Security Engineer

• The Vice President, Enterprise Infrastructure & Security serves as the Bank’s senior technology leader responsible for the architecture, engineering, and operational integrity of enterprise infrastructure and security platforms.
• Ensure stability, resilience, security, and regulatory compliance of the Bank’s core technology environment supporting critical business operations, customer channels, and regulatory obligations.
• Provide executive leadership across enterprise infrastructure domains including network, server, cloud, identity, endpoint, and security technologies.
• Ensure infrastructure platforms are designed, implemented, and operated in a secure, resilient, and highly available manner consistent with regulatory expectations.

VP, Enterprise Infrastructure & Security

• Oversee implementations and consultative engagements for the Proofpoint Data Security products
• Develop new services, implement best practices, and assist in customer escalations as needed
• Align client business priorities with data protection strategies
• Assess client operations and business processes, gathering requirements, and recommending optimized Proofpoint solutions
• Provide strategic program design solutions to help clients identify, protect, monitor, and manage sensitive data and users
• Collaborate with Professional Services, Support, Engineering, and Product teams to resolve customer concerns and escalations
• Partner with the sales organization to ensure customer needs are met and satisfaction remains high
• Present updates to management, highlighting risks, challenges, and proposed solutions

Senior Professional Services Consultant – Data Security

• Provide engineering support for Email Security infrastructure across a large enterprise
• Work with developers, application owners, end-users and security to provide support towards Secure Email solutions
• Troubleshoot and resolve mail flow related issues in a complex environment
• Off hours work is required for deployments and on-call rotation in support of major incidents

Security Engineer – Email Security

• Partner with Security Compliance Regulatory Affairs to execute a unified security regulatory strategy that balances long-term global trends with Twilio’s immediate operational needs.
• Monitor, identify, and prioritize new and evolving cybersecurity regulations (including telecom-specific mandates); translate complex requirements into actionable business impacts.
• Manage weekly compliance-focused operating rhythm, triaging regulatory developments and escalating critical security risks to senior leadership.
• In partnership with cyber legal counsel, define the "scope of applicability" for new regulations to ensure Twilio’s responses and decisions are precise, efficient, and aligned with how we actually build products.
• Collaborate with Go-To-Market teams to leverage Twilio’s security compliance posture as a differentiator, identifying opportunities to drive revenue through trust.
• Project manage non-security stakeholders to ensure the timely collection of evidence, support, and information required for successful regulatory filings and audits, working closely with the Security Compliance Regulatory Affairs team to facilitate and align on response.

Senior Security Regulatory Compliance Manager

• Provide engineering support for Email Security infrastructure across a large enterprise
• Work with developers, application owners , end-users and security as needed, to provide support towards our Secure Email solutions
• Possess the skills to provide troubleshooting and problem resolution of mail flow related issues
• Off hours work is required for deployments and on-call rotation in support of major incidents impacting email delivery

• Serve as a trusted technical advisor to the Enterprise Cyber Focal Lead, translating cyber strategy into scalable, high-impact technical solutions.
• Design, build, and implement complex cyber solutions leveraging AI/ML to improve threat detection, vulnerability management, risk prioritization, and automation.
• Lead end-to-end solution architecture, including design reviews, implementation, and operational readiness for cyber platforms and tooling.
• Apply full-stack application development expertise to build secure, resilient, and performant cyber applications and services.
• Architect and deliver solutions using AWS cloud services, following cloud-native, well-architected, and security principles.
• Apply hands-on AI/ML capabilities (GCP preferred) to build and operationalize intelligent cyber capabilities (e.g., analytics, anomaly detection, automation, decision support).
• Partner with data, AI, and platform teams to ensure solutions are scalable, secure, and production-ready.
• Own and lead application vulnerability management from a technical standpoint, including tooling, integrations, automation, and remediation workflows.
• Act as a trusted partner to Security, Platform, Reliability and Software Engineers, enabling secure, reliable, and resilient application delivery.
• Define, promote, and enforce application security best practices, including secure coding, dependency management, secrets handling, logging, and monitoring.

Senior Security Engineer

• Support Gartner’s AppSec function.
• Execute daily vulnerability Assessments functions.
• Collaborate with Information Security partners and technology stakeholders to identify risks/vulnerabilities.
• Remediation planning and coordination for security risks.
• Engineer automation solutions and/or security tool integrations.
• Collaborate with business stakeholders to design secure applications and test applications for security weaknesses.
• Mentor engineers and security champions on practical threat modeling techniques.
• Own day-to-day life cycle management including threat assessment and risk avoidance.
• Create actionable reports showing direct impact to the security posture.
• Define and implement metrics to measure the effectiveness of security controls.

Lead Security Engineer

• Secure Migration Architect (On-Prem to AWS Focus)
• Design secure pathways for migrating critical on-premises workloads and sensitive data to the AWS cloud environment.
• Architect and enforce robust security controls for hybrid cloud networking (e.g., Direct Connect, Transit Gateway) and virtual data center connectivity.
• Ensure data integrity and confidentiality during transfer by leveraging AWS services like DataSync or Transfer Family and implementing mandatory encryption via AWS KMS.
• Collaborate with Cloud IAM architects to engineer and proliferate stringent policies and roles that strictly enforce the Principle of Least Privilege (PoLP) across all AWS accounts.
• Use Infrastructure as Code (IaC) tools (e.g., Terraform or CloudFormation) to embed security guardrails and governance policies directly into all cloud infrastructure provisioning.
• Provide architectural guidance to SecOps for the configuration and integration of core security functions, including continuous monitoring, logging, SIEM ingestion, and automated alerting across the AWS footprint.
• Define and govern the strategy and standards for integrating security testing (SAST, DAST, and SCA) into CI/CD pipelines, advising and supporting AppSec, DevOps, and application development teams on "Shift Left" best practices.
• Perform security architecture reviews and provide hands-on guidance to developers on vulnerability remediation and secure coding practices.

VP, Cloud Security Architecture

• Lead enterprise-wide vulnerability remediation efforts and execute risk-based strategies using CVSS, exploitability, asset criticality, and business impact
• Drive cross-functional collaboration with security, engineering, cloud, and infrastructure teams to ensure effective and timely remediation outcomes
• Oversee remediation lifecycle management, ensuring vulnerabilities are prioritized, tracked, and resolved within defined SLAs
• Establish and enforce prioritization models, including exception handling, risk acceptance, and escalation of high-risk issues
• Deliver executive reporting on exposure trends, remediation performance, and overall risk posture
• Improve remediation processes, tooling, and automation to enhance efficiency and reduce false positives
• Ensure alignment with regulatory and compliance frameworks and support audits, risk assessments, and governance activities

Senior Manager – Information Security, Exposure Management

• Support security control assessment activities
• Gather and organize assessment evidence
• Document security control implementation
• Conduct security testing and evaluations
• Assist with vulnerability scans and analysis
• Create of assessment reports and briefings
• Maintain assessment documentation and tracking sheets
• Lead security control interviews
• Prepare assessment deliverables
• Applying NIST security controls and frameworks
• Support continuous monitoring activities
• Assist with security documentation review
• Contribute to Plans of Action and Milestones (POA&Ms) development
• Participate in team meetings and technical discussions

Security Control Assessor

• Support SaaS Security Posture Management (SSPM) initiatives across enterprise SaaS platforms.
• Configure, operate, and tune SSPM/CSPM tools to identify misconfigurations, excessive permissions, and risky integrations.
• Support and mature CSPM capabilities across AWS and Azure, including continuous monitoring and risk prioritization.
• Partner with application owners to drive remediation of SaaS and cloud security findings.
• Secure cloud-native workloads across AWS and Azure using native and third-party security controls.
• Support container and Kubernetes security, including image scanning, runtime protections, and policy enforcement.
• Collaborate with DevSecOps teams to embed security controls into CI/CD pipelines.
• Develop and maintain security automation using scripting languages (Python, PowerShell, Bash).
• Implement and review Infrastructure-as-Code (Terraform, ARM, CloudFormation) with a security-first mindset.
• Design and enforce Policy-as-Code (OPA, Sentinel, native cloud policies) to prevent insecure deployments.
• Enable shift-left security by integrating controls early in the development lifecycle.
• Contribute to emerging AI Security Posture Management (AI-SPM) efforts.
• Partner with platform and data teams to assess and secure MLOps pipelines, models, and supporting infrastructure.
• Help define guardrails for AI usage, data access, and model governance.
• Translate technical findings into actionable risk insights for remediation.
• Support audits, risk assessments, and regulatory inquiries related to cloud and SaaS security.
• Stay current on emerging threats, SaaS attack patterns, cloud security trends, and AI security risks.
• Mentor junior team members and influence secure-by-design practices across the organization.

Cloud Security Engineer

• Execute user access provisioning and deprovisioning requests (joiner, mover, leaver)
• Validate access requests for completeness and proper authorization
• Assist in maintaining role-based access models (RBAC)
• Support management of Active Directory, Entra ID (Azure AD), or similar directories
• Support day-to-day operations of IAM platforms (e.g., Okta, SailPoint, Saviynt, Entra ID)
• Assist with onboarding applications into IAM systems
• Help troubleshoot user access issues and authentication failures
• Maintain documentation of IAM processes and procedures
• Help enforce basic least privilege and access policies
• Work with IT, HR, and business units to fulfill access requests
• Communicate clearly with end users regarding access issues
• Participate in team meetings and knowledge-sharing activities
• Participate in compliance audits and support IAM audits and reporting.
• Identify risks and recommend solutions to ensure compliance with IAM standards.
• Work with the IAM team to resolve identity and access management problems.
• Maintaining up-to-date knowledge of identity and access management best practices.
• Documenting IAM processes and procedures.

Information Security Engineer I

• Lead onboarding and migration of applications onto Akamai CDN and WAF platforms.
• Configure, maintain, and support Akamai edge security and content delivery services.
• Implement and tune WAF policies, security controls, caching rules, and traffic management configurations.
• Work closely with application, network, cloud, and security teams to ensure secure and optimized application delivery.
• Troubleshoot complex Layer 1–7 issues involving DNS, TLS/SSL, HTTP/HTTPS, CDN behavior, caching, and origin connectivity.
• Support production incidents, root cause analysis, and operational escalations.
• Participate in on-call rotation and support maintenance activities during off-hour change windows.
• Develop technical documentation, runbooks, operational procedures, and audit artifacts.
• Collaborate with vendors and internal stakeholders on application onboarding and security initiatives.
• Support security assessments, audits, remediation activities, and compliance requirements.
• Provide technical guidance and mentoring to engineering teams.

WAF/CDN Security Architect

• Maintain and enhance security related tooling with the team including Security Log Aggregation, AV, Development Buildtime and Cloud Runtime tooling.
• Automate detections throughout our tooling stack leveraged to uncover security events and attacks against our systems.
• Implement, iterate, and operate security automation aimed at supporting our engineers during their building processes, reducing the time it takes to remediate discovered vulnerabilities.
• Perform vulnerability assessments and ad hoc security reviews to identify and prioritize potential security risks and vulnerabilities
• Partner closely with engineers to perform security reviews that support our software and infrastructure engineers early in their engineering process
• Participate in incident response activities, including investigation, containment, and recovery efforts

Security Engineer II

• Serve as a second-line cybersecurity oversight and assurance function
• Proactively identify control gaps before internal or external audits occur
• Partner closely with Internal Audit to support cybersecurity-focused audits
• Work directly with global operating companies to assess cybersecurity posture and control maturity
• Identify risks across identity & access management, infrastructure, cloud, endpoint, and operational technology (OT)
• Recommend pragmatic, risk-based improvements aligned with industry frameworks
• Perform and evaluate cybersecurity testing activities
• Review penetration testing methodologies, tooling, and remediation plans
• Assessment of vulnerability management processes and patching cadence
• Evaluation of incident response readiness, logging, and monitoring practices
• Monitor and report on cybersecurity risks, recurring control issues, and trends
• Support development and refinement of cybersecurity policies, standards, and audit playbooks
• Influence, educate, and guide stakeholders to strengthen accountability for cybersecurity controls and risk ownership

Cyber Security Auditor

• Responsible for oversight of executive protection teams and activities within a specific geographic region.
• Develop and implement comprehensive security plans and protocols.
• Ensure safety and security of senior management team and bank events.
• Manage health, safety, and physical security of all attendees at Bank of America–sponsored or hosted events.
• Conduct detailed security surveys of all identified locations.
• Continuous analysis and identification of potential threats across multiple intelligence and information platforms.
• Close coordination with event planners, local law enforcement, and venue partners.

Executive Protection & Events Security Manager II

• This job is responsible for oversight of executive protection teams and activities within a specific geographic region and the health, safety, and physical security of all attendees at Bank of America sponsored or hosted events.
• Key responsibilities include the development and implementation of security plans and protocols, direction of activities to ensure safety and security of the senior management team and bank events, and delivery of threat analysis across various platforms with cross-functional teams.
• Responsibilities include developing and implementing comprehensive security plans and protocols, ensuring the safety of clients and associates, and confirming that proper screening and vetting procedures are executed for all event guests.
• The Major Events Security Manager must be capable of responding to all medical situations and may serve as the first responder on scene, performing first-responder duties as required.
• Responsibilities include managing ongoing incidents, medical conditions, and/or event-related investigations while simultaneously maintaining overall event security oversight with planners, event staff, additional security resources, and venue partners.

Executive Protection & Events Security Manager II – Major Events Security Manager

• Establish the enterprise direction, strategy, and architecture for securing the company’s use of Artificial Intelligence.
• Set the enterprise vision for scaling AI securely and staying ahead of AI‑enabled threats.
• Own architectural authority for AI security technologies and design enterprise‑wide security patterns and guardrails.
• Define the enterprise AI security risk framework and supporting control architecture.
• Lead security architecture strategy to defend against AI‑enabled attacks.
• Partner with AI Platform and Data leaders to embed security controls in MLOps and LLMOps.
• Own enterprise security architecture across cloud, application, data, identity, DevSecOps, and third‑party domains.
• Operate a mature, outcomes‑focused security architecture governance model.
• Serve as a trusted executive advisor to senior leaders regarding AI and cyber risks.
• Lead, coach, and develop a high‑performing security architecture organization.

Vice President, AI Security, Enterprise Security Architecture

• Own a meaningful slice of our defensive infrastructure end-to-end.
• Design, execute, and follow through on security awareness programs and phishing simulations.
• Participate in Endpoint Detection & Response rollout and ongoing operations.
• Revamp our network protections for Zero Trust network access and DNS security.
• Manage and operate our EASM platform, including continuous monitoring, finding triage, and remediation coordination.
• Coordinate with our third-party penetration testing partner for scoping, logistics, findings review, and remediation tracking.
• Monitor and respond to security alerts across our stack — SIEM, EDR telemetry, and related tooling.
• Own relevant SOC 2 controls and participate in vendor evaluations, new tooling assessments, and ad hoc projects.

• Vendor Security Assessment System (VSAS) team within Cybersecurity organization is responsible for analyzing and providing recommendations to assist in managing cyber-related risks associated with outsourcing Travelers data to third-party vendors or service providers.
• Assist in the development, implementation, and execution of the Travelers Third Party Cybersecurity Risk Management Program.
• Engage with third parties to ensure the completion of all aspects of the risk assessment of third party vendors.
• Assess inherent and residual risk of data transfers.
• Acts as the primary point of accountability for cybersecurity to business partners within assigned area.
• Supports and maintains security systems to ensure the integrity of company information and resources.
• Supports the investigation, identification, and resolution of cybersecurity events/breaches.
• Interfaces with internal and external entities to ensure adherence to cybersecurity procedures and policies.

See all jobs on JobTailor

VP, Enterprise Infrastructure & Security

Senior Professional Services Consultant – Data Security

Security Engineer – Email Security

Senior Security Regulatory Compliance Manager

Security Engineer – Email Security

Senior Security Engineer

Lead Security Engineer

VP, Cloud Security Architecture

Senior Manager – Information Security, Exposure Management

Security Control Assessor

Cloud Security Engineer

Information Security Engineer I

WAF/CDN Security Architect

Security Engineer II

Cyber Security Auditor

Executive Protection & Events Security Manager II

Executive Protection & Events Security Manager II – Major Events Security Manager

Vice President, AI Security, Enterprise Security Architecture

Security Engineer

Senior Associate Cybersecurity Specialist – Third Party Risk Management