Infrastructure Engineer – Asset Hardening Lead Analyst

Truist • Atlanta, GA

2d

About The Position

Leads enterprise asset hardening and security baseline governance activities to reduce technology risk and strengthen infrastructure security. Applies expertise in secure configuration management, security standards, vulnerability mitigation, and compliance requirements to ensure technology assets are configured and maintained in accordance with enterprise policies and industry best practices. Partners with engineering, cybersecurity, risk, and operations teams to drive adoption of security baselines, configuration compliance, remediation, and continuous improvement. Serves as a subject matter expert for security configuration governance and infrastructure risk reduction initiatives.

Requirements

• Bachelor’s degree in Computer Science, Engineering, Information Systems, a related field, or equivalent education, training, and work-related experience.
• At least 5 years of professional experience in infrastructure engineering.
• Strong knowledge of enterprise infrastructure technologies, including cloud, network, database, storage, platform, computing, and middleware.

Nice To Haves

• At least 5 years of experience in infrastructure security, asset hardening, secure configuration management, cybersecurity, technology risk management, or related disciplines.
• Advanced experience developing, implementing, and governing enterprise asset-hardening and security-baseline programs.
• Knowledge of security frameworks and standards, including CIS Benchmarks, NIST, DISA STIGs, ISO 27001, FFIEC, and PCI DSS.
• Experience establishing secure configuration standards and governance processes across infrastructure, cloud, database, network, and application environments.
• Experience leading enterprise remediation initiatives involving configuration risks, control deficiencies, and compliance findings.
• Advanced expertise in ServiceNow Vulnerability Response (VR), including dashboard development, KPI/KRI design, performance analytics, remediation tracking, and executive-level reporting.
• Experience designing and governing ServiceNow VR reporting frameworks to measure security baseline compliance, remediation effectiveness, exception management, SLA attainment, and program performance.
• Ability to transform complex security and compliance data into executive dashboards and actionable reporting that supports governance, audit readiness, and risk-based decisions.
• Experience enhancing ServiceNow VR reporting, workflows, integrations, automation, and data quality.
• Experience supporting regulatory examinations, audit activities, risk assessments, and control testing engagements.
• Strong understanding of technology governance, risk management, and cybersecurity operating models.
• Experience leading cross-functional initiatives involving infrastructure engineering, cybersecurity, risk management, compliance, and technology operations.
• Ability to mentor technical resources and provide strategic direction for asset-hardening and security-baseline governance initiatives.
• Preferred professional certifications such as CISSP, CISM, CRISC, Security+, CySA+, GSEC, ITIL, Microsoft Security certifications, or equivalent.

Responsibilities

• Lead enterprise asset-hardening remediation by identifying, prioritizing, remediating, and reporting failed security configuration checks across technology environments.
• Analyze security configuration assessment results, standards, benchmark requirements, and control findings to determine remediation requirements, risk exposure, and mitigation strategies.
• Partner with platform teams to coordinate remediation of security baseline deficiencies and ensure compliance with service level agreements and security standards.
• Support asset-hardening governance, including remediation tracking, exception management, risk reviews, escalations, and management reporting.
• Monitor and report on security baseline compliance, remediation progress, aging exceptions, and configuration risk metrics.
• Develop and maintain dashboards, metrics, KPIs, and reporting to measure asset-hardening performance and security configuration compliance.
• Conduct root cause analysis of recurring configuration deficiencies and control failures and recommend improvements to reduce risk.
• Collaborate with cybersecurity, risk management, audit, compliance, technology operations, and application teams on examinations, control testing, audit requests, and regulatory inquiries.
• Identify opportunities to improve remediation efficiency through automation, workflow enhancements, system integrations, and process standardization.
• Review and validate remediation evidence and configuration compliance records for accuracy and audit readiness.
• Provide guidance as a subject matter resource on asset hardening and security baseline compliance processes.
• Coordinate cross-functional remediation initiatives involving high-risk configuration findings and security control deficiencies.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability insurance
• Accidental death and dismemberment coverage
• Tax-preferred savings accounts
• 401(k) plan
• At least 10 days of vacation during the first year, prorated based on hire date and full-time or part-time status
• 10 sick days, prorated
• Paid holidays
• May be eligible for a defined benefit pension plan, restricted stock units, and/or a deferred compensation plan, depending on position and division

What This Job Offers

• Job Type: Full-time
• Career Level: Senior