Cybersecurity Principal Engineer – Cloud Security

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you’ll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won’t receive a response).

Regular or Temporary:
Regular

Language Fluency: English (Required)

Work Shift:
1st shift (United States of America)

Please review the following job description:

We are seeking a highly experienced Principal Cloud Security Engineer to lead the deployment, operationalization, and continuous improvement of Cloud Security tooling across our multi-cloud enterprise environment. This position will also be responsible for Cloud native AWS tooling and automating solutions leveraging Git Lab deployments, including AWS Guard Duty, Security Hub, AWS Inspector, etc. via Terraform.

*** Preferred Onsite Locations:
Atlanta, GA, Charlotte/Raleigh/Greensboro/Wilson, NC, Richmond, VA. Telecommuting/Remote workstyle may be considered for well-qualified individuals located outside of the Truist footprint. Teammate will work hours supporting Eastern Standard Time***

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

• Wiz Platform Deployment & Ownership
• CSPM, CWPP, CI/CD Integration & Remediation
• Alerting, Monitoring & Incident Response Integration
• Remediation, Ownership & Continuous Improvement
• Cloud Security Engineering & Architecture playbook creation.
• Leadership, Strategy & Governance
• Develop and maintain the technical IT/cyber capabilities including all phases of the software development lifecycle and software stack which includes threat modeling of application designs, static application security testing (SAST), software composition analysis (SCA), dynamic application security testing (DAST), and penetration testing.
• Lead efforts related to designing, planning, enhancing, and testing all Cloud cybersecurity technologies used throughout the enterprise including base-lining current systems, trend analysis, and capacity planning as required for future systems requirements and new technologies.
• Analyze information to determine, recommend, and plan the use of new Cloud information security technologies, or modifications to existing equipment and systems that will provide capability for proposed project or workload, efficient operation and effective use of allotted resources
• Lead the implementation of new Cloud security technologies or integration of existing technologies including initial configuration, installation, change management, and operational handoff
• Use sophisticated analytical thought through models, testing, and experience to exercise judgment and identify innovative solutions.
• Responsible for technical support of Cloud security technologies providing expert problem analysis and resolution in a timely manner.
• Creation of CI/CD automation leveraging Terraform for Cloud Security Services and Modules
• Leads teams or projects with moderate resource requirements, risk, and complexity.

Required Qualifications:

• Bachelor’s degree and 10 years of experience in systems engineering or an equivalent combination of education and work experience
• Strong functional and technical knowledge of information/cyber security capabilities with deep expertise in one or more of the following areas:
  Encryption, Data Security, Application Security, End Point Security, Identity and Access Management, Windows/Unix/Linux Systems Security, Mainframe Security, Perimeter Security, Network Security, Mobility Security, Cloud Security, Cyber Security, Cryptography, or Authentication Systems
• Strong understanding of service lifecycle management, strategic planning, and the cyber security landscape