Senior Security Engineer – ServiceNow SIR & DLP

Senior Security Engineer – ServiceNow SIR & DLP

Addison, Texas;Washington, District of Columbia; Chicago, Illinois; Denver, Colorado

To proceed with your application, you must be at least 18 years of age.

Acknowledge (https://ghr.wd1.myworkdayjobs.com/Lateral-US/job/Addison/Senior-Security-Engineer---ServiceNow-SIR---DLP\_26040926-2)

Bank of America employees are required to meet all posting eligibility requirements prior to applying for any new position.

Acknowledge (https://ghr.wd1.myworkdayjobs.com/Lateral-US/job/Addison/Senior-Security-Engineer---ServiceNow-SIR---DLP\_26040926-2)

Refer a friend

To proceed with your application, you must be at least 18 years of age.

Acknowledge (https://ghr.wd1.myworkdayjobs.com/Lateral-US/job/Addison/Senior-Security-Engineer---ServiceNow-SIR---DLP\_26040926-2)

Bank of America employees are required to meet all posting eligibility requirements prior to applying for any new position.

Acknowledge (https://ghr.wd1.myworkdayjobs.com/Lateral-US/job/Addison/Senior-Security-Engineer---ServiceNow-SIR---DLP\_26040926-2)

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Role Description

Senior Technology Delivery Lead will lead the end-to-end technology delivery of our enterprise ServiceNow Security Incident Response (SIR) and Data Loss Prevention (DLP) capabilities.

You will be accountable for bringing together technology strategy, engineering, platform development, integration, program execution, and operational readiness to deliver scalable security capabilities across the enterprise. The role will lead multiple teams through the design, development, testing, implementation, and ongoing evolution of ServiceNow SIR and DLP, partnering closely with Cybersecurity Operations, Data Protection, Technology, Risk, Compliance, and business stakeholders.

The Senior Technology Delivery Lead will own the overall execution and delivery strategy, translating business and cybersecurity requirements into technology solutions and driving complex initiatives from concept through production. This includes managing delivery roadmaps, technical dependencies, engineering execution, resources, financials, risks, and senior stakeholder alignment.

The successful candidate will have demonstrated experience leading large-scale, complex technology implementations, building and managing engineering teams, delivering enterprise platforms, and driving outcomes across organizational boundaries. The leader will combine strong technology acumen with the ability to simplify complexity, remove impediments, make decisions, and communicate effectively with both executive and technical audiences.

This is a highly visible technology leadership role with exposure to senior leadership, auditors, regulators, and key control partners. While a strong software engineering and platform background is required, the role is focused on technology leadership and delivery rather than personal delivery of code.

Required Qualifications

• Demonstrated experience as a senior technology delivery leader responsible for complex, enterprise-scale technology programs or platforms.

• Proven ability to lead multiple engineering and development teams through large-scale technology implementations.

• Strong experience with ServiceNow development, implementation, and enterprise integration, preferably within cybersecurity or security operations.

• Experience delivering security workflows, case management, automation, and integrations in a large enterprise environment.

• Strong understanding of Security Incident Response, Data Loss Prevention, cybersecurity operations, and data protection processes.

• Experience integrating ServiceNow with cybersecurity platforms, detection technologies, enterprise data sources, and supporting systems.

• Strong understanding of APIs, integration patterns, workflow automation, data models, application architecture, and software engineering practices.

• Working knowledge of ServiceNow development technologies, including JavaScript, ServiceNow scripting, and APIs, with the ability to guide technical design and engineering decisions.

• Demonstrated experience managing technology roadmaps, delivery dependencies, resources, financials, risks, and executive-level reporting.

• Strong leadership and communication skills with the ability to influence across engineering, cybersecurity, business, control, and executive organizations.

• Proven ability to navigate ambiguity, simplify complex problems, remove impediments, and drive teams toward measurable outcomes.

Preferred Qualifications

• Experience leading ServiceNow Security Operations / Security Incident Response implementations in a large enterprise environment.

• Experience with enterprise Data Loss Prevention technologies and DLP case-management processes.

• Experience leading complex cybersecurity technology transformation programs.

• Experience in cybersecurity operations, incident response, data protection, and security engineering.

• Familiarity with ITIL practices and relevant ServiceNow certifications.

• Knowledge of cybersecurity, privacy, data protection, regulatory, and compliance requirements.

• Experience leading technology programs involving multiple platforms, integrations, vendors, and organizational stakeholders.

• Experience driving workflow automation, orchestration, process standardization, and operational transformation.

• Bachelor’s or Master’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent professional experience.

Key Responsibilities

Technology Delivery & Leadership

• Provide end-to-end technology leadership and accountability for the design, development, testing, implementation, and ongoing enhancement of ServiceNow SIR and DLP capabilities.

• Lead multiple engineering and development teams, establishing clear priorities, delivery plans, accountability, and execution discipline.

• Translate cybersecurity and business strategies into technology roadmaps, architecture, engineering deliverables, and implementation plans.

• Drive execution across complex, interdependent technology initiatives while proactively managing risks, dependencies, issues, and delivery challenges.

• Establish strong engineering and delivery practices across design, development, testing, deployment, operational readiness, and ongoing platform support.

• Ensure solutions are scalable, resilient, sustainable, and aligned with enterprise technology and security standards.

Cross-Team & Executive Leadership

• Work across business, cybersecurity, and technology organizations at the executive level to deliver integrated SIR and DLP capabilities that strengthen incident response and protect sensitive information.

• Manage relationships across business and technology executives, sponsors, product owners, architecture, control partners, and vendors to drive decisions and successful implementation.

• Create alignment across multiple teams and organizations with competing priorities, dependencies, and delivery requirements.

• Identify and resolve organizational and technical impediments while driving opportunities to simplify processes and improve execution.

• Provide clear, concise communication to senior leadership regarding delivery progress, risks, dependencies, decisions, financials, and outcomes.

• Conduct portfolio-level resource, financial, dependency, and delivery management activities.

SIR & DLP Technology Implementation

• Lead the implementation of ServiceNow Security Incident Response and Data Loss Prevention capabilities, including event intake, enrichment, triage, investigation, case management, escalation, remediation, and closure workflows.

• Oversee integrations between ServiceNow and enterprise security detection, incident response, DLP, and supporting technology platforms to enable automated event ingestion, enrichment, routing, and orchestration.

• Drive standardized workflows and automation that improve speed, consistency, efficiency, and traceability across security incident and data protection processes.

• Establish risk-based capabilities to categorize and prioritize security incidents and DLP events based on factors including severity, data sensitivity, business context, and potential impact.

• Partner across Cybersecurity Operations, Data Protection, Technology, Risk, Compliance, Privacy, Legal, and business teams to translate operational requirements into scalable technology solutions.

• Drive dashboards and reporting that provide visibility into security incidents, DLP cases, workflow performance, trends, and risk outcomes.

• Ensure appropriate controls, traceability, documentation, and governance are incorporated throughout SIR and DLP technology workflows.

Engineering, Automation & Integration

• Provide technology leadership for ServiceNow development, engineering, integration, workflow automation, and platform capabilities.

• Drive automation across SIR and DLP processes to reduce manual activities, accelerate response, and improve consistency.

• Lead integration of ServiceNow with enterprise cybersecurity technologies, data sources, and operational platforms.

• Establish reusable integration, automation, and workflow patterns that support both current requirements and future security use cases.

• Ensure appropriate data quality, resiliency, performance, security, and controls across platform integrations.

• Partner with architecture and engineering teams to ensure solutions align with enterprise architecture and technology standards.

• Drive engineering decisions and trade-offs necessary to balance speed, scalability, resiliency, risk, and long-term sustainability.

Delivery Governance, Metrics & Operational Readiness

• Establish and manage integrated technology delivery plans, roadmaps, milestones, dependencies, risks, and implementation readiness.

• Develop meaningful metrics and dashboards to provide visibility into technology delivery, implementation progress, operational readiness, platform performance, and risk.

• Establish governance mechanisms to identify and quickly resolve delivery risks, technical issues, and cross-team dependencies.

• Ensure appropriate testing, production readiness, implementation, change management, and post-implementation support are incorporated into delivery plans.

• Provide transparent reporting and executive-level communications on overall program health, key decisions, risks, and outcomes.

Continuous Improvement & Transformation

• Identify opportunities to improve SIR and DLP capabilities through automation, workflow optimization, platform modernization, and technology integration.

• Drive simplification and standardization to reduce unnecessary complexity and manual handoffs across technology and operational processes.

• Partner with security operations teams to continuously evolve capabilities as threats, technologies, regulations, and business requirements change.

• Establish mechanisms for translating operational feedback, lessons learned, and technology insights into future platform enhancements.

• Identify opportunities to leverage orchestration, intelligent automation, and emerging technologies to improve security operations.

Risk, Controls & Compliance

• Ensure technology solutions support applicable internal policies, control requirements, regulatory obligations, and cybersecurity standards.

• Integrate appropriate risk management, controls, documentation, traceability, and evidence into technology delivery and platform capabilities.

• Support audit, regulatory, and compliance activities by providing accurate and timely information regarding technology implementation, workflows, controls, and delivery.

• Proactively identify technology and delivery risks and partner with appropriate stakeholders to develop mitigation strategies.

• Ensure delivery decisions appropriately balance business outcomes, cybersecurity risk, technology risk, and operational resiliency.

Desired Certifications

• Certified System Administrator (CSA)

• Certified Implementation Specialist – Data Foundations (CIS-DF)

• Certified Implementation Specialist – Security Incident Response (CIS – SIR)

Shift:

1st shift (United States of America)

Hours Per Week:

40

Bank of America and its affiliates consider for employment and hire qualified candidates without regard to race, religious creed, religion, color, sex, sexual orientation, genetic information, gender, gender identity, gender expression, age, national origin, ancestry, citizenship, protected veteran or disability status or any factor prohibited by law, and as such affirms in policy and practice to support and promote the concept of equal employment opportunity, in accordance with all applicable federal, state, provincial and municipal laws. The company also prohibits discrimination on other bases such as medical condition, marital status or any other factor that is irrelevant to the performance of our teammates.

View your "Know your Rights (https://www.eeoc.gov/sites/default/files/2023-06/22-088\_EEOC\_KnowYourRights6.12.pdf) " poster.

View the LA County Fair Chance Ordinance (https://dcba.lacounty.gov/wp-content/uploads/2024/08/FCOE-Official-Notice-Eng-Final-8.30.2024.pdf) .

Bank of America aims to create a workplace free from the dangers and resulting consequences of illegal and illicit drug use and alcohol abuse. Our Drug-Free Workplace and Alcohol Policy (“Policy”) establishes requirements to prevent the presence or use of illegal or illicit drugs or unauthorized alcohol on Bank of America premises and to provide a safe work environment.

Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. Should you be offered a role with Bank of America, your hiring manager will provide you with information on the in-office expectations associated with your role. These expectations are subject to change at any time and at the sole discretion of the Company. To the extent you have a disability or sincerely held religious belief for which you believe you need a reasonable accommodation from this requirement, you must seek an accommodation through the Bank’s required accommodation request process before your first day of work.

This communication provides information about certain Bank of America benefits. Receipt of this document does not automatically entitle you to benefits offered by Bank of America. Every effort has been made to ensure the accuracy of this communication. However, if there are discrepancies between this communication and the official plan documents, the plan documents will always govern. Bank of America retains the discretion to interpret the terms or language used in any of its communications according to the provisions contained in the plan documents. Bank of America also reserves the right to amend or terminate any benefit plan in its sole discretion at any time for any reason.

Investment products offered through MLPF&S and insurance and annuity products offered through MLLA:

Are Not FDIC Insured Are Not Bank Guaranteed May Lose Value

Are Not Deposits Are Not Insured by Any Federal Government Agency Are not a condition to Any Banking Service or Activity

Merrill Lynch, Pierce, Fenner & Smith Incorporated (also referred to as “MLPF&S” or “Merrill”) makes available certain investment products sponsored, managed, distributed or provided by companies that are affiliates of Bank of America Corporation (“BofA Corp.”). MLPF&S is a registered broker-dealer, registered investment adviser, Member SIPC and a wholly owned subsidiary of BofA Corp. Insurance and annuity products are offered through Merrill Lynch Life Agency Inc., a licensed insurance agency and wholly owned subsidiary of Bank of America Corporation.

Trust, fiduciary and investment management services are provided by Bank of America, N.A., Member FDIC and wholly owned subsidiary of Bank of America Corporation (“BofA Corp.”).

Bank of America Private Bank is a division of Bank of America, N.A.

Banking products are provided by Bank of America, N.A. and affiliated banks, Members FDIC and wholly owned subsidiaries of Bank of America Corporation.

© 2026 Bank of America Corporation. All rights reserved.