Lead Software Engineer – Cloud Security in Irving, Texas

U.S. Bank • Irving, TX

13d • Hybrid

About The Position

At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at—all from Day One. Job Description U.S. Bank is seeking the position of Lead Software Engineer – Cloud Security in Irving, Texas. Essential Responsibilities: The Lead Software Engineer – Cloud Security will be responsible for implementing the Bank’s key control automation on Microsoft Azure and Amazon AWS cloud platforms. Key duties include understanding the Bank’s policies, standards, and guidelines to support the control automation process; managing discussions with Control Owners; and mapping control and data flow processes, including creating data flow diagrams. The role involves automating key control processes such as recycling keys, credentials, and certificates, ensuring virtual machines comply with Bank policies and standards, and detecting and reporting issues for audit and investigation purposes. Additionally, the Lead Software Engineer – Cloud Security will perform automated queries on Microsoft Defender reports, analyze data for audits, develop frameworks for specialized serverless environments on Azure and AWS, and write code to automate key controls within these frameworks. The goal is to deploy automated controls that facilitate evidence delivery for regulatory and compliance audits. Position may allow working from home within a commuting distance from worksite location. Multiple Positions. Basic Qualifications: Requires a Bachelor’s degree in Computer Science plus 5 years of experience analyzing, designing, and implementing cloud infrastructure, information security, cybersecurity, and privacy IT audits in the financial services industry. Will accept no degree plus 7 years of experience analyzing, designing, and implementing cloud infrastructure, information security, cybersecurity, and privacy IT audits in the financial services industry in lieu of a Bachelor’s degree plus 5 years of experience . Required Skills/Experience: Must possess 5 years of experience with Bachelor’s or 7 years of experience with no degree with all of the following: divisional level information security programs; implementing divisional information security requirements across applications and technical solutions, including SAAS, PAAS, and IAAS; control gaps and remediation; advising on information security, privacy and compliance controls; divisional logging and monitoring solutions; web application security testing; penetration testing framework and testing; building and deploying web services, spinning cloud infrastructure (Azure or AWS); coding with PHP, Bash, MySQL, MariaDB, and MSSQL; CI/CD Pipeline; GitHub; and CodeQL. Any suitable combination of education, training or experience is acceptable. Position may allow working from home within a commuting distance from worksite location. U.S. Bank is subject to and conducts background checks consistent with the regulatory requirements applicable to our industry and operations

Requirements

• Bachelor’s degree in Computer Science plus 5 years of experience analyzing, designing, and implementing cloud infrastructure, information security, cybersecurity, and privacy IT audits in the financial services industry or no degree plus 7 years of experience analyzing, designing, and implementing cloud infrastructure, information security, cybersecurity, and privacy IT audits in the financial services industry
• 5 years of experience with Bachelor’s or 7 years of experience with no degree with all of the following: divisional level information security programs; implementing divisional information security requirements across applications and technical solutions, including SAAS, PAAS, and IAAS; control gaps and remediation; advising on information security, privacy and compliance controls; divisional logging and monitoring solutions; web application security testing; penetration testing framework and testing; building and deploying web services, spinning cloud infrastructure (Azure or AWS); coding with PHP, Bash, MySQL, MariaDB, and MSSQL; CI/CD Pipeline; GitHub; and CodeQL

Responsibilities

• implementing the Bank’s key control automation on Microsoft Azure and Amazon AWS cloud platforms
• understanding the Bank’s policies, standards, and guidelines to support the control automation process
• managing discussions with Control Owners
• mapping control and data flow processes, including creating data flow diagrams
• automating key control processes such as recycling keys, credentials, and certificates, ensuring virtual machines comply with Bank policies and standards, and detecting and reporting issues for audit and investigation purposes
• performing automated queries on Microsoft Defender reports
• analyzing data for audits
• developing frameworks for specialized serverless environments on Azure and AWS
• writing code to automate key controls within these frameworks
• deploying automated controls that facilitate evidence delivery for regulatory and compliance audits

Benefits

• Healthcare (medical, dental, vision)
• Basic term and optional term life insurance
• Short-term and long-term disability
• Pregnancy disability and parental leave
• 401(k) and employer-funded retirement plan
• Paid vacation (from two to five weeks depending on salary grade and tenure)
• Up to 11 paid holiday opportunities
• Adoption assistance
• Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level