Senior Security Engineer - ServiceNow SIR & DLP

Bank of America is seeking a senior technology leader to deliver and continuously improve enterprise ServiceNow Security Incident Response (SIR) and Data Loss Prevention (DLP) capabilities. This onsite role in Chicago, IL brings ownership of end-to-end delivery across design, development, testing, implementation, and ongoing evolution, partnering with business and cybersecurity stakeholders to strengthen incident response and protect sensitive information.

Compensation: USD 150,000 - 190,700 per year. Schedule: 1st shift, 40 hours per week .

Responsibilities

• Provide end-to-end technology leadership and accountability for the design, development, testing, implementation, and ongoing enhancement of ServiceNow SIR and DLP capabilities.
• Lead multiple engineering and development teams by setting priorities, delivery plans, accountability, and execution discipline.
• Translate cybersecurity and business strategies into technology roadmaps, architecture, engineering deliverables, and implementation plans.
• Drive execution across complex, interdependent initiatives while proactively managing risks, dependencies, issues, and delivery challenges.
• Establish strong engineering and delivery practices across design, development, testing, deployment, operational readiness, and ongoing platform support.
• Ensure solutions are scalable, resilient, sustainable, and aligned with enterprise technology and security standards.
• Partner across business, cybersecurity, and technology organizations at the executive level to deliver integrated SIR and DLP capabilities.
• Manage relationships across executives, sponsors, product owners, architecture teams, control partners, and vendors to support decision-making and successful implementation.
• Create alignment across teams facing competing priorities, dependencies, and delivery requirements.
• Identify and resolve organizational and technical impediments, simplifying processes and improving execution.
• Communicate clearly to senior leadership on delivery progress, risks, dependencies, decisions, financials, and outcomes.
• Perform portfolio-level resource, financial, dependency, and delivery management activities.
• Lead the implementation of SIR and DLP workflows including event intake, enrichment, triage, investigation, case management, escalation, remediation, and closure.
• Oversee integrations between ServiceNow and enterprise security detection, incident response, DLP, and supporting platforms for automated ingestion, enrichment, routing, and orchestration.
• Drive standardized workflows and automation to improve speed, consistency, efficiency, and traceability across security incident and data protection processes.
• Establish risk-based capabilities to categorize and prioritize security incidents and DLP events using factors such as severity, data sensitivity, business context, and potential impact.
• Build reporting and dashboards covering security incidents, DLP cases, workflow performance, trends, and risk outcomes.
• Incorporate appropriate controls, traceability, documentation, and governance throughout SIR and DLP workflows, including evidence for audit and compliance needs.
• Provide technology leadership for ServiceNow development, engineering, integrations, workflow automation, and platform capabilities, including reusable patterns for current and future security use cases.
• Support engineering decisions and trade-offs across speed, scalability, resiliency, risk, and long-term sustainability, ensuring data quality, performance, and security across integrations.

Requirements

• Demonstrated experience as a senior technology delivery leader for complex, enterprise-scale technology programs or platforms.
• Proven ability to lead multiple engineering and development teams through large-scale implementations.
• Strong experience with ServiceNow development, implementation, and enterprise integration, preferably in cybersecurity or security operations.
• Experience delivering security workflows, case management, automation, and integrations in a large enterprise environment.
• Strong understanding of Security Incident Response, Data Loss Prevention, cybersecurity operations, and data protection processes.
• Experience integrating ServiceNow with cybersecurity platforms, detection technologies, enterprise data sources, and supporting systems.
• Strong understanding of APIs, integration patterns, workflow automation, data models, application architecture, and software engineering practices.
• Working knowledge of ServiceNow development technologies, including JavaScript, ServiceNow scripting, and APIs, with the ability to guide technical design and engineering decisions.
• Demonstrated experience managing technology roadmaps, delivery dependencies, resources, financials, risks, and executive-level reporting.
• Strong leadership and communication skills to influence across engineering, cybersecurity, business, control, and executive organizations.
• Proven ability to navigate ambiguity, simplify complex problems, remove impediments, and deliver measurable outcomes.

Technologies

• ServiceNow
• JavaScript
• ServiceNow scripting
• APIs

Preferred Qualifications

• Experience leading ServiceNow Security Operations / Security Incident Response implementations in a large enterprise environment.
• Experience with enterprise Data Loss Prevention technologies and DLP case-management processes.
• Experience leading complex cybersecurity technology transformation programs.
• Experience in cybersecurity operations, incident response, data protection, and security engineering.
• Familiarity with ITIL practices and relevant ServiceNow certifications.
• Knowledge of cybersecurity, privacy, data protection, regulatory, and compliance requirements.
• Experience leading technology programs involving multiple platforms, integrations, vendors, and organizational stakeholders.
• Experience driving workflow automation, orchestration, process standardization, and operational transformation.
• Bachelor’s or Master’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent professional experience.

Desired Certifications

• Certified System Administrator (CSA)
• Certified Implementation Specialist – Data Foundations (CIS-DF)
• Certified Implementation Specialist – Security Incident Response (CIS – SIR)

Education

Bachelor’s or Master’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent.