Senior Security Engineer – ServiceNow SIR & DLP

Bank of America • Addison, IL

2d • $150,000 - $190,700 • Onsite

About The Position

At Bank of America, the Senior Technology Delivery Lead is accountable for end-to-end technology delivery of enterprise ServiceNow Security Incident Response (SIR) and Data Loss Prevention (DLP) capabilities. The role brings together technology strategy, engineering, platform development, integration, program execution, and operational readiness to deliver scalable security capabilities across the enterprise. It leads multiple teams through design, development, testing, implementation, and ongoing evolution, in close partnership with Cybersecurity Operations, Data Protection, Technology, Risk, Compliance, and business stakeholders.

The role owns execution and delivery strategy, translating business and cybersecurity requirements into technology solutions and driving complex initiatives from concept through production. Responsibilities include managing roadmaps, technical dependencies, engineering execution, resources, financials, risks, and senior stakeholder alignment. It requires a leader experienced in complex technology implementations, engineering-team leadership, enterprise platforms, and cross-organizational delivery. The position combines technology acumen with the ability to simplify complexity, remove impediments, make decisions, and communicate with executive and technical audiences. It is a highly visible leadership role involving senior leadership, auditors, regulators, and control partners. A strong software engineering and platform background is required, though the focus is technology leadership and delivery rather than personally writing code.

Bank of America describes an in-office culture supporting collaboration, engagement, and career development, with flexibility based on role-specific responsibilities and business needs. This role is listed as first shift, 40 hours per week, and is based at one of the listed Denver, Washington, DC, or Chicago locations. The annual salary range is $150,000–$190,700, with offers determined by experience, education, and skill set. The role is eligible for an annual discretionary incentive plan and benefits, including paid time off.

Requirements

• Demonstrated experience as a senior technology delivery leader responsible for complex, enterprise-scale technology programs or platforms.
• Proven ability to lead multiple engineering and development teams through large-scale technology implementations.
• Strong experience with ServiceNow development, implementation, and enterprise integration, preferably in cybersecurity or security operations.
• Experience delivering security workflows, case management, automation, and integrations in a large enterprise environment.
• Strong understanding of Security Incident Response, Data Loss Prevention, cybersecurity operations, and data protection processes.
• Experience integrating ServiceNow with cybersecurity platforms, detection technologies, enterprise data sources, and supporting systems.
• Strong understanding of APIs, integration patterns, workflow automation, data models, application architecture, and software engineering practices.
• Working knowledge of ServiceNow development technologies, including JavaScript, ServiceNow scripting, and APIs, and ability to guide technical design and engineering decisions.
• Demonstrated experience managing technology roadmaps, delivery dependencies, resources, financials, risks, and executive-level reporting.
• Strong leadership and communication skills and ability to influence engineering, cybersecurity, business, control, and executive organizations.
• Proven ability to navigate ambiguity, simplify complex problems, remove impediments, and drive teams toward measurable outcomes.

Nice To Haves

• Experience leading ServiceNow Security Operations or Security Incident Response implementations in a large enterprise environment.
• Experience with enterprise Data Loss Prevention technologies and DLP case-management processes.
• Experience leading complex cybersecurity technology transformation programs.
• Experience in cybersecurity operations, incident response, data protection, and security engineering.
• Familiarity with ITIL practices and relevant ServiceNow certifications.
• Knowledge of cybersecurity, privacy, data protection, regulatory, and compliance requirements.
• Experience leading technology programs involving multiple platforms, integrations, vendors, and organizational stakeholders.
• Experience driving workflow automation, orchestration, process standardization, and operational transformation.
• Bachelor’s or Master’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent professional experience.
• Desired certifications: Certified System Administrator (CSA), Certified Implementation Specialist – Data Foundations (CIS-DF), and Certified Implementation Specialist – Security Incident Response (CIS-SIR).

Responsibilities

• Provide end-to-end technology leadership and accountability for designing, developing, testing, implementing, and enhancing ServiceNow SIR and DLP capabilities.
• Lead multiple engineering and development teams, setting priorities, delivery plans, accountability, and execution discipline.
• Translate cybersecurity and business strategies into technology roadmaps, architecture, engineering deliverables, and implementation plans.
• Drive complex, interdependent technology initiatives while managing risks, dependencies, issues, and delivery challenges.
• Establish engineering and delivery practices across design, development, testing, deployment, operational readiness, and platform support.
• Ensure solutions are scalable, resilient, sustainable, and aligned with enterprise technology and security standards.
• Work with business, cybersecurity, and technology organizations and executives to deliver integrated SIR and DLP capabilities.
• Manage relationships with executives, sponsors, product owners, architecture teams, control partners, and vendors.
• Align teams and organizations with competing priorities, dependencies, and delivery requirements; resolve organizational and technical impediments.
• Communicate delivery progress, risks, dependencies, decisions, financials, and outcomes to senior leadership.
• Manage portfolio-level resources, financials, dependencies, and delivery.
• Lead implementation of SIR and DLP capabilities, including event intake, enrichment, triage, investigation, case management, escalation, remediation, and closure workflows.
• Oversee ServiceNow integrations with enterprise security detection, incident response, DLP, and supporting platforms for automated event ingestion, enrichment, routing, and orchestration.
• Drive standardized workflows and automation to improve speed, consistency, efficiency, and traceability in security incident and data protection processes.
• Establish risk-based capabilities to categorize and prioritize incidents and DLP events based on severity, data sensitivity, business context, and potential impact.
• Partner with Cybersecurity Operations, Data Protection, Technology, Risk, Compliance, Privacy, Legal, and business teams to translate operational requirements into scalable solutions.
• Drive dashboards and reporting on security incidents, DLP cases, workflow performance, trends, and risk outcomes.
• Ensure controls, traceability, documentation, and governance are incorporated into SIR and DLP workflows.
• Provide technology leadership for ServiceNow development, engineering, integration, workflow automation, and platform capabilities.
• Lead integration of ServiceNow with enterprise cybersecurity technologies, data sources, and operational platforms; establish reusable integration, automation, and workflow patterns.
• Ensure data quality, resiliency, performance, security, and controls across platform integrations, and align solutions with enterprise architecture and technology standards.
• Drive engineering decisions and trade-offs balancing speed, scalability, resiliency, risk, and long-term sustainability.
• Manage integrated delivery plans, roadmaps, milestones, dependencies, risks, and implementation readiness.
• Develop metrics and dashboards covering delivery, implementation progress, operational readiness, platform performance, and risk; establish governance to resolve delivery risks, technical issues, and cross-team dependencies.
• Incorporate testing, production readiness, implementation, change management, and post-implementation support into delivery plans.
• Provide transparent executive reporting on program health, decisions, risks, and outcomes.
• Improve SIR and DLP capabilities through automation, workflow optimization, platform modernization, and technology integration; simplify and standardize processes to reduce complexity and manual handoffs.
• Evolve capabilities in response to changes in threats, technologies, regulations, and business requirements; use operational feedback and lessons learned to inform enhancements.
• Identify opportunities for orchestration, intelligent automation, and emerging technologies to improve security operations.
• Ensure solutions support applicable internal policies, control requirements, regulatory obligations, and cybersecurity standards.
• Integrate risk management, controls, documentation, traceability, and evidence into delivery and platform capabilities.
• Support audit, regulatory, and compliance activities by providing timely, accurate information about implementation, workflows, controls, and delivery.
• Identify technology and delivery risks, develop mitigation strategies with stakeholders, and balance business outcomes, cybersecurity and technology risk, and operational resiliency.

Benefits

• Benefits eligibility.
• Paid time off.
• Annual discretionary incentive plan, based on individual performance and behaviors, line-of-business or group contributions, and overall company success.
• Affordable, competitive, and flexible benefits supporting employees’ physical, emotional, and financial wellness.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed