Senior Cloud Security Analyst

Bank of America • Washington, DC

6d • $145,000 - $192,500 • Onsite

About The Position

The Sr. Cloud Security Analyst is responsible for designing, implementing, and managing security controls across multi-cloud environments, to ensure the protection of organizational data and systems. This role requires deep expertise in cloud security, architecture principles, and industry standards. The ideal candidate will partner with cross-functional teams to ensure the security of cloud-based applications, data, and infrastructure.

Requirements

• 5+ Years experience and certifications with cloud platforms AWS, Azure, Google Cloud
• Thorough attention to detail, with the ability to identify risks, inconsistencies, and gaps in cloud security configurations, documentation, and assessment findings.
• Effective communication skills with the ability to clearly explain technical risks, recommendations, and requirements to both technical and non-technical stakeholders.
• Demonstrated problem-solving skills, with the ability to analyze complex security issues, evaluate options, and support practical, risk-based solutions.
• Experience with CI/CD pipelines and tools (Jenkins, GitLab CI/CD).
• Familiarity with AI tools to enhance work (Github CoPilot, Claude Code).
• Knowledge of scripting or programming languages (Java, Python, etc.) is a plus.

Nice To Haves

• Bachelor’s degree or equivalent in Computer Science, Information Technology, Engineering, or a related field.

Responsibilities

• Act as the security authority for cloud architecture reviews, technical risk assessments, and solution design across AWS, Azure, and/or GCP environments.
• Support and automate security assessments and governance using Infrastructure as Code (IaC) and Policy as Code (PaC) tools.
• Collaborate with DevOps, architecture, and risk teams to integrate security into CI/CD pipelines and cloud-native development.
• Contribute to the evaluation, selection, and onboarding of cloud-native and third-party security solutions.
• Support remediation activities tied to compliance audits or third-party risk assessments.
• Conduct security risk assessments for cloud applications, services, and infrastructure.
• Collaborate with application and infrastructure teams to ensure secure design, configuration, and operation of cloud-native services.

Benefits

• Access to paid time off
• Resources and support to our employees
• Discretionary incentive eligible
• Annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree