IT Security Specialist

Role: IT Security Specialist Duration: 12 Months Location: Chicago IL/ Denver CO The successful candidate is an intellectually curious self-starter who requires minimal oversight and who has hands-on experience to hit ground day 1 with cloud control deployments. Along with a strong work ethic, the candidate must have cloud experience and a proven history executing and evaluating proof of concept and pilot programs.Working with and influencing at various levels of the organization, engaging with executive leadership across the enterprise, as well as with third parties to enable solutions at Bank of America are required experience for success. The successful candidate must be familiar with information security concepts and can speak to processes, tools, and technologies.

Role needs to demonstrate abilities and/or a proven record of success cloud experience building and delivering solutions across the major cloud service providers in the following areas:
Enterprise Cloud Strategy Planning and Transformation
Cloud Account and Subscription Architecture, and Organizational Management
Cloud Service Management and Adoption
Workload and Data Migration
Cloud infrastructure and platform deployment (using Infrastructure-as-Code and Policy-as-Code)
CI/CD Pipeline Management, Testing Orchestration, and Monitoring
Cloud Configuration, Posture Management and Drift Monitoring
Cloud Logging and Event Monitoring

Required skills:
5+ years of experience in cyber security or a technology-related field
5+ years of experience in cloud security (AWS Azure Google Cloud Platform)
Demonstrated passion for cyber security, good understanding of security operations, cyber defense, network security, threat intelligence, incident response.
SIEM configuration (particularly Splunk Sentinel). Configure Incident and alarm response procedures for operations teams to manage incidents.
Experience/Understanding of Cloud based services, technologies and providers (eg SaaS, IaaS, PaaS, etc.)
Hands-on experience with implementing native cloud security services and triage capabilities with multi cloud environments
Significant experience with one or more of the following cloud environments at a large enterprise: AWS, Google Cloud, or Azure
- Experience with container security and orchestration - Docker, Containerd, Kubernetes, Cloud Foundry etc.
-Detailed understanding of IaaS and virtualization - service orientated architecture designed around the delivery of Infrastructure components as a service
-Familiar with configuration release management tools commonly used in CI/CD pipelines (e.g. Ansible, Chef, Puppet, etc.)
Experience with the creation and tuning of alerting rules from CSPM/SSPM tools in response to changing threats
Excellent written and verbal communication skills to describe security event details and technical analysis with audiences within the cybersecurity organization and other technology groups
Experience with configuring cloud security native services and performing end-end UAT with key stakeholders.
Experience with any CSPM/SSPM/CIEM/CWPP vendor solutions, and aligning cloud security to hardening standards and frameworks (CIS, NIST, ISO)
Exhibiting familiarity with Cloud Security Alliance, Center for Internet Security, ISC2, and SANS Cloud Security Standards for securing cloud applications, IaaS, PaaS, SaaS, containers, and microservices
Experience on coordination and collaboration with multiple vendors for CSMP tools and for new upcoming technology enhancements
Experience in building CSPM/SSPM test cases for performing proof of concepts with vendor solutions
Experience in other security technologies such as: Security information and event management (SIEM), IDS/IPS, Web Application Firewall (WAF), endpoint protection, Sandboxing, network- and host- based firewalls, Encryption, Threat Intelligence, Penetration Testing, etc. is a plus.
Knowledge of security and privacy-related industry standards and frameworks (e.g. NIST CSF, CIS, ISO 27001 series, COBIT, HIPAA, MITRE)
Experience using scripting languages (Python, Powershell, Bash, etc.) to parse machine-generated data, interact with REST APIs and automate repetitive tasks
Proficient in Microsoft Office tools (Excel, PowerPoint, Word, SharePoint) with ability to analyze data and document policy/standards/project documentation
Excellent verbal and written communication skills; ability to articulate technical knowledge to non-technical audience; production of policy/standards/project documentation
Ability to take ownership of an initiative/issue through completion and work in a collaborative environment.

Preferred Qualifications:
Certified Information Systems Security Professional (CISSP), or equivalent
AWS Certified Solutions Architect, AWS Certified Security (or equivalent)
CCSK+ (Certified Cloud Security Knowledge)

Desired Skills:
Bachelor's degree in Information Technology, information security or related field
Certifications: CCSK, CCAK (CSA), CCSP, CISSP, CCFP (ISC2), CISA, CRISC, CISM (ISACA), CCIE (Cisco), TOGAF, CCTA (McAfee),
In-depth understanding of cloud native services and hands-on experience with implementing cloud security changes within multi cloud platforms
Familiarity with financial industry laws, rules and regulations and guidance documents.
Experience within Audit, Operational Risk, Compliance, Regulatory or related oversight organizations
Experience in implementation of information security strategy, including compliance with industry best practices and regulatory requirements.
Assist with internal efficiencies projects and development.
Experience with Azure Security Center, AWS Cloud Security Hub, or Google Cloud Security
Excels at adapting to changing business needs with ability to balance multiple competing priorities in an extremely dynamic environment.
Ability to proactively anticipate problems and execute solutions.QualificationAssessmentMust HaveTechnicalPython Nitin Gujarati Sr Recruiter Desk: Cystems Logic Inc. (a Sybyte Technologies Inc. Company) UK USA India Malaysia Canada