Senior Infrastructure Engineer

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary:

Regular

Language Fluency: English (Required)

Work Shift:

1st shift (United States of America)

Please review the following job description:

Leads enterprise vulnerability and patch management activities that reduce technology risk and improve security posture across infrastructure and application environments. Applies advanced knowledge of vulnerability management principles, risk analysis, remediation governance, compliance requirements, and operational processes to drive timely remediation, support regulatory obligations, and improve overall security outcomes. Works independently with significant latitude for decision-making and serves as a key advisor to technology, cybersecurity, risk, and audit stakeholders.

ESSENTIAL DUTIES AND RESPONSIBILITIES
Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.
1. Analyze vulnerability assessment results, security advisories, and vendor notifications to identify remediation requirements and develop technical mitigation strategies.

2. Lead the remediation of complex infrastructure vulnerabilities by coordinating with technology teams to implement patches, configuration changes, upgrades, and compensating controls.

3. Analyze vulnerability assessment results, threat intelligence, vendor advisories, and security findings to determine remediation requirements, risk exposure, and mitigation strategies.

4. Conduct root cause analysis for recurring vulnerabilities, remediation failures, and patching gaps, and recommend process improvements to reduce future risk exposure.

5. Support the development, implementation, and continuous improvement of patch management and vulnerability management procedures, standards, and operational processes.

6. Develop and maintain automation solutions that improve vulnerability remediation, compliance validation, reporting, and operational efficiency.

7. Perform infrastructure hardening activities and implement security baseline configurations to reduce attack surfaces and ensure alignment with enterprise security standards.

8. Troubleshoot and resolve complex patching, deployment, system performance, and vulnerability remediation issues affecting infrastructure availability and security.

9. Monitor infrastructure vulnerabilities, patch compliance, vulnerability exposure, and remediation effectiveness through dashboards, reporting tools, and operational metrics.

10. Review and validate remediation activities to ensure vulnerabilities are properly addressed, documented, and compliant with established service-level commitments.

11. Collaborate with cybersecurity, platform engineering, application support, and technology operations teams to prioritize and remediate critical and high-risk vulnerabilities.

12. Support audit, risk, compliance, and regulatory activities by providing technical evidence, remediation documentation, and subject matter expertise related to patch and vulnerability management controls.

13. Assess emerging technologies, security threats, and infrastructure vulnerabilities to develop proactive remediation strategies and improve security resilience.

14. Create and maintain technical documentation, implementation procedures, runbooks, and knowledge articles to support operational consistency.

15. Participate in incident response, problem management, and root cause analysis efforts related to infrastructure vulnerabilities, security events, and patch management failures.

16. Provide technical leadership and mentoring to infrastructure engineers and technical teams while serving as a subject matter expert in patch management, vulnerability remediation, and infrastructure security.

17. Continuously identify opportunities to improve patch deployment success rates, remediation timelines, vulnerability reduction, and overall infrastructure security posture.

Qualifications
Required Qualifications
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
1. Bachelor’s degree in Computer Science, Engineering, Information Systems, a related field, or equivalent education, training, and work-related experience.
2. Minimum of 7 years of professional experience in infrastructure engineering.
3. Advanced knowledge of enterprise infrastructure technologies including cloud, network, database, storage, platform, computing, and middleware.

Preferred Qualifications

• Advanced expertise in ServiceNow Vulnerability Response (VR), including dashboard development, performance analytics, KPI/KRI design, remediation tracking, and executive-level reporting.
• Experience designing and governing enterprise vulnerability management reporting frameworks within ServiceNow VR to measure SLA attainment, remediation effectiveness, risk reduction, and program performance.
• Proven ability to develop and present complex vulnerability and remediation metrics through dashboards and reporting that support operational decision-making, governance activities, audit readiness, and executive oversight.
• Experience identifying opportunities to enhance ServiceNow VR reporting, workflows, integrations, and data quality to improve visibility, automation, and program effectiveness.
• 5+ years of experience in vulnerability management, patch management, infrastructure engineering, cybersecurity, technology risk management, or related disciplines.
• Advanced experience leading enterprise patch and vulnerability management programs across multiple technology domains.
• Extensive experience with vulnerability management platforms, including, Qualys, Rapid7, Wiz, Prisma Cloud, or equivalent solutions.
• Strong understanding of vulnerability prioritization methodologies, threat intelligence, risk-based remediation practices, and security exposure management.
• Experience developing and governing enterprise vulnerability management standards, procedures, controls, and operating models.
• Demonstrated experience driving remediation efforts across infrastructure, cloud, databases, middleware, network, and application environments.
• Experience managing executive-level reporting, KPIs, KRIs, compliance metrics, and remediation performance measurements.
• Knowledge of regulatory and security frameworks including NIST, CIS Controls, ISO 27001, FFIEC, PCI DSS, and other industry security standards.
• Experience supporting internal audit, regulatory examinations, control assessments, and technology risk management activities.
• Strong knowledge of ServiceNow Vulnerability Response, ITSM processes, and enterprise governance practices.
• Experience designing automation solutions and process improvements that enhance remediation efficiency and operational effectiveness.
• Proven ability to lead cross-functional initiatives involving cybersecurity, infrastructure engineering, technology operations, risk management, and audit stakeholders.
• Experience mentoring technical resources and providing subject matter expertise to engineering teams and leadership.
• Professional certifications preferred, such as CISSP, CISM, CRISC, Security+, CySA+, GSEC, ITIL, Qualys Certified Specialist, or equivalent.

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law E-Verify IER Right to Work