Job Description:
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.
Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.
We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.
Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!
Position Summary:
This role supports Container Information Security activities for Bank of America, including:
Assist in identifying potential security configuration issues, risks, and vulnerabilities within container environments.
Support container vulnerability assurance efforts, including compliance with configuration requirements, security controls, and remediation activities.
Collaborate with internal partners and stakeholders to support security initiatives and maintain effective working relationships.
Job expectations include applying technical knowledge to support partners, assisting with security assessments, and learning evolving cybersecurity threats.
Job Responsibilities:
Support efforts to improve vulnerability identification quality and consistency across container environments.
Collaborate with teams across Vulnerability Management, Cloud Security, and Container Security to support strategic initiatives and roadmap execution.
Assist with gap analyses of existing controls, documenting findings and recommendations for improvement.
Provide technical support and consultation related to container vulnerability identification and remediation activities.
Learn and evaluate emerging technologies that may support cloud and container vulnerability management capabilities.
Support audit, risk, and regulatory activities by gathering information and responding to requests.
Assist engineering teams in addressing security-related technical challenges.
Demonstrate strong organization, accountability, and a willingness to learn new technologies and processes.
Support efforts to identify vulnerabilities and misconfigurations in container platforms, Continuous Integration/Continuous Delivery (CI/CD) pipelines, and workloads.
Assist with the daily operations and administration of container security solutions such as Aqua, Wiz, Qualys, and CrowdStrike.
Participate in efforts to improve vulnerability identification processes across hybrid cloud platforms.
Support cloud and container security initiatives aligned with the Bank’s security strategy and industry best practices.
Assist in the implementation and monitoring of security controls designed to protect company systems and information.
Conduct research on emerging threats and security trends and share findings with team members.
Monitor security alerts and assist with investigations of potential threats and vulnerabilities.
Apply secure-by-design principles and assist with activities focused on identifying vulnerabilities early in the development lifecycle.
Build partnerships with technology teams by providing operational support and security guidance.
Required Qualifications:
Understanding of container and software supply chain security risks.
3 + years exp in foundational understanding of cloud-native services, tools, and architecture.
Understanding of application security principles.
Experience or coursework in infrastructure, cloud, or security technologies.
Familiarity with DevSecOps concepts and CI/CD pipeline security practices.
Ability to create and maintain technical documentation.
Basic understanding of threat modeling concepts and security frameworks.
Familiarity with vulnerability management concepts and security scanning tools.
Strong analytical and problem-solving skills.
Ability to work independently on assigned tasks while seeking guidance when needed.
Strong desire to learn and develop technical expertise.
Ability to communicate technical concepts clearly to both technical and non-technical audiences.
Desired Qualifications:
Progress toward or interest in obtaining industry certifications such as Security+, CCSP, CISSP, or CISM.
Cloud or container-related certifications such as AZ-900, AZ-500, AWS Cloud Practitioner, CKA, or similar.
Bachelor’s degree in Computer Science, Cyber Security, Information Technology, or a related technical field.
Internship, academic, or hands-on experience with cloud, container, or cybersecurity technologies.
Job Skills:
Problem Solving
Information Systems Management
Threat Analysis
Critical Thinking
Customer and Client Focus
Cyber Security
Policies, Procedures & Guidelines
Technology Systems Assessment
Risk Analytics
Quality Assurance
Business Acumen
Stakeholder Management
Data Privacy and Protection
Data and Trend Analysis
This job will be open and accepting applications for a minimum of seven days from the date it was posted
Shift:
1st shift (United States of America)Hours Per Week:
40Pay Transparency details
US - CO - Denver - 1144 15th St - Denver Gis (CO9926), US - DC - Washington - 1800 K St NW - 1800 K Street NW (DC1842), US - IL - Chicago - 540 W Madison St - Bank Of America Plaza (IL4540)Pay and benefits informationPay range$100,000.00 - $141,300.00 annualized salary, offers to be determined based on experience, education and skill set.Discretionary incentive eligibleThis role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.BenefitsThis role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.Skills Required
- Understanding of container and software supply chain security risks
- At least 3 years of foundational understanding of cloud-native services, tools, and architecture
- Understanding of application security principles
- Experience or coursework in infrastructure, cloud, or security technologies
- Familiarity with DevSecOps concepts and CI/CD pipeline security practices
- Ability to create and maintain technical documentation
- Basic understanding of threat modeling concepts and security frameworks
- Familiarity with vulnerability management concepts and security scanning tools
- Strong analytical and problem-solving skills
- Ability to work independently while seeking guidance when needed
- Strong desire to learn and develop technical expertise
- Ability to communicate technical concepts clearly to technical and non-technical audiences
- Progress toward or interest in obtaining Security+, CCSP, CISSP, or CISM certification
- Cloud or container-related certification such as AZ-900, AZ-500, AWS Cloud Practitioner, or CKA
- Bachelor's degree in Computer Science, Cyber Security, Information Technology, or a related technical field
- Internship, academic, or hands-on experience with cloud, container, or cybersecurity technologies
Bank of America Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Bank of America and has not been reviewed or approved by Bank of America.
-
Healthcare Strength — Health coverage is described as comprehensive, with medical, dental, vision, virtual care via Teladoc, wellness programs, and specialized support for cancer and menopause. Wellness credits and an always‑on EAP with in‑person sessions add to the depth of care.
-
Parental & Family Support — New parents can access up to 26 weeks of leave, including 16 weeks fully paid for eligible teammates, alongside back‑up child and adult care. Family‑building resources and reimbursements (e.g., fertility, adoption, surrogacy) and a dedicated Life Event Services team extend support across life stages.
-
Equity Value & Accessibility — Broad‑based equity through the Sharing Success program, including $1B in stock to nearly all non‑executive employees in January 2026, is intended to foster an ownership mindset. Stock awards (including RSUs) are a recurring component that aligns employees’ interests with shareholders.
Bank of America Insights
What We Do
We make financial lives better for our clients and our communities through the power of every connection. Our employees are at the heart of this purpose, and are key to driving responsible growth. Every day, across the globe, our employees bring a commitment to our purpose and to driving responsible growth by living our values: deliver together, act responsibly, realize the power of our people and trust the team. A key aspect of driving responsible growth is doing so in a sustainable manner, a critical pillar of which is being a great place to work for our teammates.
Gallery
