Senior Associate Security Engineer (Terraform/...

Designs advanced technical and cybersecurity capabilities across all phases of the software development lifecycle, including threat modeling, security testing, and penetration testing. Plans, builds, and enhances cybersecurity technologies by baselining systems, analyzing trends, and preparing for future requirements to deliver reliable, scalable, and secure technology solutions with significant impact on the job area., Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

• This team is deploying security controls for Truist and enabling Security controls.

• Ideal talent will be somebody who has experience with AWS/ Azure/ Terraform and understands how CI/CD pipelines work. Hands on keyboarding.

• Assist in the designing, planning, deploying, testing and implementation phases of Cloud Security Controls.

• Automate operational workflows using Python.

• Build and manage CI/CD pipelines using GitLab.

• Manage AWS services and ensure secure, scalable cloud environments.

• Proficiency in Python scripting.

• Strong GitLab CI/CD pipeline development.

• Strong hands-on experience with AWS, including:

• IAM

• ECS / EKS

• EC2

• S3

• CloudTrail

• CloudWatch

• CloudFront

• VPC and AWS networking

• Infrastructure as Code with Terraform and CloudFormation.

• Strong container development and automation experience.

• Experience with cloud security tools (e.g., Wiz).

• Exposure to Azure (preferred).

• Excellent communication and interpersonal skills.

• Strong analytical and problem-solving capabilities.

• Ability to collaborate effectively across diverse teams.

Required Qualifications

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor’s degree or equivalent education, training, and work-related experience.

• Minimum of 3 years of experience in security engineering or related cybersecurity roles.

• Developing knowledge in cybersecurity principles, theories, and concepts.

• Experience in software development lifecycle security practices.

• Proficiency in implementing and managing information security technologies.