Java/Full-stack Engineer - Security Engineer

Designs advanced enterprise applications across all phases of the software development lifecycle, including architecture, development, integration, testing, and deployment of Java-based, API-driven, and microservices solutions. Plans, builds, and enhances scalable technology platforms utilizing Java/J2EE, Spring Boot, Spring Cloud, SQL, and containerized environments such as OpenShift and Kubernetes. Analyzes trends, applies software engineering best practices, and prepares for future business requirements to deliver reliable, secure, and high-performing technology solutions that support banking and financial services operations with significant impact on the job area., Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

1. Develop customized coding, software integration, perform analysis, configure solutions, using tools specific to the project or the area.
2. Lead and participate in the development, testing, implementation, maintenance, and support of highly complex solutions in adherence to company standards, including robust unit testing and support for subsequent release testing.
3. Build non-functional monitoring capabilities and provide escalated support for highly complex applications in production.
4. Build in and maintain security controls and monitoring in support of company standards.
5. Typically lead moderately complex projects and participate in larger, more complex initiatives.
6. Solve complex technical and operational problems. Act as a resource for teammates with less experience.
7. May oversee the work of a small team.
8. In an Agile environment: Responsible for delivering high quality working software and automating manual/reusable tasks working directly, and engage with, the business from the beginning of the design work. Leverage continuous engineering practices to deliver business value regarding effectiveness of the design. Actively participate in refining user stories. Responsible for design, developing, and maintaining automated unit testing, and supporting integration and functional testing. Responsible for providing automated monitoring capabilities, providing warranty support, and providing knowledge transfer to production support. Develop code in accordance with the acceptance criteria established by the Product Owner.
9. Design and maintain reusable library frameworks and shared service modules consumed by multiple runtime applications, ensuring clean dependency management and backward compatibility across releases.
10. Integrate and orchestrate calls to internal and external services (REST APIs, SOAP/WSDL endpoints, encrypted messaging systems) within multi-stage fraud detection and decision workflows, including implementing resilience patterns such as timeouts, fallbacks, and asynchronous processing.
11. Manage and remediate software supply chain health, including dependency version governance, vulnerability triage, and coordinating security patch rollouts across shared libraries and consuming applications.
12. Contribute to full-stack development across backend services and frontend applications, including building internal tooling and operational dashboards used by business and engineering stakeholders.
13. Support platform migration and DevOps initiatives, including CI/CD pipeline configuration, build infrastructure modernization, and environment provisioning, collaborating with platform engineering teams to ensure application readiness across deployment targets.

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

1. Bachelor’s degree or equivalent education, training, and work-related experience.
2. Minimum of 5 years of experience in security engineering or related cybersecurity roles.
3. Advanced knowledge in cybersecurity principles, theories, and concepts.
4. Proven experience in software development lifecycle security practices.
5. Advanced knowledge of threat modeling, security testing, and penetration testing.
6. Experience implementing and managing complex information security technologies., 1. Master’s degree and ten+ years of experience or an equivalent combination of education and work experience
7. Experience with Java/J2EE/JEE, Spring Boot, Spring Cloud (OpenFeign, Config), SQL, containerized platforms (OpenShift/Kubernetes), web services and microservices
8. Banking or financial services experience. Knowledge of one or more of the following: Solid foundation in data structures, algorithms, and software design with strong analytical and debugging skills
9. Professional experience building high-quality apps or services from the ground up and scaling at an enterprise level
10. Strong understanding of SOA and/or Open API methodologies and service architectures
11. Experience with event-driven architectures and messaging systems such as Apache Kafka, including encrypted payload handling and multi-cluster producer/consumer configurations
12. Hands-on experience with Maven dependency management, including BOM-based version governance, multi-module library design, and resolving transitive dependency conflicts in large codebases
13. Familiarity with business rule engine technologies (BPMN, DMN) and configurable rule execution frameworks
14. Experience with TypeScript/Node.js backend development and modern frontend frameworks (React) for building internal tooling and operational applications
15. Working knowledge of CI/CD pipelines (GitLab CI), static analysis tooling (SonarQube), container image builds, and Helm-based deployments
16. Experience with relational databases (SQL Server, DB2) including JPA/Hibernate integration, and familiarity with mTLS, JKS/PKCS12 keystore management, and SSL-secured service-to-service communication
17. Experience with DevOps practices and platform engineering, including CI/CD pipeline design (GitLab CI), infrastructure-as-code, container orchestration (Kubernetes/OpenShift/Helm), and cloud platform migrations. Familiarity with build automation, artifact repository management (JFrog Artifactory), and environment promotion workflows across non-production and production tiers.
18. Demonstrated ability to leverage AI-assisted development tools (e.g., GitHub Copilot, GitLab Duo, ChatGPT) to accelerate day-to-day engineering tasks such as code analysis, dependency troubleshooting, code review, and technical documentation.

The annual base salary for this position is $125,000 - $150,000.

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site (https://benefits.truist.com/)