Senior Infrastructure Engineer

Truist Bank • Atlanta, GA

24d

About The Position

Leads enterprise vulnerability and patch management activities to reduce technology risk and improve security posture across infrastructure and application environments. Applies advanced knowledge of vulnerability management, risk analysis, remediation governance, compliance requirements, and operational processes to drive timely remediation, support regulatory obligations, and improve security outcomes. Works independently with significant decision-making latitude and serves as a key advisor to technology, cybersecurity, risk, and audit stakeholders.

The role leads complex infrastructure vulnerability remediation, develops and improves patch and vulnerability management procedures, creates automation, performs infrastructure hardening, and monitors remediation and compliance outcomes. It also supports audit and regulatory activities, incident response, and cross-functional remediation efforts, while providing technical leadership and mentoring.

Requirements

• Bachelor’s degree in Computer Science, Engineering, Information Systems, a related field, or equivalent education, training, and work-related experience.
• At least 7 years of professional experience in infrastructure engineering.
• Advanced knowledge of enterprise infrastructure technologies, including cloud, network, database, storage, platform, computing, and middleware.

Nice To Haves

• Advanced expertise in ServiceNow Vulnerability Response (VR), including dashboard development, performance analytics, KPI/KRI design, remediation tracking, and executive-level reporting.
• Experience designing and governing enterprise vulnerability management reporting frameworks in ServiceNow VR to measure SLA attainment, remediation effectiveness, risk reduction, and program performance.
• Ability to develop and present complex vulnerability and remediation metrics through dashboards and reporting that support operational decisions, governance, audit readiness, and executive oversight.
• Experience enhancing ServiceNow VR reporting, workflows, integrations, and data quality to improve visibility, automation, and program effectiveness.
• At least 5 years of experience in vulnerability management, patch management, infrastructure engineering, cybersecurity, technology risk management, or related disciplines.
• Advanced experience leading enterprise patch and vulnerability management programs across multiple technology domains.
• Extensive experience with vulnerability management platforms such as Qualys, Rapid7, Wiz, Prisma Cloud, or equivalent solutions.
• Strong understanding of vulnerability prioritization methodologies, threat intelligence, risk-based remediation practices, and security exposure management.
• Experience developing and governing enterprise vulnerability management standards, procedures, controls, and operating models.
• Demonstrated experience driving remediation across infrastructure, cloud, databases, middleware, network, and application environments.
• Experience managing executive-level reporting, KPIs, KRIs, compliance metrics, and remediation performance measurements.
• Knowledge of regulatory and security frameworks such as NIST, CIS Controls, ISO 27001, FFIEC, and PCI DSS.
• Experience supporting internal audits, regulatory examinations, control assessments, and technology risk management activities.
• Strong knowledge of ServiceNow Vulnerability Response, ITSM processes, and enterprise governance practices.
• Experience designing automation solutions and process improvements that improve remediation efficiency and operational effectiveness.
• Proven ability to lead cross-functional initiatives involving cybersecurity, infrastructure engineering, technology operations, risk management, and audit stakeholders.
• Experience mentoring technical resources and providing subject matter expertise to engineering teams and leadership.
• Professional certifications preferred, such as CISSP, CISM, CRISC, Security+, CySA+, GSEC, ITIL, Qualys Certified Specialist, or equivalent.

Responsibilities

• Analyze vulnerability assessment results, security advisories, vendor notifications, threat intelligence, and security findings to determine remediation requirements, risk exposure, and mitigation strategies.
• Lead remediation of complex infrastructure vulnerabilities by coordinating patching, configuration changes, upgrades, and compensating controls with technology teams.
• Conduct root cause analysis of recurring vulnerabilities, remediation failures, and patching gaps; recommend improvements to reduce future risk.
• Support the development, implementation, and continuous improvement of patch and vulnerability management procedures, standards, and operational processes.
• Develop and maintain automation solutions for vulnerability remediation, compliance validation, reporting, and operational efficiency.
• Perform infrastructure hardening and implement security baseline configurations aligned with enterprise security standards.
• Troubleshoot complex patching, deployment, system performance, and vulnerability remediation issues affecting infrastructure availability and security.
• Monitor vulnerabilities, patch compliance, exposure, and remediation effectiveness using dashboards, reporting tools, and operational metrics.
• Review and validate remediation activities to ensure vulnerabilities are addressed, documented, and compliant with service-level commitments.
• Collaborate with cybersecurity, platform engineering, application support, and technology operations teams to prioritize and remediate critical and high-risk vulnerabilities.
• Support audit, risk, compliance, and regulatory activities by providing technical evidence, remediation documentation, and subject matter expertise.
• Assess emerging technologies, security threats, and infrastructure vulnerabilities to develop proactive remediation strategies and improve security resilience.
• Create and maintain technical documentation, implementation procedures, runbooks, and knowledge articles.
• Participate in incident response, problem management, and root cause analysis related to infrastructure vulnerabilities, security events, and patch management failures.
• Provide technical leadership and mentoring to infrastructure engineers and technical teams as a subject matter expert in patch management, vulnerability remediation, and infrastructure security.
• Identify opportunities to improve patch deployment success rates, remediation timelines, vulnerability reduction, and infrastructure security posture.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability insurance
• Accidental death and dismemberment coverage
• Tax-preferred savings accounts
• 401(k) plan
• At least 10 days of vacation during the first year, prorated based on hire date and employment status
• 10 sick days, prorated
• Paid holidays
• Depending on position and division, eligibility for a defined benefit pension plan, restricted stock units, and/or deferred compensation plan

What This Job Offers

• Job Type: Full-time
• Career Level: Senior