Lead Vulnerability Remediation Engineer - Infrastructure Engineer

Truist Bank • Wilson, NC

5d • Onsite

About The Position

The Lead Infrastructure Engineer within Truist’s Digital Workplace organization is accountable for enterprise governance, risk reduction, and lifecycle oversight of endpoint vulnerabilities and configuration compliance across physical and virtual (VDI) environments. This role partners across engineering, operations, and security stakeholders to identify, prioritize, remediate, and prevent endpoint security exposures while producing defensible, repeatable, and scalable solutions aligned to Truist standards.

This position supports a proactive operating model emphasizing automation, prevention, and measurable outcomes.

Requirements

• Bachelor's degree and five years of experience in development or application support or an equivalent combination of education and work experience.
• In- depth knowledge in information systems and ability to identify, apply, and implement best practices.
• Understanding of key business processes and competitive strategies related to the IT function.
• Ability to plan and manage projects.
• Ability to solve complex problems by applying best practices.
• Ability to provide direction and mentor less experienced teammates.
• Ability to interpret and convey complex, difficult, or sensitive information.

Nice To Haves

• Bachelor's degree and six years of experience or an equivalent combination of education and work experience.
• Banking or financial services experience.
• Experience in VDI environments and their unique compliance/remediation constraints.
• Familiarity with endpoint configuration governance methods (e.g., baselines, policy-as-code concepts, drift monitoring).
• Experience integrating security remediation with service management tooling and workflows.
• ITIL / Problem Management background and comfort operating within structured ITSM practices.
• Security or endpoint-focused certifications (examples: Security+, vendor tooling certs, or equivalent experience).
• Security-first mindset with strong attention to data integrity and reproducibility.
• Structured communication: crisp problem statements, explicit decision logic, and documented tradeoffs.
• Anticipates edge cases, failure modes, and operational constraints (bandwidth, maintenance windows, change risk).
• Designs solutions for scale and sustainability, not one-off fixes.
• Automation and prevention focused, aligned to the Digital Workplace direction.

Responsibilities

• Endpoint Vulnerability Management (Enterprise Scale)
• Secure Baseline Configuration (SBC) & Compliance (Windows 11 + VDI)
• Problem Management (Root Cause + Corrective Actions)
• Configuration Management & Deployment Enablement (SCCM / MECM)
• Automation & Engineering Enablement (PowerShell + Workflows)
• Data, Reporting, and Decision Support (Databases)
• Documentation, Communication, and Governance

Benefits

• Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates.
• Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays.
• Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees