Java/Full-Stack Engineer - Fraud Technology/Security Engineer - ON-SITE REQUIRED IN LISTED HUBS

Truist Financial; Charlotte (NC); On-site; USD 125,000 - 150,000; Full time

Job summary

Truist Financial is seeking a seasoned security-focused software engineer to design, develop, and secure Java/J2EE microservices and full-stack applications. You will ensure secure SDLC practices, implement threat modeling and testing, and work across OpenShift, Kubernetes, and AWS in a banking context.

The role emphasizes building secure, scalable platforms, collaborating with platform engineers, and delivering high-quality software with automated testing and monitoring.

Qualifications

• 1. Bachelor’s degree or equivalent education, training, and work-related experience.
• 2. Minimum of 5 years of experience in security engineering or related cybersecurity roles.
• 3. Advanced knowledge in cybersecurity principles, theories, and concepts.
• 4. Proven experience in software development lifecycle security practices.
• 5. Advanced knowledge of threat modeling, security testing, and penetration testing.
• 6. Experience implementing and managing complex information security technologies.

Responsibilities

• Develop customized coding, software integration, and configuration solutions.
• Lead and participate in development, testing, implementation, maintenance, and support of complex solutions per standards.
• Build and monitor non-functional capabilities and provide support for production apps.
• Implement security controls and monitoring per company standards.
• Lead moderately complex projects and collaborate on larger initiatives.
• Mentor teammates and oversee small teams when needed.
• In Agile: deliver high-quality software, refine user stories, automate testing, and support deployment.
• Design and maintain reusable libraries and shared service modules across runtime apps.
• Integrate internal and external services in fraud workflows with resilience patterns.
• Manage software supply chain health, including dependency governance and patch rollouts.
• Contribute to full-stack development and internal tooling for ops and business stakeholders.
• Support platform migration and DevOps initiatives, including CI/CD and IaC.

Skills

Security engineering

Cybersecurity principles

Threat modeling

Security testing

Penetration testing

Information security technologies

Banking domain knowledge

Education

Bachelor's degree or equivalent education

Master's degree (preferred)

Tools

Java/J2EE/JEE

Spring Boot

Spring Cloud

SQL

OpenShift

Kubernetes

REST/SOAP APIs

Maven

CI/CD (GitLab CI)

JKS/PKCS12 keystore

SSL/TLS security

Job description

Regular or Temporary:

Regular

Language Fluency: English (Required)

Work Shift:

1st shift (United States of America)

Please review the following job description:

Designs advanced enterprise applications across all phases of the software development lifecycle, including architecture, development, integration, testing, and deployment of Java-based, API-driven, and microservices solutions as well as full-stack web applications built with TypeScript, Node.js, and modern frontend frameworks such as React. Plans, builds, and enhances scalable technology platforms utilizing Java/J2EE, Spring Boot, Spring Cloud, SQL, containerized environments such as OpenShift and Kubernetes, and cloud infrastructure on AWS. Analyzes trends, applies software engineering best practices, and prepares for future business requirements to deliver reliable, secure, and high-performing technology solutions that support banking and financial services operations with significant impact on the job area.

Job Description

For this opportunity, Truist will not sponsor an applicant for work visa status or employment authorization, nor will we offer any immigration-related support for this position (including, but not limited to H-1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN-1 or TN-2, E-3, O-1, or future sponsorship for U.S. lawful permanent residence status.)

ESSENTIAL DUTIES AND RESPONSIBILITIES

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

• 1. Develop customized coding, software integration, perform analysis, configure solutions, using tools specific to the project or the area.
• 2. Lead and participate in the development, testing, implementation, maintenance, and support of highly complex solutions in adherence to company standards, including robust unit testing and support for subsequent release testing.
• 3. Build non-functional monitoring capabilities and provide escalated support for highly complex applications in production.
• 4. Build in and maintain security controls and monitoring in support of company standards.
• 5. Typically lead moderately complex projects and participate in larger, more complex initiatives.
• 6. Solve complex technical and operational problems. Act as a resource for teammates with less experience.
• 7. May oversee the work of a small team.
• 8. In an Agile environment: Responsible for delivering high quality working software and automating manual/reusable tasks working directly, and engage with, the business from the beginning of the design work. Leverage continuous engineering practices to deliver business value regarding effectiveness of the design. Actively participate in refining user stories. Responsible for design, developing, and maintaining automated unit testing, and supporting integration and functional testing. Responsible for providing automated monitoring capabilities, providing warranty support, and providing knowledge transfer to production support. Develop code in accordance with the acceptance criteria established by the Product Owner.
• 9. Design and maintain reusable library frameworks and shared service modules consumed by multiple runtime applications, ensuring clean dependency management and backward compatibility across releases.
• 10. Integrate and orchestrate calls to internal and external services (REST APIs, SOAP/WSDL endpoints, encrypted messaging systems) within multi-stage fraud detection and decision workflows, including implementing resilience patterns such as timeouts, fallbacks, and asynchronous processing.
• 11. Manage and remediate software supply chain health, including dependency version governance, vulnerability triage, and coordinating security patch rollouts across shared libraries and consuming applications.
• 12. Contribute to full-stack development across backend services and frontend applications, including building internal tooling and operational dashboards used by business and engineering stakeholders.
• 13. Support platform migration and DevOps initiatives, including CI/CD pipeline configuration, build infrastructure modernization, and environment provisioning, collaborating with platform engineering teams to ensure application readiness across deployment targets.

Qualifications

Required Qualifications

• 1. Bachelors degree or equivalent education, training, and work-related experience.
• 2. Minimum of 5 years of experience in security engineering or related cybersecurity roles.
• 3. Advanced knowledge in cybersecurity principles, theories, and concepts.
• 4. Proven experience in software development lifecycle security practices.
• 5. Advanced knowledge of threat modeling, security testing, and penetration testing.
• 6. Experience implementing and managing complex information security technologies.

Preferred Qualifications

• 1. Master's degree and ten+ years of experience or an equivalent combination of education and work experience
• 2. Experience with Java/J2EE/JEE, Spring Boot, Spring Cloud (OpenFeign, Config), SQL, containerized platforms (OpenShift/Kubernetes), web services and microservices
• 3. Banking or financial services experience. Knowledge of one or more of the following: Solid foundation in data structures, algorithms, and software design with strong analytical and debugging skills
• 4. Professional experience building high-quality apps or services from the ground up and scaling at an enterprise level
• 5. Strong understanding of SOA and/or Open API methodologies and service architectures
• 6. Experience with event-driven architectures and messaging systems such as Apache Kafka, including encrypted payload handling and multi-cluster producer/consumer configurations
• 7. Hands-on experience with Maven dependency management, including BOM-based version governance, multi-module library design, and resolving transitive dependency conflicts in large codebases
• 8. Familiarity with business rule engine technologies (BPMN, DMN) and configurable rule execution frameworks
• 9. Experience with TypeScript/Node.js backend development and modern frontend frameworks (React) for building internal tooling and operational applications
• 10. Working knowledge of CI/CD pipelines (GitLab CI), static analysis tooling (SonarQube), container image builds, and Helm-based deployments
• 11. Experience with relational databases (SQL Server, DB2) including JPA/Hibernate integration, and familiarity with mTLS, JKS/PKCS12 keystore management, and SSL-secured service-to-service communication
• 12. Experience with DevOps practices and platform engineering, including CI/CD pipeline design (GitLab CI), infrastructure-as-code, container orchestration (Kubernetes/OpenShift/Helm), and cloud platform migrations. Familiarity with build automation, artifact repository management (JFrog Artifactory), and environment promotion workflows across non-production and production tiers.
• 13. Demonstrated ability to leverage AI-assisted development tools (e.g., GitHub Copilot, GitLab Duo, ChatGPT) to accelerate day-to-day engineering tasks such as code analysis, dependency troubleshooting, code review, and technical documentation.

The annual base salary for this position is $125,000 - $150,000.

Benefits

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truists generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truists defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law E-Verify IER Right to Work