Senior Infrastructure Engineer

Truist • Atlanta, GA

2d

About The Position

Leads enterprise vulnerability and patch management activities to reduce technology risk and improve security posture across infrastructure and application environments. Applies advanced knowledge of vulnerability management, risk analysis, remediation governance, compliance requirements, and operational processes to drive timely remediation, support regulatory obligations, and improve security outcomes. Works independently with significant latitude for decision-making and serves as a key advisor to technology, cybersecurity, risk, and audit stakeholders.

The role provides technical leadership and mentoring to infrastructure engineers and technical teams, and serves as a subject matter expert in patch management, vulnerability remediation, and infrastructure security. It supports audit, risk, compliance, regulatory, incident response, and problem management activities related to infrastructure vulnerabilities and patch management.

Requirements

• Bachelor’s degree in Computer Science, Engineering, Information Systems, or a related field, or equivalent education, training, and work-related experience.
• Minimum of 7 years of professional experience in infrastructure engineering.
• Advanced knowledge of enterprise infrastructure technologies, including cloud, network, database, storage, platform, computing, and middleware.

Nice To Haves

• Advanced expertise in ServiceNow Vulnerability Response (VR), including dashboard development, performance analytics, KPI/KRI design, remediation tracking, and executive-level reporting.
• Experience designing and governing enterprise vulnerability management reporting frameworks in ServiceNow VR to measure SLA attainment, remediation effectiveness, risk reduction, and program performance.
• Ability to develop and present complex vulnerability and remediation metrics through dashboards and reporting for operational decisions, governance, audit readiness, and executive oversight.
• Experience improving ServiceNow VR reporting, workflows, integrations, and data quality to enhance visibility, automation, and program effectiveness.
• 5 or more years of experience in vulnerability management, patch management, infrastructure engineering, cybersecurity, technology risk management, or related disciplines.
• Advanced experience leading enterprise patch and vulnerability management programs across multiple technology domains.
• Extensive experience with vulnerability management platforms such as Qualys, Rapid7, Wiz, Prisma Cloud, or equivalent solutions.
• Strong understanding of vulnerability prioritization methodologies, threat intelligence, risk-based remediation practices, and security exposure management.
• Experience developing and governing enterprise vulnerability management standards, procedures, controls, and operating models.
• Demonstrated experience driving remediation across infrastructure, cloud, databases, middleware, network, and application environments.
• Experience managing executive-level reporting, KPIs, KRIs, compliance metrics, and remediation performance measurements.
• Knowledge of security frameworks and standards including NIST, CIS Controls, ISO 27001, FFIEC, and PCI DSS.
• Experience supporting internal audit, regulatory examinations, control assessments, and technology risk management activities.
• Strong knowledge of ServiceNow Vulnerability Response, ITSM processes, and enterprise governance practices.
• Experience designing automation solutions and process improvements that enhance remediation efficiency and operational effectiveness.
• Ability to lead cross-functional initiatives involving cybersecurity, infrastructure engineering, technology operations, risk management, and audit stakeholders.
• Experience mentoring technical resources and providing subject matter expertise to engineering teams and leadership.
• Preferred professional certifications such as CISSP, CISM, CRISC, Security+, CySA+, GSEC, ITIL, Qualys Certified Specialist, or equivalent.

Responsibilities

• Analyze vulnerability assessment results, threat intelligence, security advisories, vendor notifications, and security findings to identify remediation requirements, risk exposure, and mitigation strategies.
• Lead remediation of complex infrastructure vulnerabilities, coordinating patches, configuration changes, upgrades, and compensating controls with technology teams.
• Conduct root cause analysis of recurring vulnerabilities, remediation failures, and patching gaps, and recommend process improvements.
• Support development, implementation, and continuous improvement of patch and vulnerability management procedures, standards, and operational processes.
• Develop and maintain automation solutions for vulnerability remediation, compliance validation, reporting, and operational efficiency.
• Perform infrastructure hardening and implement security baseline configurations aligned with enterprise security standards.
• Troubleshoot complex patching, deployment, system performance, and vulnerability remediation issues affecting availability and security.
• Monitor vulnerabilities, patch compliance, exposure, and remediation effectiveness using dashboards, reporting tools, and operational metrics.
• Review and validate remediation activities for proper resolution, documentation, and compliance with service-level commitments.
• Collaborate with cybersecurity, platform engineering, application support, and technology operations teams to prioritize and remediate critical and high-risk vulnerabilities.
• Provide technical evidence, remediation documentation, and subject matter expertise for audit, risk, compliance, and regulatory activities.
• Assess emerging technologies, security threats, and infrastructure vulnerabilities to develop proactive remediation strategies and improve security resilience.
• Create and maintain technical documentation, implementation procedures, runbooks, and knowledge articles.
• Participate in incident response, problem management, and root cause analysis related to infrastructure vulnerabilities, security events, and patch management failures.
• Provide technical leadership and mentoring to infrastructure engineers and technical teams.
• Identify opportunities to improve patch deployment success rates, remediation timelines, vulnerability reduction, and infrastructure security posture.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability insurance
• Accidental death and dismemberment coverage
• Tax-preferred savings accounts
• 401(k) plan
• At least 10 days of vacation during the first year, prorated as applicable
• 10 sick days, prorated as applicable
• Paid holidays
• May be eligible for a defined benefit pension plan, restricted stock units, and/or deferred compensation plan, depending on position and division

What This Job Offers

• Job Type: Full-time
• Career Level: Senior