Infrastructure Engineer - Asset Hardening Lead Analyst

Truist; Raleigh (NC); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

AD&D

401k plan

Vacation days

Sick days

Paid holidays

Job summary

Truist Financial Corporation is seeking a Senior Infrastructure Security professional to lead enterprise asset hardening and security baseline governance. The role partners with engineering, cybersecurity, risk, and operations teams to drive remediation, compliance, and continuous improvement of asset hardening processes.

The candidate will serve as a subject matter expert on security configuration governance, collaborate on audits, and develop dashboards and KPIs to measure compliance and risk

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Systems, or equivalent.
• Minimum of 5 years of professional experience in infrastructure engineering.
• Strong knowledge of enterprise infrastructure technologies including cloud, network, database, storage, platform, computing, and middleware.
• Advanced experience in asset hardening and security baseline programs.

Responsibilities

• Analyze security configuration assessment results, standards, benchmark requirements, and control findings to determine remediation requirements and mitigation strategies.
• Coordinate remediation of security baseline deficiencies with multiple platform teams to meet SLAs and security standards.
• Support asset hardening governance processes including remediation tracking, risk reviews, escalation, and reporting.
• Monitor and report on security baseline compliance, remediation progress, aging exceptions, and configuration risk metrics.
• Develop dashboards, metrics, KPIs, and reporting to measure asset hardening performance and compliance.
• Conduct root cause analysis for recurring configuration deficiencies and propose improvements to reduce risk.
• Collaborate with Cyber Security, Risk, Audit, Compliance, Tech Operations, and apps teams for examinations and audits.
• Identify opportunities to improve remediation efficiency through automation and process standardization.
• Review remediation evidence and configuration records to ensure audit readiness.
• Serve as SME for asset hardening and security baseline governance, guiding technology teams.

Skills

Infrastructure engineering

Cloud technologies

Security governance

Cross-functional collaboration

Education

Bachelor's degree in Computer Science or related field

Tools

ServiceNow VR

Dashboards & KPI reporting tools

Job description

Regular or Temporary: Regular

Language Fluency: English (Required)

Work Shift: 1st shift (United States of America)

Please review the following job description:

Leads enterprise asset hardening and security baseline governance activities to reduce technology risk and strengthen the security posture of infrastructure platforms. Applies expertise in secure configuration management, security standards, vulnerability mitigation, and compliance requirements to ensure technology assets are configured and maintained in accordance with enterprise policies and industry best practices. Partners with engineering, cybersecurity, risk, and operations teams to drive security baseline adoption, configuration compliance, remediation activities, and continuous improvement of asset hardening processes. Serves as a subject matter expert for security configuration governance and infrastructure risk reduction initiatives.

ESSENTIAL DUTIES AND RESPONSIBILITIES
Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

• Analyze security configuration assessment results, security standards, benchmark requirements, and control findings to determine remediation requirements, risk exposure, and mitigation strategies.
• Partner multiple platform teams to coordinate timely remediation of security baseline deficiencies and ensure compliance with established service level agreements (SLAs) and security standards.
• Support asset hardening governance processes, including remediation tracking, exception management, risk reviews, escalation activities, and management reporting.
• Monitor and report on security baseline compliance, remediation progress, aging exceptions, and configuration risk metrics to support operational and regulatory requirements.
• Develop and maintain dashboards, metrics, KPIs, and reporting to measure asset hardening performance and security configuration compliance.
• Conduct root cause analysis for recurring configuration deficiencies and control failures and recommend improvements to reduce security risk.
• Collaborate with Cyber Security, Risk Management, Audit, Compliance, Technology Operations, and application teams to support examinations, control testing, audit requests, and regulatory inquiries.
• Identify opportunities to improve remediation efficiency through automation, workflow enhancements, system integrations, and process standardization.
• Review and validate remediation evidence and configuration compliance records to ensure accuracy and audit readiness.
• Serve as a subject matter resource for asset hardening and security baseline compliance processes, providing guidance to technology teams and stakeholders.
• Coordinate cross-functional remediation initiatives involving high-risk configuration findings and security control deficiencies.
  

Qualifications

Required Qualifications

1. Bachelor’s degree in Computer Science, Engineering, Information Systems, a related field, or equivalent education, training, and work-related experience.
2. Minimum of 5 years of professional experience in infrastructure engineering.
3. Strong knowledge of enterprise infrastructure technologies including cloud, network, database, storage, platform, computing, and middleware.

Preferred Qualifications

• 5+ years of experience in infrastructure security, asset hardening, secure configuration management, cybersecurity, technology risk management, or related disciplines.
• Advanced experience developing, implementing, and governing enterprise asset hardening and security baseline programs.
• Strong knowledge of security frameworks and standards, including CIS Benchmarks, NIST, DISA STIGs, ISO 27001, FFIEC, and PCI DSS.
• Experience establishing secure configuration standards and governance processes across infrastructure, cloud, database, network, and application environments.
• Demonstrated experience leading enterprise remediation initiatives involving configuration-related risks, control deficiencies, and compliance findings.
• Advanced expertise in ServiceNow Vulnerability Response (VR), including dashboard development, KPI/KRI design, performance analytics, remediation tracking, and executive-level reporting.
• Experience designing and governing reporting frameworks within ServiceNow VR to measure security baseline compliance, remediation effectiveness, exception management, SLA attainment, and overall program performance.
• Proven ability to transform complex security and compliance data into executive dashboards and actionable reporting that supports governance, audit readiness, and risk-based decision making.
• Experience identifying opportunities to enhance ServiceNow VR reporting, workflows, integrations, automation, and data quality to improve program effectiveness and operational visibility.
• Experience supporting regulatory examinations, audit activities, risk assessments, and control testing engagements.
• Strong understanding of technology governance, risk management, and cybersecurity operating models.
• Experience leading cross-functional initiatives involving infrastructure engineering, cybersecurity, risk management, compliance, and technology operations teams.
• Demonstrated ability to mentor technical resources and provide strategic direction for asset hardening and security baseline governance initiatives.
• Professional certifications preferred, such as CISSP, CISM, CRISC, Security+, CySA+, GSEC, ITIL, Microsoft Security certifications, or equivalent.

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law E-Verify IER Right to Work