Network Security Engineer - Web Proxy

Bank of America • Denver, CO

4d • Onsite

About The Position

At Bank of America, the Network Security Engineer supports multiple security engineering efforts that deliver enterprise security capabilities. The role serves as a subject matter expert on security technology, oversees major engineering milestones—including system design, development, and implementation—and reports on key metrics. The engineer executes initiatives, partners with cross-functional teams, and resolves complex issues across the company’s global network footprint.

The position leads the definition and documentation of network security requirements, develops and executes test plans, and produces quantitative results. It researches, designs, engineers, implements, and supports software and hardware information security systems that meet business and regulatory requirements. The engineer drives complex technical projects, raises risks and potential vulnerabilities, helps resolve technical complexities, and contributes to requirements curation, implementation planning, and capability runbooks.

This is a first-shift role based in Denver, Colorado, with a stated schedule of 40 hours per week. Bank of America describes an in-office culture with flexibility based on role responsibilities and business needs.

Requirements

• At least 5 years of hands-on professional experience.
• Strong end-to-end network flow experience, including understanding how traffic enters and exits a company network.
• Extensive knowledge of networking fundamentals, including DNS, DHCP, firewalls, load balancing, IPS, basic routing and switching, TCP/IP, and packet analysis.
• Strong understanding of TLS, particularly its relationship to encryption and decryption of data in transit.
• Strong hands-on experience with proxies, specifically SkyHigh Web Gateway.
• Experience with web proxy controls for advanced content filtering.
• Senior-level expertise in at least one of the following: load balancers (F5 SSLO, ASM, ATM) or network malware scanning (FireEye Lastline, NSX Defender).
• Experience deploying security solutions in virtual environments such as VMware, AWS, or Azure.

Nice To Haves

• Strong understanding of TCP/IP, routing and switching, BGP, OSPF, VLANs, VRFs, and RADIUS AVP.
• Experience with Cisco Catalyst, Nexus, and wireless infrastructure.
• Experience with packet capture and protocol analysis using Wireshark.
• Exposure to Cisco ISE and Cisco SNA in enterprise environments.
• Exposure to DDoS mitigation solutions.

Responsibilities

• Lead the identification, definition, and documentation of network security requirements.
• Drive the development and execution of test plans and produce quantitative results.
• Define measurement criteria, including policy, ease of administration, and use-case coverage.
• Research, design, engineer, implement, and support software and hardware information security systems that conform to business and regulatory requirements and standards.
• Drive complex technical information security projects to ensure on-time delivery.
• Identify and raise risks or potential vulnerabilities at all stages of the security engineering process.
• Assist the team in resolving technical complexities involved in achieving requirements.
• Oversee major engineering milestones, including requirements curation, test-plan development and execution, implementation planning, and the development and execution of capability runbooks.
• Partner with cross-functional teams to execute engineering initiatives and resolve complex issues across the global network footprint.
• Report on key metrics.

Benefits

• Access to paid time off.
• Affordable, competitive, and flexible benefits supporting employees’ physical, emotional, and financial wellness.
• Resources and support to help employees make an impact and contribute to the business and communities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed