Senior Infrastructure Engineer – Asset Hardening Lead Analyst

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary:

Regular

Language Fluency:  English (Required)

Work Shift:

1st shift (United States of America)

Please review the following job description:

Leads enterprise asset hardening and security baseline governance activities to reduce technology risk and strengthen the security posture of infrastructure platforms. Applies expertise in secure configuration management, security standards, vulnerability mitigation, and compliance requirements to ensure technology assets are configured and maintained in accordance with enterprise policies and industry best practices. Partners with engineering, cybersecurity, risk, and operations teams to drive security baseline adoption, configuration compliance, remediation activities, and continuous improvement of asset hardening processes. Serves as a subject matter expert for security configuration governance and infrastructure risk reduction initiatives.

ESSENTIAL DUTIES AND RESPONSIBILITIES
Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.
Lead enterprise asset hardening strategy and remediation initiatives by overseeing the prioritization, governance, and remediation of security configuration risks across technology platforms.

• Establish and maintain enterprise security baseline requirements aligned to industry frameworks, regulatory expectations, and organizational risk tolerances.
• Provide technical leadership to multiple platform teams on secure configuration standards, hardening requirements, and remediation approaches.
• Drive governance activities supporting security baseline compliance, exception management, risk acceptance reviews, executive reporting, and remediation accountability.
• Develop and oversee enterprise metrics, dashboards, KPIs, and reporting to measure asset hardening effectiveness, compliance trends, and risk reduction outcomes.
• Perform trend analysis and root cause investigations to identify recurring configuration weaknesses and drive sustainable corrective actions.
• Lead the development, implementation, and continuous improvement of enterprise asset hardening standards, procedures, controls, and operating models.
• Partner with Cyber Security, Risk Management, Audit, Compliance, Enterprise Architecture, and Technology Operations teams to support audits, examinations, and regulatory assessments.
• Evaluate security control effectiveness and configuration compliance programs to identify opportunities for process optimization and risk reduction.
• Drive automation and engineering solutions that improve security baseline enforcement, compliance monitoring, reporting, and remediation workflows.
• Review and approve remediation evidence, exception requests, and compensating control documentation to support governance and audit readiness.
• Serve as a senior subject matter expert for asset hardening, secure configuration management, and infrastructure security governance.
• Lead enterprise-wide initiatives to improve security baseline adoption, reduce configuration-related risk, and strengthen the overall security posture of technology assets.
• Monitor industry trends, security frameworks, threat intelligence, and emerging technologies to enhance asset hardening capabilities and governance practices.
• Mentor and provide technical direction to infrastructure engineers and technology teams while promoting security-by-design and secure configuration best practices across the organization.
  

Qualifications

Required Qualifications

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
1. Bachelor’s degree in Computer Science, Engineering, Information Systems, a related field, or equivalent education, training, and work-related experience.
2. Minimum of 7 years of professional experience in infrastructure engineering.
3. Advanced knowledge of enterprise infrastructure technologies including cloud, network, database, storage, platform, computing, and middleware.

Preferred Qualifications

1. Master’s degree in a relevant technical discipline.
2. Experience in the financial services industry.
3. Industry certifications such as CCIE, CISSP, CISM, or equivalent.
4. Strong experience with cloud platforms such as AWS, Azure, or Google Cloud.
5. Deep knowledge and experience in software development and technical designs and implementation.
6. Proven experience managing large IT infrastructure projects.

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law    E-Verify IER Right to Work