Security Engineer (Data Engineering/ Protection)

Truist Bank is hiring a Security Engineer to act as a technical expert for Protegrity-based enterprise data protection. This onsite role in Charlotte focuses on designing, implementing, and supporting tokenization, masking, and encryption controls across applications and data pipelines, with close collaboration across engineering and cybersecurity stakeholders.

Location and Work Arrangement

• Location: Charlotte, NC
• Onsite: Yes
• Employment: Regular
• Work Shift: 1st shift (United States of America)

Responsibilities

• Support the design, implementation, and maintenance of enterprise data protection solutions using Protegrity, including tokenization, masking, and encryption controls.
• Act as a technical expert for integrating Protegrity with new and existing applications, databases, and data pipelines across the organization.
• Develop, test, and optimize data protection policies, workflows, and integration patterns to align with security and compliance requirements.
• Troubleshoot and resolve complex issues involving Protegrity agents, connectors, policy enforcement, and application integration.
• Partner with application teams, architects, and cybersecurity stakeholders to support secure data handling across solution lifecycles.
• Maintain documentation for architectures, integration guides, runbooks, and operational procedures for data protection platforms.
• Mentor and train junior engineers to build internal capability and maintain subject matter expertise.
• Support ongoing operations and incident response activities for the organization’s Tier 1 data protection platform.

Required Qualifications

• Bachelor’s degree or equivalent education, training, and work-related experience.
• Minimum 5 years of experience in security engineering or related cybersecurity roles.
• Advanced knowledge of cybersecurity principles, theories, and concepts.
• Proven experience applying security practices across the software development lifecycle.
• Advanced knowledge of threat modeling, security testing, and penetration testing.
• Experience implementing and managing complex information security technologies.

Preferred Qualifications

• 5–8+ years in software engineering, cybersecurity engineering, or data engineering roles.
• Hands-on experience integrating Protegrity or a similar enterprise data protection platform.
• Strong knowledge of tokenization, including format-preserving, reversible, and non-reversible approaches.
• Strong knowledge of data masking, including static and dynamic masking.
• Strong knowledge of encryption, including symmetric, asymmetric, and key management concepts.
• Experience with application integration patterns such as APIs, SDKs, agents, proxy-based controls, and microservices.
• Proficiency in at least one modern programming language: Java, Python, .NET, etc.
• Strong SQL and analytical skills.
• Deep understanding of data security, IAM, and compliance frameworks including PCI DSS, GDPR, and HIPAA.
• Ability to diagnose and resolve complex production issues in high-criticality environments.
• Strong communication and cross-team collaboration abilities.
• Experience working in cloud environments: AWS, Azure, GCP.
• Familiarity with DevSecOps practices and CI/CD pipelines.
• Prior experience mentoring or leading junior engineers.
• Background with big data platforms such as Snowflake, Hadoop ecosystem, and Spark is a plus.

Technology Focus

• Protegrity; tokenization; data masking; encryption; format-preserving tokenization; reversible and non-reversible tokenization; static and dynamic data masking
• Symmetric and asymmetric encryption; key management concepts
• Programming: Java, Python, .NET
• Databases and data: SQL, Snowflake, Hadoop ecosystem, Spark
• Security and compliance: PCI DSS, GDPR, HIPAA
• Cloud and delivery: AWS, Azure, GCP, DevSecOps, CI/CD pipelines

Benefits

• Medical, dental, vision
• Life insurance
• Disability
• Accidental death and dismemberment
• Tax-preferred savings accounts
• 401k plan
• No less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment
• 10 sick days (prorated)
• Paid holidays
• Defined benefit pension plan (depending on position and division eligibility)
• Restricted stock units (depending on position and division eligibility)
• Deferred compensation plan (depending on position and division eligibility)

Language Fluency

• English: Required