Cybersecurity Product Owner

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Job Description:

We are seeking a Cybersecurity Product Owner to drive the strategy, design, and delivery of our enterprise security automation and orchestration program. This hybrid role merges the technical expertise of a SIEM & SOAR developer with the strategic execution experience of a Product Owner, ensuring our automation ecosystem delivers measurable risk reduction, efficiency, and innovation. You will prioritize work to continuously improve incident response plans with stakeholders (SOC, CIRT),manage the SIEM & SOAR product backlog, and ensure automation aligns with business and security objectives.

Responsibilities

• Partner with technology leadership, developers, and stakeholders to drive the vision, roadmap, and delivery of security automation solutions. Lead the design, implementation, and demonstration of end-to-end investigation playbooks in platforms such as Cortex XSOAR, Splunk SOAR, and Tines. Identify and prioritize high-value automation opportunities across SOC, Cloud Security, and Engineering teams, leveraging automation feasibility scoring to assess ROI and business value.
• Own and maintain the product backlog, translating business requirements into actionable user stories with clear acceptance criteria. Ensure a healthy pipeline of ready stories to support upcoming sprints, while managing priorities, scope, dependencies, risks, and trade-offs. Facilitate sprint planning, backlog refinement, PI planning, sprint reviews, and Jira governance to maintain delivery discipline and transparency.
• Serve as the primary liaison between product management, technology leadership, development teams, QA, and business stakeholders, ensuring alignment, effective communication, and timely resolution of issues. Collaborate with engineers and analysts to align sprint objectives with the automation roadmap and recommend workflow enhancements that improve investigation accuracy, operational efficiency, and response times.

Required Qualifications

• 10+ years of experience as a Product Owner supporting software development teams.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent experience.
• Product Owner certification (CSPO, PSPO, SAFe POPM, or equivalent).
• Expert knowledge of SIEM and SOAR platforms, including API integrations and playbook development.
• Experience managing Agile product backlogs using Jira, Azure DevOps, or similar tools.
• Strong understanding of security technologies such as CrowdStrike, Tanium, Splunk, ThreatQ, AWS, Okta, and Cloudflare.
• Experience developing automation solutions using Python, JavaScript, and REST APIs.
• Proven ability to translate business requirements into detailed user stories with clear acceptance criteria.
• Strong technical writing skills, including requirements documentation, meeting minutes, action items, and stakeholder communications.
• Experience writing detailed technical and functional requirements.
• Advanced experience tracking and managing dependencies, risks, blockers, issues, and action items.
• Excellent organization, facilitation, prioritization, and deadline management skills.
• Strong analytical, problem-solving, and stakeholder management capabilities.
• Excellent written, verbal, presentation, and executive communication skills.
• Experience leading large-scale Agile technology initiatives through all phases of the Software Development Lifecycle (SDLC).
• Ability to work independently with limited supervision while driving outcomes across cross-functional teams.

Desired Qualifications

• 3+ years designing and deploying SOAR playbooks in production environments (Cortex XSOAR, Splunk SOAR, Tines, etc.).
• Tines Builder or Advanced Builder certification.
• Experience with cloud-native automation architectures, including AWS Lambda and Step Functions.
• Familiarity with ServiceNow, Jira Service Management, and Release Management tools.
• Background in Security Operations, Incident Response, Threat Detection, Vulnerability Management, or Application Security.
• Advanced expertise in Jira, Confluence, dashboards, reporting, filters, and workflow management.
• Agile certifications such as Certified Scrum Product Owner (CSPO) or equivalent.

• Demonstrated focus on delivering high-quality software products and exceptional user experiences

Skills:

• Agile Practices
• Analytical Thinking
• Collaboration
• Result Orientation
• Solution Delivery Process
• Influence
• Risk Management
• Solution Design
• Stakeholder Management
• Technical Strategy Development
• Application Development
• Business Acumen
• Data Management
• DevOps Practices
• Financial Management

Shift:

1st shift (United States of America)

Hours Per Week: 

40