Sr. Network Security Engineer (Cloud exp required)

Bank of America Corporation•Boston, MA

28d•Onsite

About The Position

We are seeking a skilled and motivated Network Security Engineer to join our GIS Core Engineering team. The Network Security Engineer is a key individual contributor that has accountability for researching, designing, engineering, implementing, and supporting network security solutions. You will utilize in-depth technical knowledge and business requirements to help design and implement a secure solution to meet customer / client needs while protecting the Bank's assets. Develops and implements security standards, procedures, and guidelines for multiple platforms and diverse environment. Exercises judgment within broadly defined practices and policies in selecting methods, techniques, and evaluation criterion for obtaining results. It is imperative that you have a solid knowledge of network security domains such as DDoS, Segmentation, Network Access, Web Content Inspection, Perimeter Defense, and Network monitoring. You will regularly collaborate with experts both in country and in other regions, so excellent communication skills are very important. If you are seeking a demanding role within Global Information Security (GIS) and have the required skills, this will be a great opportunity for you. Typically, applicants should have 5 to 7 years of cybersecurity or engineering experience.

Requirements

Strong fundamental understanding of information security principles, risks, and controls and of cyber security operations functions.
Knowledge of how Web Based internet facing applications are deployed and set up and experience architecting complex enterprise cybersecurity solutions for data in transit across web, email and b2b environments. Including technology that provides proxy control, malware inspection, SSL termination, and Data Loss Prevention (DLP).
Understanding of how Content Delivery Networks (CDNs) work, how they are designed to provide application services, and how they are used to mitigate network security threats.
Detailed knowledge of Network Security solutions such as DDOS mitigations techniques, WAF, etc.
Knowledge Solid experience with designing, evaluating, and deploying network security solutions for outbound, inbound, and lateral network traffic. Experience engineering web content inspection solutions using tools such as Skyhigh Web gateway, Trellix (Fireeye), and F5 LTM/APM/SSLO.
Experience deploying proxies in the cloud (AWS) and experience with SASE platforms
Experience coordinating delivery of project/changes milestones, ensures projects stay on target, escalating and identifying roadblocks.
Ability to quickly diagnose the problem areas and come up with solutions and/or workarounds
Ability to translate business needs into requirements and experience understand analyzing the technical feasibility and design against the requirements.
Effective communication skills and must be comfortable in delivering messages across a wide spectrum of individuals having varying degrees of technical understanding.
Ability to work independently on various initiatives with little oversight.
Strong analytical skills/problem solving/conceptual thinking.
Motivated and willing to learn.

Nice To Haves

Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience).
Experience deploying security solutions in virtual environments such as VMWare, AWS, Azure
Experience integrating network security solutions with IAAS, PAAS and SAAS components such as Zscaler, O365, etc.
Experience deploying security solutions in email environments.
Experience with Data Governance, Model Risk Management and Application Management.
Ability to work with Technical and Non-Technical business owners.
Experience in large enterprise environments.
Assist with internal efficiencies projects and development.
Familiarity with industry standard endpoint tools.
Relevant certifications: CCNA, CCNP, CISSP, or CEH.

Responsibilities

Serves as a subject matter expert for one or more engineering initiatives and is the point of contact for clients
Contributes to defining and ensuring security requirements are met based on BofA standards and Policies.
Incorporates basic architecture components including threat-models, diagrams, and technological requirements for in solution development.
Understands and utilizes basic network, virtualization, and datacenter technologies for deployment strategies.
Leads the delivery of the major engineering milestones and acts as the critical decision maker with regards to technical design and implementation
Documents and communicates required information for deployment, maintenance, support, and business functionality.
Adheres to team delivery/release process and cadence pertaining to solution deployment and release.
Identifies and raises risks or potential vulnerabilities at all stages of the security-engineering process
Works closely with a diverse set of stakeholders with varying priorities to debate and negotiate paths forward
Navigates and works effectively across a complex, geographically dispersed organization