clinical pharmacist - prior authorization/oncology (bcop required)

case manager

case manager, enterprise threat response Jobs in Washington

case manager, enterprise threat response

access control specialist Jobs in Washington

access control specialist

activity security representative ii Jobs in Washington

activity security representative ii

associate senior enterprise architect Jobs in Washington

associate senior enterprise architect

case manager enterprise threat response

Google

<div>
 Note: By applying to this position you will have an opportunity to share your preferred working location from the following:
 <strong>
  Washington D.C., DC, USA; Reston, VA, USA
 </strong>
 .
 <strong>
  Minimum qualifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree or equivalent practical experience.
  </li>
  <li>
   15 years of experience in security and risk management in a corporate or government environment.
  </li>
  <li>
   10 years of experience in managing sensitive material.
  </li>
  <li>
   10 years of experience with law enforcement or other agencies and managing application of corporate security strategies and policies, and external security-related laws and regulations.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred qualifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience working with cross-functional teams.
  </li>
  <li>
   Knowledge of threat assessment processes and techniques relevant to online threat actors.
  </li>
  <li>
   Familiarity with Google workspace applications.
  </li>
  <li>
   Familiarity with security interviewing and consultation.
  </li>
  <li>
   Understanding of Google business operations and security risks associated with user-generated content.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  About The Job
  <br/>
  <br/>
 </strong>
 As a Case Manager, you will be responsible for mitigating external threats to Google. You will build and maintain strong relationships with local, national and international law enforcement to ensure timely action and updates on escalated threats. You will be responsible for updating GSRS and Google leadership on the status of priority cases and for maintaining case documentation. Our team promotes a culture of compliance where security and resiliency are consistently integrated into every facet of Google infrastructure and we provide business and security leaders with the information they need to make informed decisions. You will build and leverage relationships across Google and GSRS, ensuring clear lines of communication and a comprehensive approach to security and resilience. In this role, you'll report to the Enterprise Threat Response (ETR) Global lead.
 <br/>
 <br/>
 From keeping Googlers safe and secure to managing disruptive events, the ability to anticipate, deter, detect, and act are the pillars of Google&rsquo;s Global Security and Resilience Services (GSRS) team. As a member of GSRS you will help develop a culture where safety, security and resiliency are integrated into every facet of Google, including the creative process. You will help us continually identify, evaluate and monitor enterprise risks that could affect business activities and provide business leaders the information they need to make critical decisions. You'll collaborate with cross-functional teams to create innovative strategies and develop programs that drive sustainable effectiveness.
 <br/>
 <br/>
 The US base salary range for this full-time position is $158,000-$228,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.
 <br/>
 <br/>
 Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google .
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Work with GSRS cross functional teams to ensure risk mitigation strategies are actioned and monitored to close-out.
  </li>
  <li>
   Develop internal and external liaison contacts and partnerships to support all threat resolution processes.
  </li>
  <li>
   Provide support, guidance and subject matter expertise on security risk management to Google leaders and employees.
  </li>
  <li>
   Support Enterprise Threat Management (ETM) leadership with project management and delivery of key initiatives.
  </li>
  <li>
   Lead the design, development, and delivery of physical security plans related to risk mitigation strategies. Conduct audits of internal threat mitigation processes and investigations related to external threats impacting campuses and employees.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .
</div>


Case Manager, Enterprise Threat Response

Howard University Hospital

<div><h2 class="jobSectionHeader"><b>Senior Cybersecurity Engineer</b></h2><h3 class="jobSectionHeader"><b>
Role Summary</b></h3><p>
The Senior Cybersecurity Engineer is responsible for protecting the information systems, digital assets, and technology infrastructure of Howard University Hospital. This position designs, implements, and maintains advanced cybersecurity solutions that safeguard patient data, clinical systems, and enterprise applications.</p><p>
Working across on-premises, hybrid, and cloud environments, the Senior Cybersecurity Engineer helps ensure the hospital&rsquo;s technology environment remains secure, compliant, and resilient against emerging threats. This role provides both hands-on technical expertise and strategic leadership in support of cybersecurity maturity, incident response, risk management, and continuous improvement of security controls.</p><h3 class="jobSectionHeader"><b>
What You&rsquo;ll Do</b></h3><p><b>
Security Operations &amp; Incident Response</b></p><ul><li>
Monitor, analyze, and respond to security alerts, incidents, and anomalies across hospital systems.</li><li>
Conduct vulnerability assessments, penetration testing, and threat-hunting activities to identify and mitigate risks.</li><li>
Investigate and document security incidents, perform root cause analysis, and recommend remediation actions.</li><li>
Utilize SIEM, EDR, and IDS/IPS platforms such as CrowdStrike and Microsoft Sentinel to strengthen continuous monitoring.</li></ul><p><b>
Security Engineering &amp; Architecture</b></p><ul><li>
Design, implement, and manage enterprise cybersecurity controls, including firewalls, NAC, DLP, CASB, and endpoint protection systems.</li><li>
Support secure configuration management using CIS Benchmarks and STIGs.</li><li>
Implement and manage identity and access management, multifactor authentication, and privileged access controls.</li><li>
Integrate cybersecurity practices into DevOps processes and CI/CD pipelines.</li><li>
Support the adoption and enforcement of Zero Trust Architecture principles across hybrid and cloud environments.</li></ul><p><b>
Governance, Risk, and Compliance</b></p><ul><li>
Ensure compliance with cybersecurity frameworks and regulatory requirements, including HIPAA, NIST 800-53, ISO/IEC 27001, PCI DSS, and GDPR.</li><li>
Contribute to the development and maintenance of security policies, procedures, and documentation.</li><li>
Support internal and external security audits, risk assessments, and compliance reviews.</li><li>
Participate in disaster recovery and business continuity planning activities.</li></ul><p><b>
Collaboration, Training, and Awareness</b></p><ul><li>
Work collaboratively with IT, Compliance, and Clinical Operations to embed security throughout technology operations.</li><li>
Provide mentorship and technical leadership to IT personnel and cybersecurity staff.</li><li>
Develop and deliver user training on secure computing, phishing prevention, and data protection best practices.</li><li>
Communicate complex technical concepts to diverse audiences, promoting security awareness and shared accountability.</li></ul><h3 class="jobSectionHeader"><b>
Required Qualifications</b></h3><p><b>
Education</b></p><ul><li>
Bachelor&rsquo;s degree in Computer Science, Information Technology, Cybersecurity, or a related field required.</li><li>
Master&rsquo;s degree in Business Administration, Cybersecurity, or related discipline preferred.</li></ul><p><b>
Experience</b></p><ul><li>
Minimum 7&ndash;10 years of progressive experience in information security, with at least 5 years in a security engineering role.</li><li>
Demonstrated experience securing hybrid infrastructures, including on-premises systems and cloud environments such as Azure, AWS, or GCP.</li><li>
Proven expertise with enterprise tools such as Microsoft Defender Suite, Cisco ISE, CrowdStrike Falcon, and Azure Sentinel.</li><li>
Proficiency in scripting languages such as PowerShell or Python for automation and threat analysis.</li><li>
Strong background in encryption, PKI, IAM, SSO, VPNs, and secure system design.</li><li>
Experience implementing Zero Trust Architecture and DevSecOps practices.</li></ul><p><b>
Preferred Certifications</b></p><ul><li>
CISSP (Certified Information Systems Security Professional)</li><li>
CISM (Certified Information Security Manager)</li><li>
CCSP (Certified Cloud Security Professional)</li><li>
AWS Certified Security &ndash; Specialty</li><li>
Microsoft Certified: Azure Security Engineer Associate</li><li>
SABSA or TOGAF preferred</li></ul><p><b>
Additional Requirements</b></p><ul><li>
Strong written and verbal communication skills.</li><li>
Ability to manage multiple priorities and work effectively in a fast-paced, high-stakes healthcare environment.</li><li>
High level of integrity and commitment to protecting sensitive information and hospital assets.</li></ul><h3 class="jobSectionHeader"><b>
About Howard University Hospital</b></h3><p>
Howard University Hospital is one of the nation&rsquo;s leading academic medical centers and the primary teaching hospital for the Howard University College of Medicine. Located in Washington, DC, the hospital is dedicated to excellence in patient care, education, and research.</p><p>
As a mission-driven healthcare organization, Howard University Hospital relies on secure, resilient, and high-performing technology systems to support patient care, clinical operations, and enterprise services. The Enterprise Technology Services team plays a critical role in advancing that mission.</p><h3 class="jobSectionHeader"><b>
What We Offer</b></h3><ul><li>
Meaningful work in support of a mission-driven academic medical center</li><li>
Opportunities to work with advanced enterprise and cloud-based technologies</li><li>
A collaborative environment focused on innovation, service, and operational excellence</li><li>
Professional growth and development opportunities</li><li>
Comprehensive benefits package</li></ul><h3 class="jobSectionHeader"><b>
Position Details</b></h3><p><b>
Department:</b> Enterprise Technology Services<br>
<b>Reports To:</b> Senior Director of Cybersecurity<br>
<b>Location:</b> Howard University Hospital &ndash; Washington, DC<br>
<b>Status:</b> Full-Time</p><h3 class="jobSectionHeader"><b>
Pay + Schedule</b></h3><p>
Salary will be determined by the Compensation Department based on experience, education, internal equity, and other relevant factors.</p><h3 class="jobSectionHeader"><b>
Compliance Statements</b></h3><p><b>
Culture of Care</b></p><p>
Howard University Hospital supports a Just Culture that promotes accountability, learning, and patient safety.</p><p><b>
Equal Opportunity Employer</b></p><p>
Howard University Hospital is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants and do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity, or any other status protected by applicable law.</p><p><b>
Reasonable Accommodation</b></p><p>
Howard University Hospital is committed to providing reasonable accommodations to qualified individuals with disabilities in accordance with the Americans with Disabilities Act (ADA) and applicable state and local laws. If you require an accommodation during the application or interview process, please contact the Human Resources Department at HUHLA@huhosp.org.</p><p><b>
Pay Transparency</b></p><p>
Salary ranges listed in job postings reflect the expected compensation range for the position and are provided in accordance with applicable pay transparency laws. Final compensation is determined based on experience, education, internal equity, and other relevant factors.</p><p><b>
Disclaimer</b></p><p>
The above statements describe the general nature and level of work performed. They are not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the position.</p></div>

Senior Cyber Security Engineer

Agile Defense

<div><div>At Agile Defense we know that action defines the outcome and new challenges require new solutions. That&rsquo;s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next.</div><div></div><div><br>
Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility&mdash;leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation&rsquo;s vital interests.</div><div></div><div><br>
Requisition #: 1475</div>
<div>Job Title: SOC Lead</div>
<div>Location: 5x/per week 45 L St NE Washington, District of Columbia 20554</div>
<div>Clearance Level: Top Secret Eligible</div>
<div>Required Certification(s):</div>
<ul><li>Microsoft Certified Security Operations Analyst Associate (Must have first day)</li></ul>
<ul><li>CISSP OR CISM (Must obtain within 150 days of start date)</li></ul>
<ul><li>GIAC Incident Response Certification (Must obtain within 150 days of start date)</li></ul>
<div>GIAC Enterprise Incident Response (GEIR)</div>
<div>GIAC Cloud Forensics Responder (GCFR)</div>
<div>GIAC Certified Forensic Analyst (GCFA)</div>
<div>GIAC Network Forensic Analyst (GNFA)</div>
<div>GIAC Certified Incident Handler (GCIH)</div>
<div>GIAC Experienced Forensics Analyst (GX-FA)</div>
<div>GIAC Linux Incident Responder (GLIR)</div>
<div></div>
<div>SUMMARY</div>
<div></div>
<div>We are seeking a SOC Lead for an opportunity to lead and manage all Security Operations Center functions. The SOC Lead will ensure unified service delivery across sub-task areas, provide operational direction and influence executive leadership to align security operations with enterprise objectives.</div>
<div>The SOC Lead role requires deep expertise in SOC management, incident response and hybrid on premises/cloud environments. This is a unique opportunity to shape the growth, development, and culture of an exciting and fast-growing company in the cybersecurity market.</div>
<div></div>
<div>JOB DUTIES AND RESPONSIBILITIES</div>
<div></div>
<ul><li>Manage all SOC operations, ensuring unified and effective service delivery.</li></ul>
<ul><li>Coordinate task execution across sub-task leads to achieve enterprise-level objectives.</li></ul>
<ul><li>Provide strategic and operational direction to SOC teams through subordinate managers.</li></ul>
<ul><li>Oversee the integration and coordination of on-premises and cloud-based SOC capabilities.</li></ul>
<ul><li>Drive continuous improvement in SOC processes to strengthen detection, response and recovery.</li></ul>
<ul><li>Influence organizational practices and approaches to align with cybersecurity priorities.</li></ul>
<ul><li>Communicate effectively with executive leadership and stakeholders on SOC performance and posture.</li></ul>
<ul><li>Ensure SOC operations adhere to the full NIST Cybersecurity Framework: Identify, Protect, Detect, Respond and Recover.</li></ul>
<div></div>
<div>QUALIFICATIONS</div>
<div>Required Certifications</div>
<div></div>
<ul><li>Microsoft Certified Security Operations Analyst Associate (Must have first day)</li></ul>
<ul><li>CISSP OR CISM (Must obtain within 150 days of start date)</li></ul>
<ul><li>GIAC Incident Response Certification (Must obtain within 150 days of start date)</li></ul>
<div>GIAC Enterprise Incident Response (GEIR)</div>
<div>GIAC Cloud Forensics Responder (GCFR)</div>
<div>GIAC Certified Forensic Analyst (GCFA)</div>
<div>GIAC Network Forensic Analyst (GNFA)</div>
<div>GIAC Certified Incident Handler (GCIH)</div>
<div>GIAC Experienced Forensics Analyst (GX-FA)</div>
<div>GIAC Linux Incident Responder (GLIR)</div>
<div></div>
<div>Education, Background, and Years of Experience</div>
<ul><li>7+ years of experience in SOC operations and incident response including SOC management and an IR commander role.</li></ul>
<div></div>
<div>ADDITIONAL SKILLS &amp; QUALIFICATIONS</div>
<div>Required Skills</div>
<div></div>
<ul><li>Possess the knowledge, skills, tasks, and capabilities described in the NICE Work Roles for Incident Response (PD-WRL-003), Insider Threat Analysis (PD-WRL-005), and Threat Analysis (PD-WRL-006) as outlined in the NICE Work Role Framework.</li></ul>
<ul><li>Managing SOC operations and incident response for enterprise environments (50,000+ endpoints), including 5+ years leading hybrid on premises/cloud SOCs with full NIST Cybersecurity Framework coverage.</li></ul>
<ul><li>Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.</li></ul>
<ul><li>Expertise in managing enterprise SOC operations across on-premises and cloud environments.</li></ul>
<ul><li>Strong background in cybersecurity incident response across large, complex enterprise environments.</li></ul>
<ul><li>Proven ability to align SOC functions with the NIST Cybersecurity Framework.</li></ul>
<ul><li>Experience coordinating subordinate managers and technical leads to deliver cohesive operations.</li></ul>
<ul><li>Skilled at influencing executive leadership and driving organizational adoption of SOC best practices</li></ul>
<div></div>
<div>WORKING CONDITIONS</div>
<div></div>
<div>Environmental Conditions</div>
<ul><li>Onsite 5 days a week in Washington, D.C.</li></ul>
<ul><li>Must pass a background investigation</li></ul>
<div></div>
<div>Strength Demands</div>
<ul><li>Light &ndash; 20 lbs. Maximum lifting with frequent lift/carry up to 10 lbs. A job is light if less lifting is involved but significant walking/standing is done or if done mostly sitting but requires push/pull on arm or leg controls.</li></ul>
<div></div>
<div>Physical Requirements</div>
<ul><li>Stand or Sit; Walk; Repetitive Motion; Use Hands / Fingers to Handle or Feel; Stoop, Kneel, Crouch, or Crawl; See; Push or Pull; Climb (stairs, ladders) or Balance (ascend / descend, work atop, traverse).</li></ul>
<div>Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together.</div><div></div><div><br>
What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are.</div><div></div><div><br>
We also believe in supporting our employees by offering a competitive and comprehensive benefits package. To explore the benefits we offer, please visit our website under the Careers section.</div><div></div><div><b><br>
Happy </b>- Be Infectious.</div><div>
Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do.</div><div></div><div><b><br>
Helpful</b> - Be Supportive.</div><div>
Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated.</div><div></div><div><b><br>
Honest</b> - Be Trustworthy.</div><div>
Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support.</div><div></div><div><b><br>
Humble</b> - Be Grounded.</div><div>
Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task.</div><div></div><div><b><br>
Hungry </b>- Be Eager.</div><div>
Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges.</div><div></div><div><b><br>
Hustle</b> - Be Driven.</div><div>
Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success.</div><div></div><div><b><br>
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities</b></div>
<p>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

SOC Operations Lead

Peraton

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
PROGRAM OVERVIEW</b></h5><div>
Engineering, integration, and cybersecurity support to design, build, and test enhanced services for the Department of Navy's IT architecture. Offers a wide range of roles, from cybersecurity experts to engineers specializing in systems, networks, software, and data center services.</div></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton is seeking a NOSC Cyber Manager to support our customer onsite in Washington D.C.</div><ul><li>
Working as expert, conducts research and evaluates technical and all-source intelligence with specific emphasis on network operations and cyber warfare tactics, techniques, and procedures focused on the threat to networked weapons platforms and US and DoD information networks.</li><li>
Analyzes network events to determine the impact on current operations and conduct all-source research to determine advisory capability and intent.</li><li>
Prepares assessments and cyber threat profiles of current events based on the sophisticated collection, research, and analysis of classified and open-source information. Correlates threat data from various sources.</li><li>
Develops and maintains analytical procedures to meet changing requirements and ensure maximum operations.</li><li>
Collects data using a combination of standard intelligence methods and business processes.</li><li>
Produces high-quality papers, presentations, recommendations, and findings for senior US government intelligence and network operations officials.</li><li>
Mentoring and assisting junior and mid-level Incident Handlers for investigations</li><li>
Interface with customer onsite on behalf of the SOC team.</li><li>
Effective communication with customer and contract leadership leveraging briefing and writing skills</li><li>
Extensive knowledge in creating official documentation and procedures.</li><li>
Able to conduct gap analysis for the team.</li><li>
Experience with wide range of security vendor tools as well training analyst to use them.</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
QUALIFICATIONS</b></h5><div><ul><li>
10 years of Incident Handler/Incident Response experience, and at least 5 years supervisory or lead experience</li><li>
Requires a Top Secret with SCI eligibility level clearance</li><li>
SIEM content development</li><li>
Requires current DoD 8570 IAT Level II certification (CCNA Security, CySA+, CICSP, GSEC, Security+ CE, SSCP)</li><li>
Requires current DoD 8570 CSSP-Analyst certification. (CEH, CFR, CySA+, GCIA, GCIH, GICSP, SCYBER)</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p><b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Duration Statement:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

NOSC CYBER MANAGER

Bank of America

<div><p><b>Job Description:</b></p><p></p><p>
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.<br>
<br>
Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates&rsquo; physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.<br>
<br>
Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.<br>
<br>
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!</p><p><br>
The Sr. Information Security Architect &ndash; AI &amp; Cloud Security is a senior member of the BISO Secure Solutions Design team responsible for defining secure architecture patterns, assessing emerging AI/ML solutions, and ensuring alignment with Global Information Security (GIS) policies and enterprise architecture strategies. This role provides deep technical expertise in security design, risk evaluation, and threat modeling for both traditional systems and modern AI/Generative AI workloads.</p><p>
This job is responsible for defining secure solution intent, evaluating system impacts, performing technical architecture assessments, and translating complex requirements into actionable controls across cloud, data, and application environments. You will partner closely with technology leaders, product teams, developers, and enterprise architects to ensure security is embedded into early design and that Generative AI systems are deployed in a resilient, safe, and compliant manner.<br>
The ideal candidate brings broad architecture experience, hands on technical depth, strong threat modeling skills, and demonstrated expertise securing AI, ML, and LLM-based systems.</p><p></p><div>
Required Qualifications<br>
<ul><li>8+ years of experience in information security or enterprise architecture, with recent focus on AI/ML or Generative AI security.</li><li>Proven experience performing secure architecture assessments, design reviews, and threat models for complex, integrated systems.</li><li>Strong understanding of Generative AI, LLM risk, and security frameworks (MITRE ATLAS, OWASP LLM Top 10, NIST AI RMF).</li><li>Broad experience across cloud platforms (AWS), identity, key management, secrets management, networking, containers, and API security.</li><li>Expertise in interpreting and applying internal security policies, standards, and controls.</li><li>Strong communication skills with the ability to convey complex technical concepts to technical and non technical audiences, including senior leadership.</li><li>Demonstrated ability to drive decisions, collaborate across teams, and balance risk vs. business needs.</li><li>Hands-on experience preparing technical diagrams and threat models.</li></ul></div><p></p><div>
Desired Qualifications<br>
<ul><li>Experience with advanced developer tools such as GitHub Copilot, Microsoft Copilot Studio, or similar AI coding assistants.</li><li>Certifications such as CISSP, CISM, CCSP, CCSK, CRISC, or cloud architecture/security certifications.</li><li>Familiarity with agile methodologies, DevOps practices, CI/CD pipelines, and developer experience platforms.</li><li>Experience in financial services or other regulated industries.</li></ul></div><p></p><p>
Key Responsibilities</p><p></p><div>
Security Architecture &amp; Solution Design<br>
<ul><li>Develop and maintain secure design patterns and controls for AI/ML solutions, including LLMs, RAG architectures, vector databases, and enterprise AI agents.</li><li>Define secure operating environment and ensure alignment with enterprise architecture strategy and GIS standards.</li><li>Evaluate system impacts, data flows, integration points, and non-functional requirements such as security.</li><li>Provide solution options to resolve architectural constraints and remove design impediments.</li><li>Participate in design reviews, feature decomposition, and technical governance for AI-enabled platforms and SDLC-integrated developer tools (e.g., GitHub Copilot, Microsoft Copilot Studio).</li></ul></div><p></p><div>
AI/ML Security, Threat Modeling &amp; Risk Assessments<br>
<ul><li>Conduct AI-specific risk assessments using frameworks including MITRE ATLAS, OWASP Top 10 for LLMs/GenAI, and NIST AI RMF.</li><li>Perform detailed threat modeling (STRIDE or equivalent) for cloud, application, data, and AI use cases.</li><li>Identify risks such as prompt injection, model/data poisoning, data leakage, model theft, hallucinations, and supply chain risk across model, dataset, and embedding ecosystems.</li><li>Define compensating controls and architectural safeguards for AI/ML pipelines, including input/output filtering, retrieval restrictions, data minimization, privacy controls, and identity boundaries.</li></ul></div><p></p><div>
Collaboration &amp; Governance<br>
<ul><li>Work across lines of business, operations, enterprise architecture, data science, and development teams to ensure clear solution intent and secure-by-design outcomes.</li><li>Translate policy and standards into actionable architecture guidance for delivery teams.</li><li>Educate partners on architectural best practices, security control requirements, and evolving AI threat landscapes.</li><li>Support technology stack evaluations and selection of secure tools, platforms, and third-party integrations.</li><li>Provide architecture review documentation, data flow diagrams, and risk summaries to support governance processes.</li></ul></div><p></p><p>
Skills:</p><ul><li><p>
Analytical Thinking</p></li><li><p>
Architecture</p></li><li><p>
Result Orientation</p></li><li><p>
Solution Design</p></li><li><p>
Technical Strategy Development</p></li><li><p>
Application Development</p></li><li><p>
Collaboration</p></li><li><p>
Data Management</p></li><li><p>
DevOps Practices</p></li><li><p>
Risk Management</p></li><li><p>
Agile Practices</p></li><li><p>
Automation</p></li><li><p>
Influence</p></li><li><p>
Solution Delivery Process</p></li><li><p>
Test Engineering</p></li></ul><p></p><p><b>
Shift:</b></p>
1st shift (United States of America)<p></p><p><b>
Hours Per Week:</b></p>
40</div><p></p>

Sr. Information Security Architect â€“ AI & Cloud Security

<div><p><b>Job Description:</b></p><p></p><p>
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.<br>
<br>
Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates&rsquo; physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.<br>
<br>
Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.<br>
<br>
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!</p><p><b><br>
Job Description:</b><br>
This job is responsible for supporting evaluations of cyber security threats and updating defensive capabilities to reduce the bank's risk of exposure. Key responsibilities include conducting analyses of the threat environment and threats to the bank, including post incident analysis, applying a multi-faceted situational awareness of cyber security processes to protect against threats, and implementing proactive defensive actions for the security, continuity, and confidentiality of information.</p><p></p><p>
What you'll do</p><ul><li>
Respond, triage, and adapt to real-time threats targeting the organization through the lens of malware delivery and execution.</li><li>
Perform static, dynamic, and behavioral analysis of malicious software and potential indicators of compromise.</li><li>
Maintain detailed documentation regarding analysis findings and producing comprehensive reports encompassing observations, actions taken, and recommendations.</li><li>
Identify cyber risks and help develop improvements to controls and detection mechanisms.</li><li>
Collaborate with response teams to defend against emerging threats and contribute to Incident Response efforts.</li></ul><p></p><p>
Who you are
</p><ul><li>We are looking for mid-level candidates with malware analysis and incident response experience.</li><li>
Specific experience with triaging detections, prioritizing threats, performing static and dynamic analysis, identifying security gaps, and implementing preventative measures.</li><li>
Candidates should have a very strong investigative mindset with an ability to drive process changes and implement control enhancements.</li><li>
Candidates typically should have 3-5 years of relevant experience in one or more threat prevention disciplines focusing on Email, Web, or Endpoint.</li></ul><p></p><p>
Required Skills</p><ul><li>
Understanding of browser exploitation techniques</li><li>
Familiarity of web based technologies such as JavaScript or HTML and how they are commonly abused by various threat actors or techniques.</li><li>
Experience with reviewing and analyzing Email Headers.</li><li>
Experience with detecting phishing and other common email threats.</li><li>
SIEM experience with event correlation and searching.</li><li>
Experience with dynamic analysis tools such as Process Monitor, FakeDNS, Regshot, or Wireshark.</li><li>
Familiarity with use and interpretation of malware analysis results from sandbox technologies.</li><li>
Technical experience and ability to operate and maintain a virtualized sandbox environment.</li><li>
Familiarity with URL categorization and analysis tools like Fiddler, commercial sandbox, or web proxy technologies.</li><li>
Ability to assess files or URLs and extract Indicators of Compromise (IoCs) such as malicious domains, IPs, and file hashes.</li><li>
Experience with documentation and ability to clearly articulate thoughts to a wide variety of intended audiences (teammates, technical, non-technical, leadership, etc.).</li><li>
Knowledge of Endpoint Detection and Response (EDR) tools</li><li>
Knowledge of forensic artifacts such as Browser, Registry, or Event Log artifacts.</li></ul><p></p><p>
Desired Skills</p><ul><li>
3+ years of experience conducting end to end Malware analysis specifically around either Email, Web, or Endpoint.</li><li>
3+ years of conducting incident response using commercial products and tools.</li><li>
3+ years of experience in digital forensics</li><li>
Knowledge of at least one major cloud services provider (AWS, GCP, Azure) technologies</li><li>
Ability to create scripts and other forms of automation</li><li>
Experience conducting interviews with an interrogative mindset</li></ul><p></p><p><b>
Skills:</b></p><ul><li>
Cyber Security</li><li>
Data Privacy and Protection</li><li>
Problem Solving</li><li>
Process Management</li><li>
Threat Analysis</li><li>
Business Acumen</li><li>
Data and Trend Analysis</li><li>
Interpret Relevant Laws, Rules, and Regulations</li><li>
Risk Analytics</li><li>
Stakeholder Management</li><li>
Access and Identity Management</li><li>
Data Governance</li><li>
Encryption</li><li>
Information Systems Management</li><li>
Technology System Assessment</li></ul><p></p><p><b>
Shift:</b></p>
1st shift (United States of America)<p></p><p><b>
Hours Per Week:</b></p>
40</div><p></p>

Malware Defense Analyst

Explore 381+ Case manager enterprise threat response in Washington this March. Find roles across top companies and apply now to boost your career.

381 case manager enterprise threat response jobs In Washington

Case Manager, Enterprise Threat Response

Case Manager, Enterprise Threat Response

Senior Cyber Security Engineer

SOC Operations Lead

NOSC CYBER MANAGER

Sr. Information Security Architect â€“ AI & Cloud Security

Malware Defense Analyst