Senior Security Engineer – ServiceNow SIR & DLP

Bank of America is seeking a Senior Security Engineer to lead end-to-end delivery of enterprise capabilities for ServiceNow Security Incident Response (SIR) and Data Loss Prevention (DLP). This onsite role in Chicago, IL combines security operations impact with hands-on engineering leadership across design, development, testing, implementation, and ongoing evolution. The role includes a $150,000 - $190,700 yearly salary range and a 1st shift schedule for 40 hours per week.

What you’ll do

• Provide end-to-end technology leadership and accountability for ServiceNow SIR and DLP capabilities, spanning design, development, testing, implementation, and ongoing enhancement.
• Lead multiple engineering and development teams by setting priorities, building delivery plans, and driving execution discipline.
• Translate cybersecurity and business strategies into technology roadmaps, architecture, engineering deliverables, and implementation plans.
• Drive execution across complex, interdependent initiatives by managing risks, dependencies, issues, and delivery challenges.
• Establish strong engineering and delivery practices for design, development, testing, deployment, operational readiness, and platform support.
• Ensure solutions are scalable, resilient, sustainable, and aligned with enterprise technology and security standards.
• Coordinate with business, cybersecurity, and technology organizations to deliver integrated SIR and DLP capabilities that strengthen incident response and protect sensitive information.
• Manage relationships with business and technology executives, sponsors, product owners, architecture, control partners, and vendors to support decisions and implementation success.
• Drive standardized workflows and automation to improve speed, consistency, efficiency, and traceability across security incident and data protection processes.
• Implement risk-based capabilities to categorize and prioritize security incidents and DLP events based on severity, data sensitivity, business context, and potential impact.
• Lead ServiceNow implementation for SIR and DLP workflows, including event intake, enrichment, triage, investigation, case management, escalation, remediation, and closure.
• Oversee integrations between ServiceNow and enterprise security detection, incident response, DLP, and supporting technology platforms to enable automated event ingestion, enrichment, routing, and orchestration.
• Develop dashboards and reporting for visibility into security incidents, DLP cases, workflow performance, trends, and risk outcomes.
• Incorporate controls, traceability, documentation, and governance into SIR and DLP technology workflows.
• Support audit and regulatory activities by providing accurate and timely information about technology implementation, workflows, controls, and delivery.
• Continuously evolve capabilities in partnership with security operations teams as threats, technologies, regulations, and business requirements change.

What you bring

• Demonstrated experience as a senior technology delivery leader for complex, enterprise-scale technology programs or platforms.
• Proven ability to lead multiple engineering and development teams through large-scale technology implementations.
• Strong experience with ServiceNow development, implementation, and enterprise integration, preferably within cybersecurity or security operations.
• Experience delivering security workflows, case management, automation, and integrations in a large enterprise environment.
• Strong understanding of Security Incident Response, Data Loss Prevention, cybersecurity operations, and data protection processes.
• Experience integrating ServiceNow with cybersecurity platforms, detection technologies, enterprise data sources, and supporting systems.
• Strong understanding of APIs, integration patterns, workflow automation, data models, application architecture, and software engineering practices.
• Working knowledge of ServiceNow development technologies, including JavaScript, ServiceNow scripting, and APIs, with the ability to guide technical design and engineering decisions.
• Demonstrated experience managing technology roadmaps, delivery dependencies, resources, financials, risks, and executive-level reporting.
• Strong leadership and communication skills to influence across engineering, cybersecurity, business, control, and executive organizations.
• Proven ability to navigate ambiguity, simplify complex problems, remove impediments, and drive teams toward measurable outcomes.

Technologies

• ServiceNow
• JavaScript
• ServiceNow scripting
• APIs

Preferred qualifications

• Experience leading ServiceNow Security Operations / Security Incident Response implementations in a large enterprise environment.
• Experience with enterprise Data Loss Prevention technologies and DLP case-management processes.
• Experience leading complex cybersecurity technology transformation programs.
• Experience in cybersecurity operations, incident response, data protection, and security engineering.
• Familiarity with ITIL practices and relevant ServiceNow certifications.
• Knowledge of cybersecurity, privacy, data protection, regulatory, and compliance requirements.
• Experience leading technology programs involving multiple platforms, integrations, vendors, and organizational stakeholders.
• Experience driving workflow automation, orchestration, process standardization, and operational transformation.
• Bachelor’s or Master’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent professional experience.

Desired certifications

• Certified System Administrator (CSA)
• Certified Implementation Specialist – Data Foundations (CIS-DF)
• Certified Implementation Specialist – Security Incident Response (CIS – SIR)