Java/Full-stack Engineer - Security Engineer

Truist Bank•Charlotte, NC

1d•Onsite

About The Position

Designs advanced enterprise applications across all phases of the software development lifecycle, including architecture, development, integration, testing, and deployment of Java-based, API-driven, and microservices solutions. Plans, builds, and enhances scalable technology platforms utilizing Java/J2EE, Spring Boot, Spring Cloud, SQL, and containerized environments such as OpenShift and Kubernetes. Analyzes trends, applies software engineering best practices, and prepares for future business requirements to deliver reliable, secure, and high-performing technology solutions that support banking and financial services operations with significant impact on the job area.

Requirements

Bachelor’s degree or equivalent education, training, and work-related experience.
Minimum of 5 years of experience in security engineering or related cybersecurity roles.
Advanced knowledge in cybersecurity principles, theories, and concepts.
Proven experience in software development lifecycle security practices.
Advanced knowledge of threat modeling, security testing, and penetration testing.
Experience implementing and managing complex information security technologies.

Nice To Haves

Master's degree and ten+ years of experience or an equivalent combination of education and work experience
Experience with Java/J2EE/JEE, Spring Boot, Spring Cloud (OpenFeign, Config), SQL, containerized platforms (OpenShift/Kubernetes), web services and microservices
Banking or financial services experience.
Knowledge of one or more of the following: Solid foundation in data structures, algorithms, and software design with strong analytical and debugging skills
Professional experience building high-quality apps or services from the ground up and scaling at an enterprise level
Strong understanding of SOA and/or Open API methodologies and service architectures
Experience with event-driven architectures and messaging systems such as Apache Kafka, including encrypted payload handling and multi-cluster producer/consumer configurations
Hands-on experience with Maven dependency management, including BOM-based version governance, multi-module library design, and resolving transitive dependency conflicts in large codebases
Familiarity with business rule engine technologies (BPMN, DMN) and configurable rule execution frameworks
Experience with TypeScript/Node.js backend development and modern frontend frameworks (React) for building internal tooling and operational applications
Working knowledge of CI/CD pipelines (GitLab CI), static analysis tooling (SonarQube), container image builds, and Helm-based deployments
Experience with relational databases (SQL Server, DB2) including JPA/Hibernate integration, and familiarity with mTLS, JKS/PKCS12 keystore management, and SSL-secured service-to-service communication
Experience with DevOps practices and platform engineering, including CI/CD pipeline design (GitLab CI), infrastructure-as-code, container orchestration (Kubernetes/OpenShift/Helm), and cloud platform migrations. Familiarity with build automation, artifact repository management (JFrog Artifactory), and environment promotion workflows across non-production and production tiers.
Demonstrated ability to leverage AI-assisted development tools (e.g., GitHub Copilot, GitLab Duo, ChatGPT) to accelerate day-to-day engineering tasks such as code analysis, dependency troubleshooting, code review, and technical documentation.

Responsibilities

Develop customized coding, software integration, perform analysis, configure solutions, using tools specific to the project or the area.
Lead and participate in the development, testing, implementation, maintenance, and support of highly complex solutions in adherence to company standards, including robust unit testing and support for subsequent release testing.
Build non-functional monitoring capabilities and provide escalated support for highly complex applications in production.
Build in and maintain security controls and monitoring in support of company standards.
Typically lead moderately complex projects and participate in larger, more complex initiatives.
Solve complex technical and operational problems. Act as a resource for teammates with less experience.
May oversee the work of a small team.
In an Agile environment: Responsible for delivering high quality working software and automating manual/reusable tasks working directly, and engage with, the business from the beginning of the design work. Leverage continuous engineering practices to deliver business value regarding effectiveness of the design. Actively participate in refining user stories. Responsible for design, developing, and maintaining automated unit testing, and supporting integration and functional testing. Responsible for providing automated monitoring capabilities, providing warranty support, and providing knowledge transfer to production support. Develop code in accordance with the acceptance criteria established by the Product Owner.
Design and maintain reusable library frameworks and shared service modules consumed by multiple runtime applications, ensuring clean dependency management and backward compatibility across releases.
Integrate and orchestrate calls to internal and external services (REST APIs, SOAP/WSDL endpoints, encrypted messaging systems) within multi-stage fraud detection and decision workflows, including implementing resilience patterns such as timeouts, fallbacks, and asynchronous processing.
Manage and remediate software supply chain health, including dependency version governance, vulnerability triage, and coordinating security patch rollouts across shared libraries and consuming applications.
Contribute to full-stack development across backend services and frontend applications, including building internal tooling and operational dashboards used by business and engineering stakeholders.
Support platform migration and DevOps initiatives, including CI/CD pipeline configuration, build infrastructure modernization, and environment provisioning, collaborating with platform engineering teams to ensure application readiness across deployment targets.