Security Engineer (Data Engineering/ Protection)

Truist • Raleigh, NC

6d

About The Position

The Security Engineer will serve as a technical expert for Protegrity, designing, implementing, and supporting enterprise-level data protection solutions. The role integrates Protegrity with new and existing business applications to secure sensitive data through tokenization, masking, and encryption. The engineer partners with application teams, architects, cybersecurity leaders, and compliance stakeholders to apply data protection controls across the enterprise. The role also mentors junior engineers and helps establish standards, patterns, and best practices for secure data handling.

The position supports the organization’s Tier 1 data protection platform, including ongoing operations and incident response. It is a regular role on the first shift. Truist describes benefits available to eligible regular teammates working 20 or more hours per week; specific eligibility depends on the division and position.

Requirements

• Bachelor’s degree or equivalent education, training, and work-related experience.
• At least 5 years of experience in security engineering or related cybersecurity roles.
• Advanced knowledge of cybersecurity principles, theories, and concepts.
• Proven experience with software development lifecycle security practices.
• Advanced knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Nice To Haves

• 5–8+ years in software engineering, cybersecurity engineering, or data engineering roles.
• Hands-on experience integrating Protegrity or a similar enterprise data protection platform.
• Knowledge of tokenization, including format-preserving, reversible, and non-reversible approaches.
• Knowledge of static and dynamic data masking.
• Knowledge of symmetric and asymmetric encryption and key management concepts.
• Experience with application integration patterns such as APIs, SDKs, agents, proxy-based controls, and microservices.
• Proficiency in at least one modern programming language, such as Java, Python, or .NET.
• Strong SQL and analytical skills.
• Understanding of data security, IAM, and compliance frameworks such as PCI DSS, GDPR, and HIPAA.
• Ability to diagnose and resolve complex production issues in high-criticality environments.
• Strong communication and cross-team collaboration abilities.
• Experience working in cloud environments such as AWS, Azure, or GCP.
• Familiarity with DevSecOps practices and CI/CD pipelines.
• Prior experience mentoring or leading junior engineers.
• Background with big data platforms such as Snowflake, the Hadoop ecosystem, or Spark.

Responsibilities

• Support the design, implementation, and maintenance of enterprise data protection solutions using Protegrity, including tokenization, masking, and encryption controls.
• Integrate Protegrity with new and existing applications, databases, and data pipelines across the organization.
• Develop, test, and optimize data protection policies, workflows, and integration patterns to meet security and compliance requirements.
• Troubleshoot and resolve issues involving Protegrity agents, connectors, policy enforcement, and application integration.
• Partner with application teams, architects, and cybersecurity stakeholders to ensure secure data handling throughout solution lifecycles.
• Maintain architecture documentation, integration guides, runbooks, and operational procedures for data protection platforms.
• Mentor and train junior engineers to build internal capability and continuity of subject matter expertise.
• Support ongoing operations and incident response for the organization’s Tier 1 data protection platform.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability insurance
• Tax-preferred savings accounts
• 401(k) plan
• At least 10 days of vacation during the first year, prorated based on hire date and full-time or part-time status
• 10 sick days, prorated
• Paid holidays
• Depending on position and division, the role may also be eligible for a defined benefit pension plan, restricted stock units, and/or a deferred compensation plan

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level