Lead Vulnerability Remediation Engineer - Infrastructure Engineer

** The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.*
* Need Help? ( site FAQ-.pdf)

_If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to_  Accessibility ()

_(accommodation requests only; other inquiries won't receive a response)._

** Regular or Temporary:*
* Regular

** Language Fluency:
** English (Required)

*
* Work Shift:

*
* 1st shift (United States of America)

** Please review the following job description:*
* The Lead Infrastructure Engineer within Truist's Digital Workplace organization is accountable for enterprise governance, risk reduction, and lifecycle oversight of endpoint vulnerabilities and configuration compliance across physical and virtual (VDI) environments. This role partners across engineering, operations, and security stakeholders to identify, prioritize, remediate, and prevent endpoint security exposures while producing defensible, repeatable, and scalable solutions aligned to Truist standards.

This position supports a proactive operating model emphasizing automation, prevention, and measurable outcomes.

** For this opportunity, Truist will not sponsor an applicant for work visa status or employment authorization, nor will we offer any immigration-related support for this position (including, but not limited to H-1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN-1 or TN-2, E-3, O-1, or future sponsorship for U.S. lawful permanent residence status.)*
* ** This position is office-centric 5 days a week in our Truist hubs.*
* ** GENERAL

ESSENTIAL DUTIES AND RESPONSIBILITIES *
* Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

1. Builds and designs enterprise infrastructure technology platforms and systems across various environments, such as cloud, network, database, storage, platform, computing, and/or middleware domains.

2. Applies automation, monitoring, and optimization techniques to ensure high availability and performance of infrastructure.

3. Collaborates with cross-functional teams to integrate new technologies and continuously improve infrastructure standards and processes.

4. Troubleshoots and resolves moderately complex technical issues impacting infrastructure performance and reliability.

5. Supports compliance with technology strategies, standards, and governance to mitigate risks and ensure regulatory adherence.

6. Deploys infrastructure designs, configurations, and procedures to support operational consistency and knowledge sharing.

7. Proactively contributes to technical innovation efforts and advancement of infrastructure capabilities.

8. Works with technical project teams to support infrastructure deliverables and solutions.

9. Makes adjustments or recommends enhancements in technical systems and processes to improve effectiveness of area of responsibility.

** Specific job Function:*
* 1) Endpoint Vulnerability Management (Enterprise Scale)

+ Operate and mature the endpoint vulnerability lifecycle: discovery → prioritization → remediation → validation → reporting.

+ Perform vulnerability identification and prioritization using Qualys and or other security agents, including (but not limited to) Microsoft Security Updates and major 3rd‑party applications (e.g., Chrome, Edge, legacy dependencies where applicable).

+ Drive risk-based remediation workflows aligned to business impact, exploitability, and fleet exposure.

+ Validate remediation efficacy and ensure vulnerability closure is auditable and reproducible.

2) Secure Baseline Configuration (SBC) & Compliance (Windows 11 + VDI)

+ Own Secure Baseline Configuration compliance outcomes for Windows 11 across physical devices and VDI.

+ Detect and correct compliance drift; build governance routines to prevent recurring deviation.

+…