Open Charlotte Cybersecurity jobs

Summary

Despite the Security Operations title, this Spectrum Network Engineer III posting describes standard network engineering — network planning, architecture design, protocol standards, and problem resolution — with no SOC, SIEM, or threat-detection content. It supports Managed Services and IP Routing operations, with CCNP preferred and possible on-call. The actual work is data-network engineering rather than security operations.

Summary

Software engineering role embedding generative AI into the bank cybersecurity architecture and engineering division, building Python applications that use LLMs, embeddings and semantic search for automated vulnerability mapping and intelligent log analysis. It takes AI proofs of concept through to hardened production security tooling and includes data pipeline work with Kafka and the ELK stack plus microservice deployment on OpenShift, Kubernetes and Cloud Run. Mentoring junior developers and proficiency with AI-assisted development tools such as GitHub Copilot are explicit expectations.

Summary

Identity and access management administration inside Bank of America Global Information Security, granting logical access day to day for hundreds of proprietary applications across different technology models and platforms. This is an individual contributor position calling for a strong analytical mindset, root cause identification, and collaboration across organizational units at multiple levels. Working hours are fixed at 10:00 AM to 7:00 PM Monday through Friday, and the bank sets clear in-office expectations.

Summary

Leads security architecture efforts across all cybersecurity domains for new technology implementations, major system changes and mergers/acquisitions at an insurance and financial-services company, and drives updates to security standards and policies in response to regulatory or business change. The role communicates risk to executive leadership, performs third-party and cloud security risk assessments, serves as subject-matter expert during incident response, and supports SOX, PCI and HIPAA/HITECH compliance. The position is remote-eligible from EST or CST US locations and is not eligible for visa sponsorship.

Summary

Delivers cybersecurity and risk consulting to financial-services clients, leading risk assessments and designing security programs covering identity and access management, cloud security across Azure/AWS/GCP, and data protection. Evaluates IT and application security controls against frameworks such as NIST CSF and NIST 800-53, and advises on emerging technologies including AI security. CISSP or CRISC credentials are relevant to the role.

Summary

Data loss prevention engineering at a bank, authoring, testing and tuning DLP rules and policies that protect sensitive data across email, endpoint, web and SaaS collaboration channels. Tuning is measured: reducing false positives and negatives using telemetry, triage feedback and controlled experimentation, and reporting precision, recall and block efficacy. The role also produces operational runbooks, exception and release-code workflows, user-facing guidance and policy release notes while partnering with Information Protection, Incident Response, Legal and Risk; the bar is 2 or more years of information security engineering plus Microsoft 365 or Google Workspace depth, with expected use of AI-assisted development tools.

Summary

Operational owner of a bank application penetration testing program rather than a hands-on tester, coordinating assessment intake, scheduling, readiness validation, remediation tracking, retesting and governance reporting. The role is the liaison between penetration testers, application teams, Application Security Champions and technology partners, facilitating discussion of vulnerabilities and remediation plans, and it doubles as ServiceNow product owner for the workflows that support the program. The stated qualification is 5 or more years of business systems data and design experience, and agile work intake and delivery forecasting are core duties.

Summary

Individual-contributor role engineering enterprise network security platforms — next-generation firewalls, secure web proxy, network access control, WAF, secure remote access, ZTNA, SASE and micro-segmentation — rather than building application software. Responsibilities cover policy and control maturity, TLS inspection and threat prevention, telemetry and observability, configuration management and infrastructure-as-code, plus major incident leadership for security product outages. Hybrid with three days per week in office across the Dallas, Charlotte or Chandler metros; any recurring on-call would be defined before offer acceptance, and travel is 5 percent or less.

Summary

Detection and incident-response engineering inside the bank cybersecurity organization, centered on identifying loggable events, building automated alerting content and prioritizing security use cases. The role also handles technical investigation of moderately complex security incidents, post-incident digital forensics, log review and correlation, risk assessment and security consulting on internal projects. Breadth is expected across on-premises servers, network, endpoint and cloud detection.

Summary

Individual-contributor security architect designing enterprise security architecture blueprints and Security Architecture as Code, translating security policies and regulatory requirements into reusable, machine-readable, version-controlled architecture assets integrated into software delivery workflows. Uses AWS cloud-security expertise and Infrastructure-as-Code tools such as Terraform, CloudFormation, and AWS CDK, and evaluates AI-generated architecture recommendations for compliance accuracy. Onsite, first shift.

Summary

Senior identity and access management consulting inside Global Information Security, defining and steering IAM standards, governance models, controls, and effectiveness measures for public cloud, SaaS, generative AI, machine learning, and agentic AI environments. The role leads comparative assessments of IAM and identity-security capabilities across AWS, Microsoft Azure, Google Cloud Platform, and emerging AI platforms, weighing strategic alignment, control coverage, integration complexity, and implementation effort, and evaluates cloud-native, enterprise, and vendor IAM solutions against regulatory expectations, target-state architecture, and existing investments. The bank sets clear in-office expectations for the position.

Summary

Technical lead for modernizing enterprise vulnerability and patch management at a bank, replacing manual processes with API-first automation, intelligent data correlation and AI-enabled decision support across a hybrid and multi-cloud estate. The engineering content is concrete: building automation frameworks and scripting for vulnerability discovery, analysis and remediation workflows, embedding vulnerability management into CI/CD pipelines and infrastructure-as-code environments, and designing security data pipelines, aggregation and normalization queried with advanced SQL. The role also provides security consulting on large-scale initiatives and performs security assessments spanning cloud security, application security, networking, authentication and cryptography.

Summary

Research and engineering role advancing vulnerability and patch management through automation, AI-driven vulnerability intelligence and cloud security. The work pairs machine learning, statistics and data mining over vulnerability data with API-driven integrations, data-lake and SQL pipeline development, and normalization of output from multiple scanners and cloud platforms. It also covers embedding vulnerability controls into CI/CD and infrastructure-as-code and acting as a subject matter expert on hybrid and multi-cloud security architecture.

Summary

Enterprise technical leadership for modernizing vulnerability and patch management, including decommissioning legacy scanning platforms and standing up cloud-native, AI-assisted vulnerability intelligence across a hybrid and multi-cloud estate. The engineering content is substantial: API-first security architectures, automation frameworks and scripting standards, and integration of vulnerability controls into CI/CD pipelines and infrastructure-as-code. The role advises executive leadership and partners across infrastructure, cloud engineering, DevOps and application development to drive adoption.

Summary

Senior security engineer leading the enterprise API vulnerability-management program, using tools such as Akamai, Salt Security, Traceable, and Burp Suite to identify and remediate API vulnerabilities, and building automated API security testing into CI/CD pipelines. Performs penetration testing and partners with DevSecOps and application teams on remediation. Five days per week onsite in Atlanta, Raleigh, or Charlotte.

Summary

Identity and access management administration inside Global Information Security, the security discipline that governs which individuals reach which resources across the bank's varied technology platforms and compliance regimes. Daily work runs the IAM book of work with the wider team, in close participation with all line of business teams plus second and third line of defense partners, and is highly visible with frequent senior management contact. RACF mainframe security experience is flagged as strongly preferred, and the bank sets clear in-office expectations.

Summary

Identity and access management administration within Bank of America Global Information Security, ensuring appropriate access to resources across heterogeneous technology platforms under strict compliance requirements. The work proceeds through the IAM book of work with other team members, in close participation with line of business teams and second and third line of defense partners, and carries frequent interaction with senior management and key stakeholders. RACF mainframe security experience is flagged as strongly preferred, and the bank sets clear in-office expectations.

Summary

Identity and access management role running daily operations of privileged identity applications and monitoring SIEM services within the core IAM infrastructure, plus handling end user escalations, updating documentation and improving PI and SIEM processes, with scope expected to grow into global strategic IAM work. Requires a high school diploma or GED, five years in information security and five years of technical experience with IAM modules, Splunk, Active Directory and Azure, with access-control experience across Windows, Exchange and O365 and Active Directory, SQL and Oracle databases valued. The position is remote and reports to a cyber security director; candidates must be a U.S. Person under export control rules.

Summary

Leads the strategy and roadmap for member authentication and identity access management across all USAA channels, balancing fraud risk mitigation and security controls against member experience. Translates business and regulatory requirements into detailed authentication and security specifications for technology and design teams, and partners with risk, compliance, audit and legal on fraud governance. The role is remote-eligible in the continental US but requires four days per week onsite for candidates within 60 miles of a USAA office.

Summary

Manages large information-security projects and programs, conducting advanced threat analysis, vulnerability assessments, and penetration testing, and leading incident-response efforts including forensic investigation and reconstruction. Guides identity and access management and data-protection practices across the enterprise, requiring 7+ years of information-security experience.

Summary

Senior information-security engineering role protecting the confidentiality, integrity, and availability of Segra's fiber network and IT systems, spanning identity/authentication technologies, SIEM administration, and cloud security controls across AWS, Azure, and Office 365. Also covers incident response, PKI/TLS, and compliance with NIST and ISO frameworks, requiring 10+ years of experience. Hybrid, three days per week onsite.

Summary

Engineering leadership over the enterprise data protection platform, running a geographically distributed engineering organization responsible for more than 500 petabytes of protected data across on-premises, hybrid and public cloud environments. The mandate is modernization: moving off traditional backup architectures onto policy-driven platforms with immutable storage, cyber vaulting, ransomware resilience and cloud-integrated recovery services spanning GCP, Azure and AWS. Infrastructure as code, API-driven automation and self-service consumption are the stated engineering levers, alongside resiliency assessments and recovery-readiness programs measured against recovery point and recovery time objectives, in partnership with Cybersecurity, Architecture, Risk and CIO teams.

Summary

Individual contributor technical lead on the Encryption, Tokenization and Key Management team, designing, deploying and operationally maintaining cryptographic products and services including hardware security modules and security appliances across physical, virtual and containerized environments. Emphasis falls on automating product builds, operational maintenance, and customer integration and onboarding, plus proof-of-concept evaluation of new cryptographic technology and influencing vendor roadmaps. The role also supports audits and compliance evidence gathering, incident technical investigation and root cause analysis, and design decisions that account for blast radius and business resiliency during service changes or denial-of-service events.

Summary

Senior threat hunting and incident response inside a bank's security program — leading technical analysis of emerging threats, building and testing detection rules with engineering teams, mapping findings to MITRE ATT&CK, and automating hunts, with Jupyter notebooks and AI tooling featuring prominently. Also covers forensic and eDiscovery investigation support and training security operations staff.

Summary

Senior hands-on security engineering for AI-enabled applications, agentic workloads, model integrations and AI delivery pipelines across the full software and AI lifecycle in a regulated bank. The engineer leads threat modeling across prompts, context windows, retrieval flows, tools, APIs, permissions, memory, model access and runtime execution paths, then leads implementation of the matching guardrails, output filtering, identity and permission controls, detection content, monitoring and release-readiness gates in CI/CD and LLMOps workflows. Scope extends to AI incident investigation and root-cause analysis, plus maintaining control documentation, runbooks, engineering patterns and validation evidence.

Summary

An application security engineering role at U.S. Bank focused on CI/CD-integrated security tooling. It configures SAST, SCA, and DAST capabilities, triages vulnerabilities in ServiceNow, maintains Java automation, supports Docker/cloud environments, and contributes to AI application-security initiatives.

Summary

This is a coordination seat inside the Truist offensive security program rather than a hands-on penetration testing role. The work is scheduling and assigning pentest engagements to security testers, running intake and office hours, speaking at recurring routines in front of audiences of up to 150 people, entering vulnerability data, compiling metrics, and collecting audit evidence for regulatory, internal-policy and industry-standard compliance, plus meeting with application teams to walk them through findings and maintaining application security standards, policies and procedures. Some monitoring of enterprise cybersecurity systems with first-line response is included, and occasional on-call time on nights or weekends is expected.

Summary

Hands-on security engineering for enterprise AI systems within the Forge AI Security and Governance model, implementing guardrails, prompt-injection defenses, input validation and output filtering, secure tool-use boundaries, access controls, logging and detection content for AI-enabled applications, agents and prompt-driven workflow automations. Daily work spans control implementation and validation, adversarial and misuse-oriented test preparation, monitoring and alerting logic for suspicious prompt patterns and anomalous tool invocation, deployment-readiness gating, and incident investigation when AI controls fail in production. Attendance in the Charlotte office is required five days a week.

Summary

A full stack application engineering job inside Truist banking technology: Java, J2EE, Spring Boot and microservices on the back end with TypeScript, Node.js and React on the front, running on OpenShift, Kubernetes and AWS. The security engineer half of the title refers to building and maintaining security controls and monitoring and orchestrating calls to REST, SOAP and encrypted messaging services inside multi stage fraud detection flows, not a dedicated security operations post. The posting is explicit that the role is on site in the listed hubs, and it includes leading moderately complex projects and possibly overseeing a small team.

Summary

A bank cybersecurity analyst role centered on analyzing, identifying and documenting cybersecurity information and risk, working in support of several other internal security teams rather than owning a single system. The posting points toward vulnerability assessment, governance-risk-and-compliance and audit process work with security operations center exposure, and names Security+ as its certification signal.

Summary

A bank cybersecurity analyst role centered on analyzing, identifying and documenting cybersecurity information and risk, working in support of several other internal security teams rather than owning a single system. The posting points toward vulnerability assessment, governance-risk-and-compliance and audit process work with security operations center exposure, and names Security+ as its certification signal.

Summary

A bank cybersecurity analyst role centered on analyzing, identifying and documenting cybersecurity information and risk, working in support of several other internal security teams rather than owning a single system. The posting points toward vulnerability assessment, governance-risk-and-compliance and audit process work with security operations center exposure, and names Security+ as its certification signal.

Summary

A platform engineering role assisting with the design and development of fully autonomous CI/CD pipelines that carry cloud deployments, including automation of the underlying infrastructure, services, and application build and deployment. The named ground covers Terraform, Ansible playbooks, Jenkins, Git and Python across Kubernetes, AKS and OpenShift on both Azure and AWS, with information security and chaos engineering listed alongside the delivery tooling.

Summary

A cloud platform role designing and developing fully autonomous CI/CD pipelines for cloud deployments, covering automation of infrastructure, services, and application build and deployment. The named ground covers Ansible, Terraform, Jenkins and Python across Kubernetes and OpenShift on AWS and Azure, with infrastructure as code, configuration management, change management and chaos engineering among the listed practices.

Summary

Sits inside the Regions cyber security organization, covering security for cloud applications, infrastructure and platform technologies at the bank. The posted description is brief, but the listed skills point to hands-on vulnerability assessment and penetration testing work with Nessus, nmap and Burp Suite, plus scripting and OWASP practices, with CompTIA Security+ named among the qualifications.

Summary

Technical security operations defending the university's digital infrastructure, covering SIEM improvement, tuning and creating analytic detection policies, reviewing logs and real-time alerts, supporting vulnerability management and building dashboards, and serving as an incident response team member during active attacks. The position is explicitly charged with leading the integration of AI into the university security toolset: machine-learning behavior analytics for threat hunting, AI-assisted agents that triage alerts to cut alert fatigue, SOAR maintenance with the security engineers, and scripted AI attack simulations to test existing defenses.

Summary

Offensive security leadership role at a health insurer, driving development of AI-driven offensive tooling and autonomous agents that extend penetration testing and red team operations. The posting pairs conventional red team and threat simulation work with AI security testing, listing prompt injection and jailbreak testing, adversarial testing of LLM applications, MITRE ATLAS, PyRIT and Garak, plus EDR and XDR evasion testing and malware development. It expects production-grade software engineering in Python, cloud fluency across AWS, GCP and Azure, and mentoring plus stakeholder management responsibilities.

Summary

Runs Wells Fargo's cybersecurity wargame program: designing and facilitating business-focused tabletop exercises, grounding scenarios in current threat intelligence and organizational risk, and producing rulebooks, scenario injects, and technical playbooks. The work is exercise delivery and security education rather than hands-on defensive engineering, covering environment setup, participant scheduling, pre-exercise briefings, post-exercise debriefs, and targeted training, with the analyst as primary contact for participants and internal cybersecurity teams. The schedule is hybrid and the position is not eligible for visa sponsorship; Security Plus or similar certification is listed as a plus.

Summary

Enterprise architecture role owning target-state architecture and modernization strategy for client identity and access management, fraud, and anti-money-laundering systems at a large bank. The work is strategy and governance rather than implementation: evaluating architectural alternatives on cost, value, scalability, and risk, setting and enforcing enterprise technology standards, and coordinating with CIAM, fraud, AML, cloud platform, and application development teams. It also carries a mentorship and evangelism component across the bank architecture community.

Summary

Hands-on security engineering for enterprise AI systems, covering guardrails, prompt-injection defenses, content and output filtering, secure tool-use boundaries, logging, monitoring logic, and detection content for AI-enabled applications and agents in a regulated environment. The stack leans heavily on infrastructure as code with Terraform and CloudFormation, GitLab CI/CD, Python automation, and cloud security tooling across AWS, Azure, ECS, EKS, and Kubernetes workloads. The posting states the role is five days a week in the Atlanta or Charlotte office.

Summary

AI security governance and posture management rather than build work: conducting security reviews and risk assessments of enterprise AI use cases and architectures, investigating shadow AI activity through cloud security and endpoint protection platforms, and validating controls against internal standards. The team is still establishing these processes, so the posting emphasizes operating in ambiguity and partnering across security engineering, architecture, risk, compliance, legal, and business teams. Prior AI security posture management experience is not required, but a background in cybersecurity, cloud security, security operations, or technology governance is, and the role is five days a week in Charlotte or Atlanta.

Summary

Application security consulting role focused on making vulnerability data actionable: interpreting findings across SAST, SCA, secrets, API, container, and IaC scanning, performing control testing and validation with evidence collection, and coaching application teams through remediation and vulnerability burndown. It also carries a program-metrics and standards component, producing burndown, aging, trend, and adoption reporting, refining AppSec intake workflows, and working with DevOps teams to embed security in CI/CD. The posting requires a minimum of seven years in information security and states the role is five days a week in the Atlanta, Charlotte, or Raleigh hub.

Summary

DevSecOps engineering role embedding quality and security checks into CI/CD release pipelines around Amazon Connect, partnering with engineering and IT staff to orchestrate code builds, automated testing and security analyses. Works across AWS and Azure cloud infrastructure using tools including Jenkins, Ansible, Terraform and ServiceNow.

Summary

Backend engineering role modernizing a health insurer's internal enterprise security platform, building scalable services and improving deployment automation rather than performing security analysis. The listed stack is .NET and C# on Azure with Terraform, GitHub Actions and Azure DevOps, PostgreSQL and MongoDB, JFrog Artifactory, HashiCorp Vault and Splunk, plus application security testing tools including Checkmarx, AppScan and Cycode. It is framed as a combined senior backend developer and DevSecOps position.

Summary

A hands-on security engineering role embedded with Platform Engineering, remediating vulnerabilities in cloud infrastructure, Kubernetes clusters, container images and CI/CD pipelines by writing code, submitting pull requests and validating the fixes. The work also covers triaging findings from scanning tools such as Wiz, Snyk and GHAS, hardening images and cluster configurations to CIS benchmarks and least-privilege patterns, and embedding scanning, secrets detection, infrastructure-as-code policy checks and deployment gates into pipelines. Supporting incident response for infrastructure, container or pipeline compromise is part of the role.

Summary

A hands-on manager leading the security operations center and the unified vulnerability management program at an electric vehicle company. The remit covers day-to-day security monitoring, threat detection, incident response and security tool administration, running SIEM, endpoint detection and response, cloud security monitoring and threat intelligence platforms. It also owns the playbooks and process for containment, eradication and recovery, coordinating response with technology, legal, compliance, privacy, human resources and business stakeholders.

Summary

Protects operational technology environments, specifically utility substation networks, through governance and validation of network defense controls rather than hands-on implementation, with separation of duties deliberately built in. The analyst reviews and approves firewall rule sets and access control lists against least privilege and segmentation requirements, participates in CIP-010 baseline and change validation, performs control testing and evidence generation for internal and external audits, and contributes to incident response and root cause analysis. The controlling frameworks are NERC CIP, TSA security directives, SOX, and PCI-DSS, and the posting explicitly welcomes network engineering or OT networking backgrounds moving into cybersecurity.

Summary

A lead information security engineering role on the DLP Data Integration and Automation team within Cybersecurity Defense, designing and automating data-loss-prevention controls that classify and protect sensitive enterprise data. It builds automation in Python and Bash to onboard and transform HR, customer, financial, and regulatory data feeds into DLP platforms, and provides security consulting, risk assessments, and mentoring. Requires 5-plus years of information security engineering experience.

Summary

A senior security engineer at Truist who owns certificate lifecycle automation end-to-end — extending existing Venafi issuance/renewal automation into the deployment and validation layers across servers, load balancers (F5), web servers (IIS, Apache, NGINX), and application environments. The role is explicitly focused on the 'last mile' of certificate installation rather than PKI issuance, and contributes to enterprise crypto agility and quantum-safe readiness initiatives. Ansible, scripting, and API automation expertise required; Charlotte, Raleigh-Durham, or Atlanta preferred.

Summary

An identity and access management engineering role owning the technical architecture, platform standards and roadmap for privileged access management at AIG, built on Idira/CyberArk vaulting. Day-to-day work is configuring vaults, safes, platforms, connectors, workflows and password policies, and architecting integrations with Active Directory and Entra ID, SIEM and ITDR platforms, cloud IAM across AWS, Azure and GCP, ServiceNow and CI/CD pipelines. The posting asks for 10+ years of PAM-focused experience including building custom connectors, and stresses that audit and regulatory scrutiny demands extreme attention to detail.

Summary

A hands-on incident response seat on the Detect and Response team at AIG, investigating suspected intrusions and cyber-attacks affecting the global business units and technology infrastructure. The work mixes alert triage, log, network flow and threat intelligence analysis, root cause analysis to close exposure gaps, and writing incident reports plus playbooks and knowledge articles for both technical and management audiences. The team runs a kill chain aligned operational model, so the role touches the full attack lifecycle rather than a single stage.

Summary

An identity and access security engineering role that provides technical direction and consultation to other engineers on the design and implementation of security solutions. The named ground is authentication and federation protocol work - OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, TLS, and multi-factor authentication - extended with shell and JavaScript scripting, automation, and CI/CD pipeline integration. Performance testing, capacity planning, mentoring, and project management are also listed as part of the lead scope.

Summary

A DevSecOps role that partners with other engineers and information technology staff to orchestrate code builds, quality and security analyses, deployments and automated testing through CI/CD release candidacy pipelines. The named ground covers Jenkins, Ansible, Terraform, Git, Python and YAML across Kubernetes and AKS on AWS and Azure, framed as platform engineering and cloud-native delivery.

Summary

Principal technical architect for Privileged Access Management within Wells Fargo's Cybersecurity organization, owning strategy, architecture, and engineering standards for privileged credentials across both human and non-human identities. The work centers on CyberArk (Enterprise Password Vault, Privileged Session Manager, credential providers) plus integration with HashiCorp Vault, Microsoft Entra ID, ServiceNow, and Saviynt, with a focus on eliminating standing privilege and moving to just-in-time access. It is a senior expert-advisor role that shapes PAM strategy for executive leadership.

Summary

Engineering-management role leading a Privileged Access Management organization at the bank, responsible for credential vaulting, secrets management, session control, and least-privilege enforcement for both human and non-human identities. It drives modernization toward automated, policy-driven, API-integrated PAM aligned with Zero Trust, including DevSecOps, CI/CD secrets delivery, ephemeral credentials, and infrastructure-as-code, with CyberArk among the platforms. The role blends security engineering with software automation and team leadership.

Summary

Lead cyber threat intelligence analyst at a bank, conducting hands-on analysis of threat actors, campaigns, malware, phishing, and financial-sector threats and producing tactical, operational, and strategic intelligence products for security teams and leadership. Maps activity to MITRE ATT&CK and supports threat hunting, detection engineering, incident response, and vulnerability management as a senior individual contributor. Requires working from a US Bank location three or more days per week; no visa sponsorship.

Summary

A Manual Ethical Hacker role in Bank of America's Cyber Security Assurance Offensive Security group, performing hands-on application security assessments and penetration testing of the bank's technologies and controls. Work involves incorporating threat-actor tactics into offensive testing, identifying vulnerabilities and misconfigurations, and reporting associated risk. An intermediate-level pentesting role in a large enterprise environment.

Summary

A cloud security engineering role leading the deployment and operation of cloud security tooling across a multi-cloud enterprise, including Wiz, AWS GuardDuty, Security Hub, Inspector, and Microsoft Defender. Work covers CSPM/CWPP, IAM and KMS hardening, threat detection and incident response, and embedding security guardrails into CI/CD via Terraform. Security certifications such as CCSP and AWS Security Specialty are preferred.

Summary

This is a security-engineering role focused on container and host-based network micro-segmentation (Illumio), including hands-on implementation with application teams, maintaining security tooling, and participating in day-to-day Cyber Security Operations Center monitoring and incident response. It is a security-operations and network-segmentation specialty rather than software development. The employer states it will not sponsor work visas, so applicants must already be authorized to work in the US.

Summary

A senior offensive security role, a full-stack penetration tester within Bank of America's Cyber Security Assurance Division, focused on hunting and proving high-risk, exploitable vulnerabilities across the bank's global technology environment. It is a highly technical, hands-on role using the full penetration-testing lifecycle (reconnaissance, weaponization, delivery, exploitation) and adapting methods to emerging threats. The work is collaborative, partnering with security teams, CIO clients, and lines of business.

Summary

A Senior Manual Ethical Hacker role leading offensive security and penetration testing within Bank of America's Cyber Security Assurance group. Performs dynamic and static application security assessments across web UI, APIs, mobile, and cloud, develops proof-of-concept exploits and chained attacks, and mentors junior assessors. A senior hands-on pentesting position.

Summary

DevSecOps engineer who owns Bankrate's security posture end to end, building the engineering side of a SOC 2 Type 2 compliance program including policy-as-code and automated evidence generation. Owns cloud security posture management, runtime security tooling, and CI/CD security gates (SAST/SCA, secret scanning, SBOM, container/IaC scanning), and builds AI-assisted auto-remediation pipelines; remote or hybrid with Eastern Standard Time hours required.

Summary

A senior information security engineering role at Lowe's designing and implementing security tools and services and leading security assessments and monitoring. Focus areas include identity and access management, digital certificate management, and network security -- firewalls, VPN, zero trust network access, network access control, and microsegmentation -- across Google Cloud, Azure, and Oracle Cloud, plus IoT security. It relies on scripting and infrastructure-as-code rather than application development.

Summary

Though titled a security analyst, this is a Red Team Operator role on Lowe's Offensive Security team, planning and executing authorized offensive operations and adversary emulation to test the company's defenses. Work includes C2 infrastructure, Active Directory and cloud/endpoint attack techniques, phishing simulation, and detection-engineering feedback. On-site at the Charlotte technology hub.

Summary

A hands-on information-security engineering role that leads the design and implementation of security solutions and monitors security systems, with identity and access management and secure coding called out as focus areas, plus mentoring of junior engineers. It sits within a large retail-technology organization and spans scripting, cloud, and DevOps security.

Summary

A cybersecurity engineer role designing and implementing security capabilities across the software development lifecycle — threat modeling, security testing, and penetration testing — plus configuring security technologies in production, leading incident response and basic forensics for in-scope services, and mentoring other security engineers. Requires a bachelor's degree or equivalent experience.

Summary

This is a cybersecurity architecture and advisory role reporting to the bank's Cybersecurity Architect Senior Manager, split roughly 40% security architecture, 50% technical leadership, and 10% research and development, designing security solutions for third-party/vendor relationships and setting security direction alongside product and solution architects. It requires 2+ years of cybersecurity architecture experience plus 6+ years each of information-security and technology-delivery experience.

Summary

A senior offensive-security role leading threat-emulation and adversarial-simulation exercises across enterprise networks, applications, cloud, and physical-security domains. Develops custom tools, payloads, and exploits, leads purple-team engagements, and mentors junior operators; expertise with C2 frameworks (Cobalt Strike, Metasploit, Mythic, Sliver) and EDR/XDR evasion expected.

Summary

A senior enterprise security-architecture leadership role defining and evolving the organization-wide security architecture and aligning security strategy with business priorities, in partnership with a global security team. It demands deep expertise in enterprise-architecture and security frameworks (TOGAF, NIST, ISO, SABSA, Zero Trust), cloud security, IAM, and risk/compliance, plus 10+ years including 5+ in cybersecurity architecture. Hybrid schedule in Charlotte/Atlanta/Phoenix, with the first 90 days required fully onsite.

Summary

Leading offensive security operations against a major bank's AI/ML systems — adversarial testing of LLMs and model pipelines (prompt injection, data poisoning, model inversion, jailbreaks) alongside traditional red teaming, plus building custom tooling and mentoring red team engineers. A senior technical-authority role requiring 8+ years of relevant experience.

Summary

A management role over identity and access management at a regional bank, leading a mixed team of engineers, analysts, and administrators who implement IAM practices across the enterprise and keep operations running. The stated toolset leans toward privileged access and secrets management with CyberArk and HashiCorp Vault, alongside DevSecOps work such as CI/CD pipelines and infrastructure as code.

Summary

Security engineering for foundational Microsoft identity infrastructure at a bank — designing and operating Active Directory Domain Services, ADFS, certificate services, DNS/DHCP, Entra Connect, MIM, and related services, plus Cisco ISE and the Symantec and Quest product suites. Office-centric five days a week (Atlanta, Charlotte, Raleigh, or Wilson, NC) with no visa sponsorship or immigration support. For an infrastructure-identity engineer rather than an application security specialist.

Summary

Principal cybersecurity advisor (AI security) role at Optiv, operating as a client-facing, quota-carrying pre-sales advisor within a Center of Excellence: designing AI-focused security solutions, identifying AI security concerns, driving services pipeline and cross-sell, and advising client executives on AI security strategy and roadmaps. Fully remote within the continental US.

Summary

A security architect opening on the business enablement side at Regions in Nashville. The posting as captured carries no substantive role description beyond the title, so scope, stack, and requirements are unspecified — candidates would need the original listing for specifics.

Summary

A security governance and compliance role at a public university, working with the CISO to align defenses with the evolving threat landscape and keep research computing compliant with frameworks including NIST 800-171, CMMC, ISO 27001/2, FISMA, HIPAA, and GDPR. Core work includes gap analyses, risk and vendor security assessments, committee leadership, security awareness, and driving the Secure Research Environment that protects sensitive research data such as CUI. Best for a compliance-oriented security professional who prefers policy, assessment, and stakeholder work over hands-on engineering.

Summary

A lead information-security engineering role at Lowe's providing technical direction to other engineers on the design and implementation of security solutions, with an emphasis on AI security practices, security assessments, cloud, and DevOps, plus custom code/scripting. It combines hands-on cybersecurity engineering with team leadership and mentoring; Charlotte-based.

Summary

A senior intelligence lead analyst role building and maturing Citi's proactive threat hunting and cyber Open Source Intelligence (OSINT) capabilities, running hypothesis-driven hunts and operationalizing threat intelligence into detection engineering. It requires 6 to 10 years of experience and deep knowledge of adversary TTPs, the cyber threat-intelligence lifecycle, and adversary emulation targeting the financial sector.

Summary

An Identity and Access Management engineer at Regions Bank, designing, developing and integrating IAM systems and solutions with tools like HashiCorp Vault, CyberArk and Kubernetes. It blends software engineering with security, sitting at the IAM intersection rather than general app development.

Summary

An enterprise security architecture role owning target-state design and governance for data protection and workplace security, spanning data security, enterprise data platforms such as Snowflake, email security and endpoint protection. It is a strategy, standards and governance seat rather than a hands-on build role, partnering across security engineering, infrastructure, workplace technology, data platform, risk and compliance organizations. The posting states that Ally will not sponsor a new applicant for employment authorization for this position.

Summary

Security engineering across the software development lifecycle at a bank — threat modeling, security testing, and penetration testing, integrating and configuring security technologies in production, maintaining baselines and guardrails, and leading incident-response execution for in-scope services. The posting is framed as a general duty description without a single platform focus, and includes mentoring and leading workstreams. For a broad, senior-leaning security engineer rather than a niche specialist.

Summary

A senior individual-contributor seat on Bank of America's Global Information Security team applying agentic AI, custom ML models, and LLMs to cyber defense — AI-powered threat hunting, anomaly detection, and automated incident response — while also defending the bank's own AI usage against AI-equipped attackers. No people management: the job is technical innovation, prototyping, and advising leadership, within the bank's in-office work culture.

Summary

A security automation engineer role at Truist focused on identifying automation opportunities in cybersecurity incident management workflows and building solutions using scripting, APIs, orchestration tools, and Microsoft 365 platforms. The role also involves active participation in cyber incident coordination — triaging, tracking, and facilitating stakeholder communication through the incident lifecycle. Requires a minimum of 3 years in security engineering; posted in Charlotte, Raleigh-Durham, or Atlanta with hybrid expectations.

Summary

An identity and access management specialist role centered on access provisioning: designing and running least-privilege provisioning across Active Directory, Azure, AWS, mainframe, and database platforms inside Bank of America's Global Information Security organization. It is hands-on technical leadership rather than pure governance, with the stated mission of eliminating excessive permissions and integrating IAM processes across cloud services. The bank notes an in-office work culture.

Summary

A cybersecurity controls-assurance management role, partnering across technology and operations to ensure security controls are designed, implemented, and monitored to strengthen risk management and compliance. The brief excerpt emphasizes control testing, control frameworks, and continuous or automated testing. Multiple Southeast U.S. locations.

Summary

A senior security engineering role on Truist's Proxy Team, evolving the enterprise secure access platform and modernizing internet access and traffic control capabilities. The work emphasizes consistent policy enforcement across encrypted, non-HTTP, and real-time traffic, plus automation to improve visibility and posture. This is an onsite, office-centric role 5 days a week in a Truist core location in Charlotte, Raleigh, or Atlanta.

Summary

A principal cybersecurity architecture and engineering role leading the design and implementation of enterprise security solutions across major cloud providers (AWS, Azure, GCP, OCI), including network and micro-segmentation, Zero Trust, data protection such as encryption, tokenization, and DLP, and endpoint detection and response. The role also leads incident response and digital analysis and applies frameworks such as NIST, ISO 27001/62443, CIS Controls, and MITRE ATT&CK. Remote-eligible, though the first 90 days require fully on-site work; certifications such as CISSP or CISM are valued.

Summary

A senior security engineer role on Truist's Proxy team evolving the enterprise secure-access platform, modernizing internet-access and traffic-control capabilities and enforcing consistent policy across encrypted and real-time traffic with automation. The position is onsite five days a week at a Truist core location in Charlotte, Raleigh, or Atlanta. A fit for a network/proxy security engineer who can work fully on-site.

Summary

A lab-and-facility manager role at UNC Charlotte, providing operational leadership for its Cybersecurity, Digital Engineering & AI Innovation Lab at the North Tryon Tech Hub — a facility-operations and management role rather than a software-engineering one. About half the job is building and lab operations (ensuring 24/7 readiness for sensitive data, AI workloads, and digital-engineering simulations, coordinating power, cooling, and networking, and managing access and inventory), with the rest spanning technical innovation support (deploying MBSE tools and supporting HPC interfaces and digital-twin demonstrations), planning, and administrative and fiscal management. A fit for someone who can run sophisticated research environments and serve as the technical liaison between the university and industry partners; on-site in Charlotte, NC.

Summary

A SIEM/SOAR production support specialist at Bank of America's security operations team, responsible for front-line triage of production incidents across SIEM and SOAR platforms — managing bridge lines, coordinating root cause analysis, maintaining documentation, and operating under tight SLAs. The role requires 5+ years of hands-on SIEM/SOAR expertise and is framed as a senior individual contributor who leads triage efforts and serves as an application subject matter expert. In-office attendance required per BofA policy.

Summary

An enterprise security architecture role covering customer-facing and employee-facing digital platforms and their enabling services, setting the architecture, standards and governance that keep those systems secure by design and compliant with regulatory requirements. It includes shaping the roadmap for foundational security capabilities across the digital portfolio, with secure adoption of generative AI named explicitly. The posting states that Ally will not sponsor a new applicant for employment authorization for this position.

Summary

A senior cybersecurity engineer at a bank focused specifically on internet proxy and web-filtering operations, integrating automation, application and monitoring systems. The role collaborates with the Cybersecurity Operations Center on security-automation use cases and leans on knowledge of SIEM, SOAR/orchestration, and remote browser isolation or enterprise browsers. It requires 3+ years in proxy/filtering tools, is office-based, does not sponsor visas, and lists a range of 57K to 113K.

Summary

A management role at Regions leading the development and implementation of enterprise and cyber-security architecture plans grounded in business requirements and technology strategy, drawing on broad experience across technical, security, and solution architecture. A security-architecture leadership role at a US bank (Hoover, AL).

Summary

Management-level architecture role at a regional bank spanning enterprise architecture and cyber security architecture. The stated bar is eight years of experience across two or more technology disciplines in a heterogeneous environment, such as technical architecture, security architecture, solution architecture or network management. Named focus areas include DevSecOps, virtualization and IT security architecture.

Summary

A contract GRC analyst position within a CISO organization, leading security risk assessments for internal systems, vendors, and business processes and maintaining the technology/cybersecurity risk register. The work uses frameworks like NIST SP 800-30 and ISO 27005, involves policy governance and translating technical risk into business recommendations, and is explicitly a contract engagement.

Summary

A hands-on security-engineering leadership role at Chatham Financial, building and scaling the security function for its cloud-native financial-risk SaaS platform. As a player-coach you would lead a small, growing team while staying deeply technical — designing security controls across Azure infrastructure, containerized environments, and .NET applications, integrating security into CI/CD pipelines, managing third-party penetration testing, and maturing SOC 2-aligned controls and cloud posture management, including emerging AI/LLM risks. Best for an engineering-first security leader who wants to build and own a security program rather than just manage one; based in Kennett Square, Denver, or Charlotte.

Summary

A platform-engineering role owning Bank of America's SIEM ecosystem — Splunk Enterprise/Cloud and Microsoft Sentinel plus the associated data pipelines — engineering, monitoring, and hardening the platforms for data quality, resiliency, and analytic reliability. It is security-data platform engineering plus a SIEM subject-matter-expert and mentor role across the Cyber Security Technology teams. Charlotte is one of several office locations.

Summary

A data-protection cybersecurity role at insurer AIG, designing, testing and implementing database security controls that safeguard the integrity of information assets. Core work includes running a database activity monitoring (DAM) platform for audit compliance, hardening database configurations, users and roles, and acting as a database-security subject-matter expert to risk, compliance and development teams.

Summary

A cloud-security principal engineer role on Ally Financial's Information Protection and Risk Management team, project-focused on designing and implementing both security technologies and governance processes for the bank's SaaS platforms: building technical controls and tools, defining standards, and maturing the SaaS security service. There is potential to transition into a longer-term engagement; Charlotte.

Summary

A cloud security engineering role centered on securing Google Cloud environments (identity, network, logging, encryption, and boundary controls) and supporting day-to-day SecOps SIEM operations such as log onboarding, detection content, and investigation workflows. It partners with cloud engineering teams to implement guardrails and improve security posture rather than build application software. Documentation, runbooks, and vulnerability triage are part of the role.

Summary

A senior security engineering role owning the design and continuous improvement of security controls across Azure and Microsoft 365, including identity protection, workload and network security, email and collaboration protection, data protection, and monitoring. It leads implementation of Microsoft security platforms such as Defender, Purview, Entra ID, and Intune, and acts as a senior escalation point for cloud and identity security issues. This is a security-focused role rather than software development, and it is hybrid out of Charlotte or York, PA.

Summary

A senior cloud security engineering role designing secure-by-default GCP foundations (landing zones, policy guardrails, identity, network segmentation, encryption, and logging) using automation and infrastructure as code. It also owns the SecOps SIEM (Google Security Operations / Chronicle), including log onboarding, detection engineering, tuning, and operational reporting. This is a security engineering position rather than software development, hybrid out of Charlotte or York, PA.

Summary

Second-line technology risk oversight rather than hands-on security engineering: assessing technology risk, evaluating control effectiveness, and providing independent challenge to software development and delivery teams in business-aligned IT organizations. The scope covers modern and legacy environments, architecture and delivery practices, emerging threat monitoring, and contributing to the operating model of the risk function itself. Five or more years in technology risk, IT audit, cybersecurity risk, or operational risk is required, certifications such as CISA, CRISC, CISSP, or CISM are preferred, the model is hybrid, and no visa sponsorship is offered.