank of America • Addison, IL

3d • Onsite

About The Position

Bank of America is seeking an experienced Application Security Solution Architect to join Global Information Security’s Cyber Security Technology team. The role designs, strengthens, and secures solutions used by Bank applications to improve security posture throughout the application lifecycle. It collaborates with Lines of Business, CIO teams, information security engineering and product teams, and other stakeholders to improve security adherence, identify risk gaps, and guide application security design strategy. The architect applies relevant laws, regulations, and security concepts—including NIST, COBIT, ISO, and OWASP—to establish and maintain information security policies and standards.

The position defines an architectural vision and solutions aligned with enterprise architecture strategy, technology, and platform choices. It describes solution intent and operating environments, evaluates system impacts, identifies systems and interfaces, and contributes to end-to-end solution design. It also defines non-functional requirements and architectural runway for new epics and features, ensuring solutions are fit for purpose through stakeholder and service-provider collaboration. The role is based within an in-office culture, with flexibility determined by role responsibilities and business needs, and is scheduled for first shift at 40 hours per week.

Requirements

• At least 2 years of relevant hands-on experience in application security in a large and complex organization.
• Knowledge of application security laws, rules, regulations, and guidelines applicable to financial services, including OWASP, NIST, ISO/IEC, CIS, SOX, OCC, PCI, GDPR, FISMA, and FFIEC.
• Knowledge of application security and penetration-testing methodologies, techniques, and technologies.
• Knowledge of software development lifecycle tools and methodologies that support automated security compliance integration in pipeline solutions.
• Security knowledge covering core technology infrastructure, cloud technologies, and application security practices.
• Experience with application development tools, Static and Dynamic Application Security Testing, bills of materials, penetration testing, threat modeling, common development pipelines, and common cloud and on-premises designs and architectures.
• Ability to articulate facts and data-driven plans and partner with stakeholders to implement solutions that reduce risk and support adherence to Secure by Design requirements.
• Strong attention to detail and advanced analytical skills.
• Excellent communication and presentation skills.
• Excellent organizational skills and ability to prioritize multiple tasks effectively.
• Hands-on experience and involvement in large and complex projects.
• Proficiency in data management, including strong data analysis capabilities and advanced understanding of metadata collection and management.

Nice To Haves

• CISSP certification.
• Knowledge of SDLC tools and methodologies supporting automated security compliance integration within different pipeline solutions.

Responsibilities

• Analyze, design, develop, and deliver secure application security solutions.
• Create and use security patterns that align application designs with business requirements.
• Lead solution design, including security requirements, risk identification, opportunities, and policy alignment.
• Collaborate across lines of business, security, engineering, and platform architecture teams.
• Serve as a technical security design subject-matter expert for products supporting the Software Development Lifecycle (SDLC).
• Own solution architecture and design documentation for application security platforms and components.
• Define application development architecture, standards, patterns, and security best practices.
• Maintain security blueprints, portfolio designs, and reference architectures.
• Communicate risks, challenges, and design considerations to engineering, operations, developers, information security, and senior leadership.
• Consult with business and operations to understand challenges and opportunities for improving technology effectiveness; explore solutions through domain knowledge, practical experiments, and proofs of concept; and align solution intent and architectural vision with evolving technology backlogs.
• Work with product management and stakeholders to plan and prioritize technology backlog items for the architecture runway supporting business epics and features.
• Perform design and code reviews to assess whether non-functional requirements, including security, performance, maintainability, scalability, usability, and reliability, are met.
• Lead rapid development of high-level architecture, incorporate emerging business requirements, and ensure architecture is flexible, modular, and adaptable.
• Educate team members on technology practices, standardization strategies, and best practices.
• Clarify architecture and assist development teams with system design and implementation; provide solution options to resolve architectural impediments.
• Use defined best practices, templates, and documentation for architectural designs, and suggest improvements to them.

Benefits

• Affordable, competitive, and flexible benefits.
• Support for teammates’ physical, emotional, and financial wellness.
• Opportunities to learn, grow, and build a career.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed