Infrastructure Engineer

Truist • Atlanta, GA

25d

About The Position

Leads enterprise vulnerability and patch management activities to reduce technology risk and improve security posture across infrastructure and application environments. Applies vulnerability management principles, risk analysis, remediation governance, compliance requirements, and operational processes to drive timely remediation, support regulatory obligations, and improve security outcomes. Works independently with significant decision-making latitude and serves as a key advisor to technology, cybersecurity, risk, and audit stakeholders.

The role leads identification, prioritization, remediation, and reporting of infrastructure and application vulnerabilities; partners with technology teams to meet remediation SLAs and security standards; facilitates vulnerability governance; and monitors patch deployment, remediation progress, aging risk, exceptions, and compliance metrics. It also develops program dashboards and reporting, supports audits and regulatory inquiries, improves processes through automation and workflow enhancements, validates remediation evidence, advises teams on vulnerability management, and leads cross-functional remediation efforts for high-risk findings and emerging threats.

Requirements

• Bachelor’s degree in Computer Science, Engineering, Information Systems, a related field, or equivalent education, training, and work-related experience.
• At least 5 years of professional experience in infrastructure engineering.
• Strong knowledge of enterprise infrastructure technologies, including cloud, network, database, storage, platform, computing, and middleware.

Nice To Haves

• Strong understanding of ServiceNow Vulnerability Response (VR), including vulnerability data management, remediation tracking, SLA performance monitoring, and operational reporting.
• Experience developing and maintaining ServiceNow Vulnerability Response dashboards, reports, and scorecards to monitor remediation progress, aging vulnerabilities, compliance trends, and risk exposure.
• Ability to analyze vulnerability data and translate it into actionable metrics and reporting for technology teams, cybersecurity stakeholders, and management.
• At least 3 years of experience in patch management, vulnerability management, infrastructure engineering, cybersecurity operations, or related technology disciplines.
• Experience using enterprise vulnerability management platforms such as Qualys, Rapid7, Wiz, or similar tools.
• Understanding of vulnerability remediation lifecycle management, risk prioritization methodologies, and SLA tracking.
• Experience analyzing vulnerability scan results, security findings, and remediation plans.
• Experience supporting audit, compliance, risk management, or control testing activities.
• Familiarity with ITSM and workflow platforms such as ServiceNow.
• Knowledge of change management, release management, and technology governance processes.

Responsibilities

• Lead enterprise patch and vulnerability management efforts, including identification, prioritization, remediation, and reporting of infrastructure and application vulnerabilities.
• Coordinate with infrastructure, application, cloud, database, network, and platform teams to achieve timely remediation and compliance with SLAs and security standards.
• Facilitate vulnerability governance, including risk reviews, remediation tracking, exception management, escalations, and executive reporting.
• Monitor and report patch deployment, remediation progress, aging risk, exception requests, and compliance metrics.
• Develop and maintain dashboards, metrics, KPIs, and management reports to measure program effectiveness and remediation performance.
• Collaborate with Cyber Security, Risk Management, Audit, Compliance, Technology Operations, and application teams on examinations, control testing, audit requests, and regulatory inquiries.
• Identify opportunities to improve remediation efficiency through automation, workflow enhancements, system integrations, and process standardization.
• Review and validate remediation evidence, vulnerability closure activities, and patch deployment records for accuracy and audit readiness.
• Serve as a subject matter expert for vulnerability management and patch governance, providing guidance to technology teams and leadership.
• Lead cross-functional remediation initiatives involving high-risk vulnerabilities, critical security findings, emerging threats, and technology defect management.
• Maintain knowledge of security frameworks, vulnerability management practices, regulatory expectations, and emerging cybersecurity threats.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability insurance
• Accidental death and dismemberment coverage
• Tax-preferred savings accounts
• 401(k) plan
• At least 10 days of vacation during the first year, prorated based on hire date and full-time or part-time status
• 10 sick days, prorated
• Paid holidays
• Depending on position and division, the role may also be eligible for a defined benefit pension plan, restricted stock units, and/or deferred compensation plan

What This Job Offers

• Job Type: Full-time
• Career Level: Senior