1. Analyze vulnerability assessment results, security advisories, and vendor notifications to identify remediation requirements and develop technical mitigation strategies.
2. Lead the remediation of complex infrastructure vulnerabilities by coordinating with technology teams to implement patches, configuration changes, upgrades, and compensating controls.
3. Analyze vulnerability assessment results, threat intelligence, vendor advisories, and security findings to determine remediation requirements, risk exposure, and mitigation strategies.
4. Conduct root cause analysis for recurring vulnerabilities, remediation failures, and patching gaps, and recommend process improvements to reduce future risk exposure.
5. Support the development, implementation, and continuous improvement of patch management and vulnerability management procedures, standards, and operational processes.
6. Develop and maintain automation solutions that improve vulnerability remediation, compliance validation, reporting, and operational efficiency.
7. Perform infrastructure hardening activities and implement security baseline configurations to reduce attack surfaces and ensure alignment with enterprise security standards.
8. Troubleshoot and resolve complex patching, deployment, system performance, and vulnerability remediation issues affecting infrastructure availability and security.
9. Monitor infrastructure vulnerabilities, patch compliance, vulnerability exposure, and remediation effectiveness through dashboards, reporting tools, and operational metrics.
10. Review and validate remediation activities to ensure vulnerabilities are properly addressed, documented, and compliant with established service-level commitments.
11. Collaborate with cybersecurity, platform engineering, application support, and technology operations teams to prioritize and remediate critical and high-risk vulnerabilities.
12. Support audit, risk, compliance, and regulatory activities by providing technical evidence, remediation documentation, and subject matter expertise related to patch and vulnerability management controls.
13. Assess emerging technologies, security threats, and infrastructure vulnerabilities to develop proactive remediation strategies and improve security resilience.
14. Create and maintain technical documentation, implementation procedures, runbooks, and knowledge articles to support operational consistency.
15. Participate in incident response, problem management, and root cause analysis efforts related to infrastructure vulnerabilities, security events, and patch management failures.
16. Provide technical leadership and mentoring to infrastructure engineers and technical teams while serving as a subject matter expert in patch management, vulnerability remediation, and infrastructure security.
17. Continuously identify opportunities to improve patch deployment success rates, remediation timelines, vulnerability reduction, and overall infrastructure security posture.
Qualifications
Required Qualifications
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
1. Bachelor’s degree in Computer Science, Engineering, Information Systems, a related field, or equivalent education, training, and work-related experience.
2. Minimum of 7 years of professional experience in infrastructure engineering.
3. Advanced knowledge of enterprise infrastructure technologies including cloud, network, database, storage, platform, computing, and middleware.
Preferred Qualifications
Advanced expertise in ServiceNow Vulnerability Response (VR), including dashboard development, performance analytics, KPI/KRI design, remediation tracking, and executive-level reporting.
Experience designing and governing enterprise vulnerability management reporting frameworks within ServiceNow VR to measure SLA attainment, remediation effectiveness, risk reduction, and program performance.
Proven ability to develop and present complex vulnerability and remediation metrics through dashboards and reporting that support operational decision-making, governance activities, audit readiness, and executive oversight.
Experience identifying opportunities to enhance ServiceNow VR reporting, workflows, integrations, and data quality to improve visibility, automation, and program effectiveness.
5+ years of experience in vulnerability management, patch management, infrastructure engineering, cybersecurity, technology risk management, or related disciplines.
Advanced experience leading enterprise patch and vulnerability management programs across multiple technology domains.
Extensive experience with vulnerability management platforms, including, Qualys, Rapid7, Wiz, Prisma Cloud, or equivalent solutions.
Strong understanding of vulnerability prioritization methodologies, threat intelligence, risk-based remediation practices, and security exposure management.
Experience developing and governing enterprise vulnerability management standards, procedures, controls, and operating models.
Demonstrated experience driving remediation efforts across infrastructure, cloud, databases, middleware, network, and application environments.
Experience managing executive-level reporting, KPIs, KRIs, compliance metrics, and remediation performance measurements.
Knowledge of regulatory and security frameworks including NIST, CIS Controls, ISO 27001, FFIEC, PCI DSS, and other industry security standards.
Experience supporting internal audit, regulatory examinations, control assessments, and technology risk management activities.
Strong knowledge of ServiceNow Vulnerability Response, ITSM processes, and enterprise governance practices.
Experience designing automation solutions and process improvements that enhance remediation efficiency and operational effectiveness.
Proven ability to lead cross-functional initiatives involving cybersecurity, infrastructure engineering, technology operations, risk management, and audit stakeholders.
Experience mentoring technical resources and providing subject matter expertise to engineering teams and leadership.
Professional certifications preferred, such as CISSP, CISM, CRISC, Security+, CySA+, GSEC, ITIL, Qualys Certified Specialist, or equivalent.
General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.
Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.
EEO is the Law E-Verify IER Right to Work
