Vulnerability Software Engineer III

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary:

Regular

Language Fluency: English (Required)

Work Shift:

1st shift (United States of America)

Please review the following job description:

Deliver technically complex solutions. Perform system integration support for all project work. Consult and partner with the business product owners to understand the end goal and offer solutions and recommendations during the design.

SWE’s provide vulnerability guidance, oversight and strategy for aligned program vulnerability teams/teammates within specified technical delivery organizations.

Vulnerability SWE’s will work with key stakeholders in each vertical to:

• Assess and build out plans for remediation/disposition/report out
• Provide data intelligence, data views and assist with triage as the generated reporting updates current state monitoring and tracking vulnerability trends and key focus areas for remediation that leverages the banks risk-based approach
• Standardize and formalize processes & procedures, and advise partner teams on changes
• Provide requirements and assist with adoption of Cyber process and tool changes related to application, infrastructure, container, pen testing, and API related vulnerabilities
• Serve as the face of the Vulnerability Management program and speak as the authoritative source of truth
• Develop material and present to senior leadership regarding program level updates, changes, etc.
  
  
  

In short, these senior roles provide:

• Strategic advice and thought leadership
• vulnerability course corrections and actions
• socialization of key data and the associated implementation
• lead training and adoption to align to both current and target state
• real world expertise as it applies to threat events
• translate reporting into action
• representation and support of Cyber Threat Events
  
  
  

Analysis and outcomes of the vulnerability report trends will drive actions for stakeholders to communicate downstream to Delivery and Production Support Operations. This structured workflow and communication expedites the efficient burndown of vulnerabilities and reduces the greatest risk areas of the bank.

Essential Duties And Responsibilities

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

• Develop customized coding, software integration, perform analysis, configure solutions, using tools specific to the project or the area.
• Lead and participate in the development, testing, implementation, maintenance, and support of highly complex solutions in adherence to company standards, including robust unit testing and support for subsequent release testing.
• Build non-functional monitoring capabilities and provide escalated support for highly complex applications in production.
• Build in and maintain security controls and monitoring in support of company standards.
• Typically lead moderately complex projects and participate in larger, more complex initiatives.
• Solve complex technical and operational problems. Act as a resource for teammates with less experience
• May oversee the work of a small team.
• In an Agile environment: Responsible for delivering high quality working software and automating manual/reusable tasks working directly, and engage with, the business from the beginning of the design work. Leverage continuous engineering practices to deliver business value regarding effectiveness of the design. Actively participate in refining user stories. Responsible for design, developing, and maintaining automated unit testing, and supporting integration and functional testing. Responsible for providing automated monitoring capabilities, providing warranty support, and providing knowledge transfer to production support. Develop code in accordance with the acceptance criteria established by the Product Owner.
  
  
  

Qualifications

Required Qualifications

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor’s Degree and six to ten years of experience or equivalent education and software engineering training or experience
• In-depth knowledge in information systems and ability to identify, apply, and implement best practices
• Understanding of key business processes and competitive strategies related to the IT function
• Ability to plan and manage projects and solve complex problems by applying best practices
• Ability to provide direction and mentor less experienced teammates. Ability to interpret and convey complex, difficult, or sensitive information
  
  
  

Preferred Qualifications

• Master’s degree and ten years of experience or an equivalent combination of education and work experience
• Knowledge of specific applications, technology platforms, programming languages, systems, or business segments
• Banking or financial services experience. Knowledge of one or more of the following: Solid foundation in data structures, algorithms, and software design with strong analytical and debugging skills
• Professional experience building high-quality apps or services from the ground up and scaling at an enterprise level
• Experience with Open Source tools and frameworks
• Experience with cloud technologies, such as AWS, Azure, or GCP
• Strong understanding of SOA and/or Open API methodologies and service architectures
• Experience using web servers, application containers, caching technologies
• Solid knowledge of relational database design and development (SQL, stored procedures, data modeling)
• Experience with messaging systems (i.e., MQ and JMS)
• Experience with build tools, such as Git, Maven, and Jenkins. Proven ability to write comprehensive unit and integration tests
  
  
  

Candidate must be located and work in either Charlotte NC, Raleigh NC, or Atlanta GA office five days a week.

Other Job Requirements / Working Conditions

Sitting

Constantly (More than 50% of the time)

Standing

Frequently (25% - 50% of the time)

Walking

Frequently (25% - 50% of the time)

Visual / Audio / Speaking

Able to access and interpret client information received from the computer and able to hear and speak with individuals in person and on the phone.

Manual Dexterity / Keyboarding

Able to work standard office equipment, including PC keyboard and mouse, copy/fax machines, and printers.

Availability

Able to work all hours scheduled, including overtime as directed by manager/supervisor and required by business need.

Travel

Minimal and up to 10%

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law E-Verify IER Right to Work