Cybersecurity Senior Engineer- Security Automation

Truist Financial - Atlanta, GA

Part-time,Full-time - Senior

Atlanta, GA

Credit Intermediation and Related Activities

About the position

The Cybersecurity Senior Engineer - Security Automation is responsible for developing and maintaining the technical IT and cybersecurity capabilities necessary for safeguarding the firm's information systems and applications throughout the software development lifecycle. This role requires a Subject Matter Expert in Security Automation who can bring fresh insights and sound development practices to the Cyber Defense SOAR Development Team. The engineer will design, plan, test, and implement various phases of cybersecurity technology projects, with a particular focus on integrating and operationalizing Large Language Models (LLMs) and Generative AI within cybersecurity use cases. The essential duties include the development, maintenance, and delivery of new Security Orchestration and Automation content, which encompasses custom RESTful API integrations, SOAR Playbooks, Automations/Scripts, Jobs, dashboards, reports, widgets, and code via Continuous Integration / Continuous Delivery pipelines, all adhering to Agile development practices. The engineer will also be responsible for maintaining technical IT/cyber capabilities, which includes all phases of the software development lifecycle and software stack, such as threat modeling, static application security testing (SAST), software composition analysis (SCA), dynamic application security testing (DAST), and penetration testing. In addition, the engineer will lead efforts related to designing, planning, enhancing, and testing all cybersecurity technologies used throughout the enterprise. This includes analyzing information to determine, recommend, and plan the use of new information security technologies or modifications to existing systems. The role also involves leading the implementation of new information security technologies or the integration of existing technologies, particularly focusing on the operational implementation of LLMs and Generative AI. The engineer will utilize sophisticated analytical thought through models, testing, and experience to exercise judgment and identify innovative solutions, while also providing expert problem analysis and resolution in a timely manner. The position may involve leading teams or projects with moderate resource requirements, risk, and complexity.

Responsibilities

• Develop and maintain new Security Orchestration and Automation content including custom RESTful API integrations, SOAR Playbooks, Automations/Scripts, Jobs, dashboards, reports, widgets, and code via Continuous Integration / Continuous Delivery pipelines adhering to Agile development practices.
• Maintain technical IT/cyber capabilities including all phases of the software development lifecycle and software stack, including threat modeling, SAST, SCA, DAST, and penetration testing.
• Lead efforts related to designing, planning, enhancing, and testing all cybersecurity technologies used throughout the enterprise.
• Analyze information to determine, recommend, and plan the use of new information security technologies or modifications to existing systems.
• Lead the implementation of new information security technologies or integration of existing technologies, including operational implementation of LLMs and Generative AI.
• Use sophisticated analytical thought through models, testing, and experience to exercise judgment and identify innovative solutions.
• Provide technical support of information security technologies, offering expert problem analysis and resolution in a timely manner.
• Lead teams or projects with moderate resource requirements, risk, and complexity.

Requirements

• Bachelor's degree and eight years of experience in systems engineering or administration or an equivalent combination of education and work experience.
• Deep specialized and/or broad functional knowledge in applied enterprise information security technologies including firewalls, intrusion detection/prevention systems, network operating systems, identity management, database activity monitoring, encryption, content filtering, and Mainframe security.
• CISSP Certification.
• Previous experience in leading complex IT projects.

Nice-to-haves

• Experience with No-Code/Low-Code Security Orchestration and Automated Response (SOAR) tools.
• Python development experience.
• Palo Alto XSOAR Platform Expertise.
• Master's degree or MBA and ten years of experience or an equivalent combination of education and work experience.
• Banking or financial services experience.
• Docker, Kubernetes, containerization pipeline, and deployment experience.
• Other security certifications (e.g. CCNA Security, GSEC, GCED, GPPA, etc.).
• Other technical Certifications (e.g. CCNA, RHCE, MCSE, etc.).
• Demonstrated knowledge of Large Language Models (LLMs) and Generative AI, with a focus on Azure AI offerings.
• Experience operationalizing Cyber use cases with LLMs.
• Proven track record of integrating Generative AI into security solutions.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability insurance
• Accidental death and dismemberment insurance
• Tax-preferred savings accounts
• 401k plan
• Vacation days (minimum of 10 days)
• Sick days (minimum of 10 days)
• Paid holidays
• Defined benefit pension plan (depending on position and division)
• Restricted stock units (depending on position and division)
• Deferred compensation plan (depending on position and division)