Security Engineer (Data Engineering/ Protection)

Truist Bank is seeking a Security Engineer focused on enterprise data protection. This role serves as a technical expert for Protegrity, helping design, implement, and support solutions that secure sensitive data across applications and data pipelines through tokenization, masking, and encryption.

Role Overview

The Security Engineer will integrate Protegrity into new and existing systems, apply security and compliance controls, and provide operational support for the organization’s Tier 1 data protection platform. Responsibilities include developing protection policies and workflows, troubleshooting complex integration issues, and partnering with application teams and cybersecurity stakeholders across the solution lifecycle.

Key Responsibilities

• Support the design, implementation, and maintenance of enterprise data protection solutions using Protegrity, including tokenization, masking, and encryption controls.
• Act as a technical expert for integrating Protegrity with applications, databases, and data pipelines across the organization.
• Develop, test, and optimize data protection policies, workflows, and integration patterns to meet security and compliance requirements.
• Troubleshoot and resolve complex issues involving Protegrity agents, connectors, policy enforcement, and application integration.
• Partner with application teams, architects, and cybersecurity stakeholders to support secure data handling throughout solution lifecycles.
• Maintain documentation for architectures, integration guides, runbooks, and operational procedures for data protection platforms.
• Mentor and train junior engineers to build internal capability and maintain subject matter expertise.
• Support ongoing operations and incident response activities for the organization’s Tier 1 data protection platform.

Required Qualifications

• Bachelor’s degree or equivalent education, training, and work-related experience.
• Minimum of 5 years of experience in security engineering or related cybersecurity roles.
• Advanced knowledge of cybersecurity principles, theories, and concepts.
• Proven experience applying security practices across the software development lifecycle.
• Advanced knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Preferred Qualifications

• 5–8+ years in software engineering, cybersecurity engineering, or data engineering roles.
• Hands-on experience integrating Protegrity or a similar enterprise data protection platform.
• Strong knowledge of tokenization, including format-preserving, reversible, and non-reversible approaches.
• Strong knowledge of data masking, including static and dynamic masking.
• Strong knowledge of encryption, including symmetric and asymmetric methods and key management concepts.
• Experience with application integration patterns such as APIs, SDKs, agents, proxy-based controls, and microservices.
• Proficiency with at least one modern programming language (Java, Python, .NET, or similar).
• Strong SQL and analytical skills.
• Deep understanding of data security, IAM, and compliance frameworks such as PCI DSS, GDPR, and HIPAA.
• Ability to diagnose and resolve complex production issues in high-criticality environments.
• Strong communication and cross-team collaboration skills.
• Experience working in cloud environments (AWS, Azure, GCP).
• Familiarity with DevSecOps practices and CI/CD pipelines.
• Prior experience mentoring or leading junior engineers.
• Background with big data platforms such as Snowflake, Hadoop ecosystem, or Spark is a plus.

Technologies and Skills

• Protegrity; tokenization; data masking; encryption
• Format-preserving and reversible tokenization; non-reversible tokenization
• Static and dynamic data masking
• Symmetric and asymmetric encryption; key management concepts
• Java, Python, .NET, SQL
• PCI DSS, GDPR, HIPAA
• AWS, Azure, GCP
• DevSecOps; CI/CD pipelines
• Snowflake, Hadoop ecosystem, Spark

Location, Employment Type, and Shift

• Location: Charlotte, NC (onsite)
• Employment: Regular
• Shift: 1st shift (United States of America)
• Language: English (Required)

Benefits

• Medical, dental, vision
• Life insurance
• Disability
• Accidental death and dismemberment
• Tax-preferred savings accounts
• 401k plan
• No less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment
• 10 sick days (prorated)
• Paid holidays
• Defined benefit pension plan (depending on position and division eligibility)
• Restricted stock units (depending on position and division eligibility)
• Deferred compensation plan (depending on position and division eligibility)