Container Security Lead

Csmt Technical Lead

The CSMT Technical Lead serves as the primary technical person for enterprise container security and management initiatives. This role is essential to addressing critical findings from the Management Report of Internal Audit (MRIA) and establishing a comprehensive, automated approach to container image lifecycle management across the organization's containerized infrastructure. The Technical Lead will design, implement, and maintain integrated security solutions that span multiple platforms including CrowdStrike, Artifactory, GitLab, OpenShift, and AWS ECS, while providing strategic leadership to ensure the long-term sustainability and scalability of container security operations. This role requires both strong technical and collaboration skills as well as the ability to handle multiple assignments at once. Engineers at this level could be assigned a specific focus of work, for example Quality Assurance or Coaching, which would not materially change essential duties.

Essential Duties and Responsibilities

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

1. Guide, educate, and provide thought leadership to our delivery teams as related to their optimum adoption of DevSecOps practices and framework.
2. Champion the use of DevSecOps as a strategic asset of culture change to enhance the flow of business value to our clients.
3. Make informed decisions and determine which tool best fits any given situation based on proficiencies with multiple vendor products based on each of the above capabilities.
4. Develop and recommend DevSecOps best practices.
5. Use sophisticated, analytical thought to exercise judgment and design innovative solutions for the most complex components of the DevSecOps lifecycle.
6. Works independently, with guidance in only the most complex situations.
7. Provide technical and process guidance to junior team members.
8. Build and maintain the automation and streamlining of software delivery and operations for new or existing software applications through advanced proficiency and subject matter expertise in vendor tools in the DevOps lifecycle including: Infrastructure as Code; Agile and Development Lifecycle Management; Source Code Management; Build Orchestration; Build Management; Artifact Repository Management; Behavior Driven Development; Test Driven Development; Automated Testing including Unit Testing, Integration Testing, Functional Testing, Smoke Testing, Regression Testing, Stress Testing, and Performance Testing; Static Code Analysis; Load and Performance Testing; Artifact Scanning; Database Schema Management, Orchestration and Recovery; Compliance Automation and Audit Trails; Configuration Management; Containers; Application Release Automation; Deployment Strategies and Patterns including Blue/Green Deployment, Canary Releases, and Rolling Releases; Logging and Log Analytics; and Performance Monitoring and Management.
9. Liaise with DevSecOps Center for Enablement (C4E) to ensure that Enterprise tools or practices are followed, and to share information about any team specific tools or practices that may benefit other teams.
10. Active participant with the Truist Agile Guild and Agile DevOps Communities of Practice.

Qualifications

Required Qualifications

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor degree or equivalent education and related training or experience
• Seven+ years of experience in software engineering or IT including at least Four years of experience in a role in which the primary responsibility is DevOps Engineering or the development, maintenance, and support of CI/CD pipelines.
• Must demonstrate ability to write code
• Foundational cloud architecture knowledge
• Must demonstrate ability to construct basic application build pipeline

Preferred Qualifications

• Primary Vulnerability Coordinator: Serve as the organization's lead for assessing, prioritizing, and orchestrating remediation of security vulnerabilities across the entire container environment
• Risk Assessment: Conduct technical risk assessments for container vulnerabilities, considering deployment context (OpenShift vs. AWS ECS) and platform-specific mitigations
• Design and maintain automated workflows that leverage vulnerability scanning tool results to trigger appropriate remediation actions across the container lifecycle.
• Lead the implementation of automated integrations between CrowdStrike, Artifactory, GitLab CI/CD, OpenShift, and AWS ECS to create seamless container security workflows
• Design, Configure, maintain, and expand Renovate automation for container image updates, ensuring continuous compliance with security standards and automated merge requests into downstream repositories
• CI/CD Security Integration: Design and implement GitLab CI/CD pipeline integrations that enforce container security policies and automate compliance verification
• Custom Tooling Development: Develop custom scripts, tools, and applications to fill automation gaps and enhance the container security ecosystem
• Entry level development experience and a willingness to solve business objectives with custom code when vendor or internal applications fall short.
• Introduction level knowledge of AI and AI agents of any kind. We will be implementing them in the near future as part of this process.

Other Job Requirements / Working Conditions

Sitting Constantly (More than 50% of the time) Standing Occasionally (Less than 25% of the time) Walking Occasionally (Less than 25% of the time)

Visual / Audio / Speaking Able to access and interpret client information received from the computer and able to hear and speak with individuals in person and on the phone. Manual Dexterity / Keyboarding Able to work standard office equipment, including PC keyboard and mouse, copy/fax machines, and printers. Availability Able to work all hours scheduled, including overtime as directed by manager/supervisor and required by business need. Travel Minimal and up to 10%

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist's generous benefit plans, please visit our Benefits site.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.