Description

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates' physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Job Description:

This job is responsible for defining and leading the engineering approach for complex features to deliver significant business outcomes.

Key responsibilities of the job include delivering complex features and technology, enabling development efficiencies, providing technical thought leadership based on conducting multiple software implementations, and applying both depth and breadth in several technical competencies while designing and implementing secure systems to protect APIs, streaming data pipelines, and databases, ensuring high performance and compliance with cybersecurity standards. The ideal candidate will drive innovation in secure data processing and collaborate across teams to deliver robust solutions.

Responsibilities:

• Partner with cybersecurity experts to define requirements and success criteria
• Lead the design and implementation of secure, scalable integration solutions for cybersecurity platforms.
• Define and enforce engineering standards for secure APIs, data pipelines, and microservices.
• Collaborate with security architects and platform engineers to ensure compliance with cybersecurity policies and frameworks.
• Develop and maintain secure RESTful APIs for real-time and batch data processing.
• Apply encryption, access control, and auditing mechanisms to protect sensitive data in transit and at rest.
• Integrate with SIEM, SOAR, and threat intelligence platforms to enable automated detection and response.
• Optimize performance and resilience of data ingestion and processing pipelines.
• Mentor junior engineers and promote secure coding and integration best practices.
• Document integration patterns, data flows, and security controls for audit and compliance purposes.

Required Qualifications:

• 10+ years of experience in cybersecurity engineering, secure software development, or platform integration.
• Strong programming skills in Java and Python , with experience in secure API development.
• Experience with container orchestration platforms ( Kubernetes, OpenShift ) and infrastructure automation.
• Knowledge of data streaming and processing platforms ( Kafka, Databricks, Snowflake ).
• Data Analytics Experience using common security tools (Splunk, Hadoop, Spark, Python )
• Hands-on experience with securing databases and implementing RBAC, encryption, and audit logging.
• Understanding of secure software development lifecycle (SSDLC) and DevSecOps practices.
• Ability to lead technical projects and collaborate with cross-functional teams.
• A Master's or Bachelor's degree in Computer Science, Information Security, or a related field is helpful but experience is highly valued.

Skills:

• Proven Cybersecurity expertise, preferably in Detection and Response related fields but other domains are also valued.
• Deep expertise in secure software engineering, API security, and data protection best practices.
• Hands-on experience designing and implementing secure data pipelines, ETL processes, and real-time streaming architectures (e.g., Kafka, Databricks).
• Proficiency in Java, Python, and scripting languages for secure application and integration development.
• Strong understanding of API security protocols (OAuth2, OpenID Connect, JWT) and OWASP API Security Top 10.
• Experience with containerized and virtualized environments (Kubernetes, OpenShift, Docker, VMware).
• Significant experience with cloud-native security controls and multi cloud architectures across AWS, Azure, and GCP
• Expertise in securing relational and NoSQL databases (PostgreSQL, MongoDB) with encryption, RBAC, and auditing.
• Experience with infrastructure-as-code, CI/CD pipelines, and DevSecOps practices.
• Strong communication and collaboration skills to work across cybersecurity, engineering, and architecture teams.
• Application Development
• Solution Design
• Agile Practices
• Analytical Thinking
• Collaboration

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Shift:
1st shift (United States of America)

Hours Per Week:
40

Pay Transparency details

US - CO - Denver - 1144 15th St - Denver Gis (CO9926), US - IL - Chicago - 540 W Madison St - Bank Of America Plaza (IL4540)

Pay and benefits information

Pay range

$122,000.00 - $204,500.00 annualized salary, offers to be determined based on experience, education and skill set.

Discretionary incentive eligible

This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.