Senior Associate Security Engineer; Terraform​/AWS​/Azure

Job Overview

Designs advanced technical and cybersecurity capabilities across all phases of the software development lifecycle, including threat modeling, security testing, and penetration testing. Plans, builds, and enhances cybersecurity technologies by baselining systems, analyzing trends, and preparing for future requirements to deliver reliable, scalable, and secure technology solutions with significant impact on the job area.

• Deploying security controls for Truist and enabling Security controls.
• Experience with AWS, Azure, Terraform and CI/CD pipelines; hands‑on keyboarding.
• Assist in designing, planning, deploying, testing, and implementation phases of Cloud Security Controls.
• Automate operational workflows using Python.
• Build and manage CI/CD pipelines using Git Lab.
• Manage AWS services and ensure secure, scalable cloud environments.
• Build, deploy, and automate containerized applications.
• Develop infrastructure as code using Terraform and Cloud Formation.
• Implement and support cloud security tools (e.g., Wiz).
• Troubleshoot and resolve pipeline, cloud, and infrastructure issues.
• Collaborate with cross‑functional engineering and security teams.

• Proficiency in Python scripting.
• Strong Git Lab CI/CD pipeline development.
• Strong hands‑on experience with AWS, including IAM, ECS/EKS, EC2, S3, Cloud Trail, Cloud Watch, Cloud Front, VPC and AWS networking.
• Infrastructure as code with Terraform and Cloud Formation.
• Strong container development and automation experience.
• Experience with cloud security tools (e.g., Wiz).
• Exposure to Azure (preferred).
• Excellent communication and interpersonal skills.
• Strong analytical and problem‑solving capabilities.
• Ability to collaborate effectively across diverse teams.

• Bachelor’s degree or equivalent education, training, and work‑related experience.
• Minimum of 5 years of experience in security engineering or related cybersecurity roles.
• Advanced knowledge in cybersecurity principles, theories, and concepts.
• Proven experience in software development lifecycle security practices.
• Advanced knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

• Advanced cybersecurity certifications (e.g., CISSP, CISM, CEH, GIAC).
• Experience with security automation, orchestration, and advanced threat detection tools.
• Familiarity with emerging cybersecurity technologies, industry trends, and strategic risk management.

All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax‑preferred savings accounts, and a 401(k) plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full‑time or part‑time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays.

For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non‑temporary position for which you apply, based on full‑time or part‑time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.