Mainframe Security Analyst

Pittsburgh, PA, United States (On-site)500 Grant StreetPittsburghPAUS

Contract (1 year)

Published 3 hours ago

RACF

REXX

IBM SyncSort

zSecure Audit

ICETOOL

z/OS

Mainframe

JCL

Job Summary

BNY is seeking a Mainframe Security Analyst to support critical vulnerability management, hardening, and modernization initiatives across the bank’s mainframe environment.

This role will provide day-to-day tactical execution across security-focused projects, including detailed analysis of security-related data, documentation of project activities, and collaboration with engineering and information security teams to strengthen the control environment.

This role is preferred to be based in Pittsburgh, PA, Lake Mary, FL, NYC or remote. The expectation is 4 days onsite per week for local candidates, with work hours aligned to 8:00 AM – 4:00 PM Eastern Time.

Key Responsibilities

• Mainframe Security Project Execution: Provide day-to-day tactical execution for mainframe security and vulnerability management projects, including detailed analytics, project tracking, asset modeling support, and required documentation updates.
• Mainframe Security Subject Matter Expertise: Serve as a subject matter expert in z/OS mainframe security systems, including RACF, ACF2, and Top Secret (TSS), supporting teams with guidance on access control, security configuration, and remediation strategies.
• Vulnerability Management Support: Partner with engineering, security, and data owner teams to identify, assess, and help remediate vulnerabilities affecting mainframe systems and data.
• zSecure Audit Leadership: Leverage deep experience with zSecure Audit to perform scans, analyze reports, evaluate audit controls, and support hardening and compliance efforts across the environment.
• z/OS Hardening & Security Standards: Determine and help implement security standards related to z/OS hardening, security controls, STIG-aligned remediation, and vulnerability reduction initiatives.
• Automation & Modernization Enablement: Support automation and modernization efforts by developing or advising on solutions using REXX, JCL, IBM SyncSort, and ICETOOL where applicable.
• Cross-Functional Collaboration: Act as a liaison between mainframe engineering teams, information security teams, and client/data owner stakeholders to ensure clear communication, effective risk remediation, and alignment on security priorities.
• Training & User Support: Interface directly with client staff and data owners to answer day-to-day questions, provide training on home-grown vulnerability tooling and utility tools, and promote adoption of security processes.
• Process Documentation & Governance: Create and maintain mainframe security processes, procedural documentation, and supporting materials to improve consistency, repeatability, and operational maturity.
• Security Consulting & Assessment: Apply prior z/OS security consulting and/or penetration testing experience to help evaluate current-state controls and recommend improvements to strengthen mainframe security posture.

Qualifications

• 7–10+ years of experience with zSecure Audit
• Strong hands-on experience with RACF required, with additional expertise in ACF2 and/or Top Secret (TSS) highly valued
• Strong proficiency with REXX
• Experience with JCL and IBM SyncSort
• Experience leveraging z/OS RACF STIG and/or related hardening standards in security remediation efforts
• Strong understanding of mainframe security frameworks, controls, and access management concepts
• Demonstrated experience in vulnerability management, security remediation, or related mainframe security initiatives
• Ability to analyze scan results, interpret audit findings, and translate technical issues into actionable remediation guidance
• Strong written and verbal communication skills, including the ability to document processes and explain technical concepts clearly
• Bachelor’s degree in Computer Science or a related discipline required, or equivalent combination of education and significant relevant experience

Preferred Experience

• 10+ years of experience with ACF2 or Top Secret (TSS)
• Experience with ICETOOL
• Background in z/OS security consulting or penetration testing
• Experience working in financial services or another regulated environment
• Familiarity with JIRA, Confluence, and SharePoint
• Experience partnering directly with data owners, business stakeholders, and client teams in security-focused initiatives

Why Join Us

This role offers the opportunity to play a meaningful part in strengthening BNY’s mainframe security environment through vulnerability management, hardening, automation, and modernization efforts. You will work closely with engineering, information security, and business stakeholders to help protect critical data, improve control effectiveness, and build durable security processes across a complex enterprise environment.

At BNY, our culture speaks for itself, check out the latest BNY news at:

BNY Newsroom

BNY LinkedIn

Here’s a few of our recent awards:

America’s Most Innovative Companies, Fortune, 2025

World’s Most Admired Companies, Fortune 2025

“Most Just Companies”, Just Capital and CNBC, 2025

Pay Rate Range

Min Pay Rate$65.6

Max Pay Rate$82

CurrencyUSD

Unithourly

USD65.682HOUR

Additional Notes

Applications will be accepted on an ongoing basis.

This posting is for a contract assignment with Tundra Technical Solutions to provide services to Bank of New York (BNY). Please note that this is not a full-time employment opportunity. Candidates selected for this role will be engaged as contractors for the specified duration of the project.

For any inquiries regarding the terms of the contract or engagement, please contact Tundra Technical Solutions directly.

Benefits

Information

Optional benefits offering include medical, dental, vision and retirement benefits via Tundra Technical Solutions.