Security Engineer (Data Engineering/ Protection)

Truist Bank•Charlotte, NC

About The Position

The Security Engineer will serve as a technical expert for Protegrity, designing, implementing, and supporting enterprise-level data protection solutions. The role integrates Protegrity with new and existing business applications to protect sensitive data through tokenization, masking, and encryption. The engineer works with application teams, architects, cybersecurity leaders, and compliance stakeholders to apply data protection controls across the enterprise. The position also includes mentoring junior engineers and helping establish standards, patterns, and best practices for secure data handling. The engineer supports ongoing operations and incident response for the organization’s Tier 1 data protection platform, and develops and maintains technical documentation for architectures, integrations, and operational procedures.

Requirements

Bachelor’s degree or equivalent education, training, and work-related experience.
At least 5 years of experience in security engineering or related cybersecurity roles.
Advanced knowledge of cybersecurity principles, theories, and concepts.
Proven experience in software development lifecycle security practices.
Advanced knowledge of threat modeling, security testing, and penetration testing.
Experience implementing and managing complex information security technologies.

Nice To Haves

5–8+ years in software engineering, cybersecurity engineering, or data engineering roles.
Hands-on experience integrating Protegrity or a similar enterprise data protection platform.
Strong knowledge of tokenization, including format-preserving, reversible, and non-reversible approaches; static and dynamic data masking; and symmetric and asymmetric encryption and key management concepts.
Experience with application integration patterns such as APIs, SDKs, agents, proxy-based controls, and microservices.
Proficiency with at least one modern programming language, such as Java, Python, or .NET.
Strong SQL and analytical skills.
Deep understanding of data security, IAM, and compliance frameworks such as PCI DSS, GDPR, and HIPAA.
Ability to diagnose and resolve complex production issues in high-criticality environments.
Strong communication and cross-team collaboration abilities.
Experience working in cloud environments such as AWS, Azure, or GCP.
Familiarity with DevSecOps practices and CI/CD pipelines.
Prior experience mentoring or leading junior engineers.
Background with big data platforms such as Snowflake, the Hadoop ecosystem, or Spark.

Responsibilities

Design, implement, and maintain enterprise data protection solutions using Protegrity, including tokenization, masking, and encryption controls.
Integrate Protegrity with new and existing applications, databases, and data pipelines.
Develop, test, and optimize data protection policies, workflows, and integration patterns to meet security and compliance requirements.
Troubleshoot and resolve issues involving Protegrity agents, connectors, policy enforcement, and application integration.
Partner with application teams, architects, and cybersecurity stakeholders to ensure secure data handling throughout solution lifecycles.
Maintain architecture documentation, integration guides, runbooks, and operational procedures for data protection platforms.
Mentor and train junior engineers.
Support ongoing operations and incident response activities for the organization’s Tier 1 data protection platform.

Benefits

Medical insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
Accidental death and dismemberment coverage
Tax-preferred savings accounts
401(k) plan
At least 10 days of vacation during the first year, prorated as applicable
10 sick days, prorated as applicable
Paid holidays
Depending on position and division, the job may also be eligible for a defined benefit pension plan, restricted stock units, and/or a deferred compensation plan