Senior Security Engineer - Threat Modeling & Response

ITSMF; Charlotte (NC); On-site; USD 90,000 - 140,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) Plan

Paid Vacation & Holidays

Job summary

Truist Financial Corporation is seeking a cybersecurity engineer to advance security across the software development lifecycle in Charlotte, NC. You will implement threat modeling, security testing, and penetration testing on assigned platforms, and integrate security baselines and guardrails.

The role collaborates with product and engineering teams to apply secure-by-design practices, investigate incidents, and support ongoing improvements.

Qualifications

• Bachelor's degree or equivalent education, training, and work-related experience.
• Minimum of 3 years of experience in security engineering or related cybersecurity roles.
• Developing knowledge in cybersecurity principles, theories, and concepts.
• Experience in software development lifecycle security practices.
• Proficiency in implementing and managing information security technologies.

Responsibilities

• Implements cybersecurity solutions that protect key assets and guides design decisions.
• Performs threat modeling, security testing, and penetration testing on platforms and services.
• Integrates security technologies in test and production environments with approved configurations.
• Investigates security issues and performs root-cause analysis to prevent recurrence.
• Reviews threats, tools, and designs to support security plans and priorities.
• Collaborates with product and engineering to apply secure-by-design practices.

Skills

Threat modeling

Security testing

Penetration testing

Security automation

Vulnerability remediation

Education

Bachelor's degree or equivalent in relevant field

Job description

Truist Financial Corporation is seeking a cybersecurity engineer to advance security across the software development lifecycle in Charlotte, NC. You will implement threat modeling, security testing, and penetration testing on assigned platforms, and integrate security baselines and guardrails.

The role collaborates with product and engineering teams to apply secure-by-design practices, investigate incidents, and support ongoing improvements.