Associate Security Engineer

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status. Need Help? If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response). Regular or Temporary: Regular Language Fluency:  English (Required) Work Shift: 1st shift (United States of America) Please review the following job description: Implements technical and cybersecurity capabilities on assigned systems across the software development lifecycle, following defined approaches for basic threat modeling, security testing, and penetration testing under supervision. Executes cybersecurity tasks such as baselining and monitoring systems, and makes minor configuration adjustments to help deliver reliable and secure solutions within the job area, while actively building technical skills and knowledge for future growth.  ESSENTIAL DUTIES AND RESPONSIBILITIES Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time. 1. Implements cybersecurity solutions for assigned components and services within the job area, following established designs, patterns, and configuration guidance. 2. Performs security testing activities (such as basic threat modeling inputs, vulnerability checks, and penetration test support) on smaller systems using defined methods and tools. 3. Assists with integrating and configuring information security technologies in test and production environments, applying approved configuration patterns and making minor adjustments under supervision. 4. Investigates straightforward security issues for assigned systems, gathering data, performing initial analysis, and applying documented fixes or escalating as needed. 5. Reviews relevant security alerts, tools, and design options for own work, suggesting incremental improvements and contributing ideas within the immediate area of responsibility. 6. Collaborates with product and engineering teammates on smaller work items to apply security guidelines and securebydesign practices in daytoday development and delivery tasks. 7. Applies and updates defined security baselines, guardrails, and control settings for assigned applications or services, helping keep configurations aligned with policy and standards. 8. Participates in incident response activities for less complex incidents, following playbooks, using approved tooling, and documenting actions taken and observations. 9. Shares what is learned with technical teammates through informal discussions, pairing, and walkthroughs, while actively seeking feedback and guidance. 10. Plans and manages own tasks to meet assigned objectives and milestones, focusing on building technical skills, learning new tools and practices, and gradually taking on more complex work over time.

Required Qualifications The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. 1. Bachelor’s degree or equivalent education, training, and work-related experience. 2. Basic technical knowledge in cybersecurity principles, theories, and concepts. 3. Proficiency in implementing and managing information security technologies.

1. Experience with security automation and orchestration tools. 2. Familiarity with emerging cybersecurity technologies and trends. General Description of Available Benefits for Eligible Employees of Truist