Infrastructure Engineer

Truist; Raleigh (NC); On-site; USD 120,000 - 160,000; Full time

Job summary

Truist Financial Corporation is seeking a senior vulnerability management leader to drive enterprise patch and vulnerability management across infrastructure and applications. The role partners with infrastructure, cloud, database, network, and platform teams to ensure timely remediation and compliance with SLAs and security standards.

You will develop dashboards and reports, support examinations and controls testing, and mentor teams on vulnerability remediation and governance.

Qualifications

• Bachelor's degree or equivalent education/experience in a computer-related field.
• Minimum 5 years in infrastructure engineering with vulnerability/patch management.
• Strong knowledge of cloud, network, database, storage and middleware.

Responsibilities

• Lead enterprise patch and vulnerability management efforts across infrastructure and applications.
• Coordinate remediation with infrastructure, cloud, database, network, and platform teams to meet SLAs and security standards.
• Facilitate vulnerability governance: risk reviews, remediation tracking, and executive reporting.
• Monitor patch deployment, aging risk, exception requests, and compliance metrics.
• Develop dashboards, metrics, KPIs, and management reporting for the vulnerability management program.
• Collaborate with Cyber Security, Risk Management, Audit, Compliance, Technology Operations, and apps teams for examinations and audits.
• Identify opportunities to improve remediation efficiency via automation and process improvements.
• Review remediation evidence, vulnerability closure, and patch deployment records for audit readiness.
• Serve as SME for vulnerability management and patch governance to technology teams and leadership.
• Lead cross-functional remediation initiatives for high-risk findings and emerging threats.
• Maintain knowledge of security frameworks and regulatory expectations to enhance program.

Skills

Infrastructure engineering

Cloud technologies

Vulnerability management

ServiceNow

Education

Bachelor’s degree or equivalent

Tools

ServiceNow VR

Qualys

Rapid7

Wiz

Job description

Regular or Temporary:

Regular

Language Fluency: English (Required)

Work Shift:

1st shift (United States of America)

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Please review the following job description:

Leads enterprise vulnerability and patch management activities that reduce technology risk and improve security posture across infrastructure and application environments. Applies knowledge of vulnerability management principles, risk analysis, remediation governance, compliance requirements, and operational processes to drive timely remediation, support regulatory obligations, and improve overall security outcomes. Works independently with significant latitude for decision‑making and serves as a key advisor to technology, cybersecurity, risk, and audit stakeholders.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• 1. Lead enterprise patch and vulnerability management efforts by driving the identification, prioritization, remediation, and reporting of infrastructure and application security vulnerabilities across technology environments.
• 2. Partner with infrastructure, application, cloud, database, network, and platform teams to coordinate timely remediation of vulnerabilities and ensure compliance with established service level agreements (SLAs) and security standards.
• 3. Facilitate vulnerability governance processes, including risk reviews, remediation tracking, exception management, escalation activities, and executive reporting.
• 4. Monitor and report on patch deployment activities, vulnerability remediation progress, aging risk, exception requests, and compliance metrics to support operational and regulatory requirements.
• 5. Develop and maintain dashboards, metrics, key performance indicators (KPIs), and management reporting to measure vulnerability management program effectiveness and remediation performance.
• 6. Collaborate with Cyber Security, Risk Management, Audit, Compliance, Technology Operations, and application teams to support examinations, control testing, audit requests, and regulatory inquiries.
• 7. Identify opportunities to improve remediation efficiency through automation, workflow enhancements, system integrations, and process standardization.
• 8. Review and validate remediation evidence, vulnerability closure activities, and patch deployment records to ensure accuracy and audit readiness.
• 9. Serve as a subject matter expert for vulnerability management and patch governance processes, providing guidance and direction to technology teams and leadership.
• 10. Lead cross-functional remediation initiatives involving high-risk vulnerabilities, critical security findings, emerging threats, and technology defect management efforts.
• 11. Maintain knowledge of industry security frameworks, vulnerability management best practices, regulatory expectations, and emerging cybersecurity threats to enhance program effectiveness.

Qualifications

Required Qualifications

• 1. Bachelor’s degree in Computer Science, Engineering, Information Systems, a related field, or equivalent education, training, and work‑related experience.
• 2. Minimum of 5 years of professional experience in infrastructure engineering.
• 3. Strong knowledge of enterprise infrastructure technologies including cloud, network, database, storage, platform, computing, and middleware.

Preferred Qualifications

• Strong understanding of ServiceNow Vulnerability Response (VR), including vulnerability data management, remediation tracking, SLA performance monitoring, and operational reporting.
• Experience developing and maintaining ServiceNow Vulnerability Response dashboards, reports, and scorecards to monitor remediation progress, aging vulnerabilities, compliance trends, and risk exposure.
• Ability to analyze and translate vulnerability data into actionable metrics and reporting for technology teams, cybersecurity stakeholders, and management.
• 3+ years of experience in patch management, vulnerability management, infrastructure engineering, cybersecurity operations, or related technology disciplines.
• Experience using enterprise vulnerability management platforms such as Qualys, Rapid7, Wiz, or similar tools.
• Understanding of vulnerability remediation lifecycle management, risk prioritization methodologies, and service level agreement (SLA) tracking.
• Experience analyzing vulnerability scan results, security findings, and remediation plans.
• Experience supporting audit, compliance, risk management, or control testing activities.
• Familiarity with ITSM and workflow platforms such as ServiceNow.
• Knowledge of change management, release management, and technology governance processes.

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation

Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full‑time or part‑time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non‑temporary position for which you apply, based on full‑time or part‑time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law E-Verify IER Right to Work