Java/Full-stack Engineer - Security Engineer

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status. Need Help? If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response). Regular or Temporary: Regular Language Fluency: English (Required) Work Shift: 1st shift (United States of America) Please review the following job description: Designs advanced enterprise applications across all phases of the software development lifecycle, including architecture, development, integration, testing, and deployment of Java-based, API-driven, and microservices solutions as well as full-stack web applications built with TypeScript, Node.js, and modern frontend frameworks such as React. Plans, builds, and enhances scalable technology platforms utilizing Java/J2EE, Spring Boot, Spring Cloud, SQL, containerized environments such as OpenShift and Kubernetes, and cloud infrastructure on AWS. Analyzes trends, applies software engineering best practices, and prepares for future business requirements to deliver reliable, secure, and high-performing technology solutions that support banking and financial services operations with significant impact on the job area. ESSENTIAL DUTIES AND RESPONSIBILITIES Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time. 1. Develop customized coding, software integration, perform analysis, configure solutions, using tools specific to the project or the area. 2. Lead and participate in the development, testing, implementation, maintenance, and support of highly complex solutions in adherence to company standards, including robust unit testing and support for subsequent release testing. 3. Build non-functional monitoring capabilities and provide escalated support for highly complex applications in production. 4. Build in and maintain security controls and monitoring in support of company standards. 5. Typically lead moderately complex projects and participate in larger, more complex initiatives. 6. Solve complex technical and operational problems. Act as a resource for teammates with less experience. 7. May oversee the work of a small team. 8. In an Agile environment: Responsible for delivering high quality working software and automating manual/reusable tasks working directly, and engage with, the business from the beginning of the design work. Leverage continuous engineering practices to deliver business value regarding effectiveness of the design. Actively participate in refining user stories. Responsible for design, developing, and maintaining automated unit testing, and supporting integration and functional testing. Responsible for providing automated monitoring capabilities, providing warranty support, and providing knowledge transfer to production support. Develop code in accordance with the acceptance criteria established by the Product Owner. 9. Design and maintain reusable library frameworks and shared service modules consumed by multiple runtime applications, ensuring clean dependency management and backward compatibility across releases. 10. Integrate and orchestrate calls to internal and external services (REST APIs, SOAP/WSDL endpoints, encrypted messaging systems) within multi-stage fraud detection and decision workflows, including implementing resilience patterns such as timeouts, fallbacks, and asynchronous processing. 11. Manage and remediate software supply chain health, including dependency version governance, vulnerability triage, and coordinating security patch rollouts across shared libraries and consuming applications. 12. Contribute to full-stack development across backend services and frontend applications, including building internal tooling and operational dashboards used by business and engineering stakeholders. 13. Support platform migration and DevOps initiatives, including CI/CD pipeline configuration, build infrastructure modernization, and environment provisioning, collaborating with platform engineering teams to ensure application readiness across deployment targets. Qualifications Required Qualifications The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. 1. Bachelor’s degree or equivalent education, training, and work-related experience. 2. Minimum of 5 years of experience in security engineering or related cybersecurity roles. 3. Advanced knowledge in cybersecurity principles, theories, and concepts. 4. Proven experience in software development lifecycle security practices. 5. Advanced knowledge of threat modeling, security testing, and penetration testing. 6. Experience implementing and managing complex information security technologies. Preferred Qualifications: 1. Master's degree and ten+ years of experience or an equivalent combination of education and work experience 2. Experience with Java/J2EE/JEE, Spring Boot, Spring Cloud (OpenFeign, Config), SQL, containerized platforms (OpenShift/Kubernetes), web services and microservices 3. Banking or financial services experience. Knowledge of one or more of the following: Solid foundation in data structures, algorithms, and software design with strong analytical and debugging skills 4. Professional experience building high-quality apps or services from the ground up and scaling at an enterprise level 5. Strong understanding of SOA and/or Open API methodologies and service architectures 6. Experience with event-driven architectures and messaging systems such as Apache Kafka, including encrypted payload handling and multi-cluster producer/consumer configurations 7. Hands-on experience with Maven dependency management, including BOM-based version governance, multi-module library design, and resolving transitive dependency conflicts in large codebases 8. Familiarity with business rule engine technologies (BPMN, DMN) and configurable rule execution frameworks 9. Experience with TypeScript/Node.js backend development and modern frontend frameworks (React) for building internal tooling and operational applications 10. Working knowledge of CI/CD pipelines (GitLab CI), static analysis tooling (SonarQube), container image builds, and Helm-based deployments 11. Experience with relational databases (SQL Server, DB2) including JPA/Hibernate integration, and familiarity with mTLS, JKS/PKCS12 keystore management, and SSL-secured service-to-service communication 12. Experience with DevOps practices and platform engineering, including CI/CD pipeline design

• GitLab CI), infrastructure-as-code, container orchestration
• Kubernetes/OpenShift/Helm), and cloud platform migrations. Familiarity with

build automation, artifact repository management (JFrog Artifactory), and environment promotion workflows across non-production and production tiers. 13. Demonstrated ability to leverage AI-assisted development tools (e.g., GitHub Copilot, GitLab Duo, ChatGPT) to accelerate day-to-day engineering tasks such as code analysis, dependency troubleshooting, code review, and technical documentation. The annual base salary for this position is $125,000 - $150,000. General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work. Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace. EEO is the Law E-Verify IER Right to Work About Truist Truist is a purpose-driven financial services company, formed by the historic merger of equals of BB&T and SunTrust. We serve clients in a number of high-growth markets in the country, offering a wide range of financial services. At Truist, our purpose is to inspire and build better lives and communities. That happens through real care to make things better. To meet client needs, to empower teammates, and to lift up communities. Learn more about Truist on truist.com.