Lead Cloud Security Engineer — IaC, CSPM & CI/CD

Truist; Raleigh (NC); On-site; USD 100,000 - 126,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) plan

Vacation days

Sick days

Paid holidays

Job summary

Truist in Raleigh seeks an experienced Cloud Security Engineer to lead deployment and operation of cloud security tooling across a multi-cloud environment, including AWS GuardDuty, Defender for Cloud, Security Hub, Inspector, and Terraform-based automation.

The role emphasizes IaC security, threat detection, and compliance with CSA, NIST, CIS benchmarks and Zero Trust. Preferred CCSP/AWS Security Specialty. Base salary 100,000–126,000 USD with incentives.

Qualifications

• Bachelor's degree or equivalent education, training, and work-related experience.
• Minimum of 5 years of experience in security engineering or related cybersecurity roles.
• Advanced knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Advanced knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Responsibilities

• Wiz Platform Deployment & Ownership.
• CSPM, CWPP, CI/CD Integration & Remediation.
• Platform Expertise: AWS IAM, AWS KMS, Entra ID, Azure Key Vault, Security Center.
• Network & Infrastructure Security: Harden VPCs, WAFs, secure micro-segmentation.
• IaC Security: guardrails in CI/CD pipelines.
• Threat Detection & Incident Response: monitor with CloudWatch / Sentinel.
• Scripting & Automation: Python, PowerShell, Terraform, ARM templates.
• Compliance: CSA, NIST, CIS benchmarks, Zero Trust.
• Lead new security tech deployments and integrations.
• Provide expert analysis and timely resolution of issues.
• Lead teams/projects with moderate resources and risk.
• Leadership, Strategy & Governance.

Skills

Cloud security

CSPM

CWPP

CI/CD security

IAM

KMS

Entra ID

Azure Key Vault

Security Center

WAF

IaC security

Guardrails CI/CD

CloudWatch

Microsoft Sentinel

Python

PowerShell

Terraform

ARM templates

CSA

NIST

CIS benchmarks

Zero Trust

CCSP

AWS Security Specialty

Azure Security Engineer

Education

Bachelor's degree

Tools

AWS GuardDuty

Defender for Cloud

Security Hub

AWS Inspector

Terraform

ARM templates

Job description

Truist in Raleigh seeks an experienced Cloud Security Engineer to lead deployment and operation of cloud security tooling across a multi-cloud environment, including AWS GuardDuty, Defender for Cloud, Security Hub, Inspector, and Terraform-based automation.

The role emphasizes IaC security, threat detection, and compliance with CSA, NIST, CIS benchmarks and Zero Trust. Preferred CCSP/AWS Security Specialty. Base salary 100,000–126,000 USD with incentives.