Truist · 3 days ago
Cyber Hunt and Respond Sr Engineer
Atlanta, GA
Full-time
Hybrid
Senior Level, Lead/Staff
8+ years expTruist Bank is seeking a Cyber Hunt & Respond Senior Engineer to join their 24/7 Cyber Fusion Center. This advanced role focuses on proactive Threat Hunting and reactive Incident Response, requiring expertise in identifying and responding to cyber threats while collaborating with various IT and Cyber functions.
BankingFinanceFinancial Services
Responsibilities
Conducting presentations and mentoring others interested or responsible for related data science, threat hunting, or incident response
Hunting involves searching through large, diverse sets of internal and external data to discover previously undetected threats
Developing new hypotheses on how adversaries may be attacking the organization and proving out the hypotheses based on available data
Working with internal groups to express the data needs to explore potential threats
Providing technical direction in structured, unstructured, and complex situations
Setting up and leading incident response calls and collaborating across various IT/Cyber functions
Qualification
Required
Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or related field of relevant education, certification, or related training
8 years of experience in Cybersecurity or related work
Knowledge of one or more cloud platforms and cloud security
Knowledge of general information technology (IT) and cybersecurity
Knowledge of computer networking concepts and protocols, and network security methodologies
Knowledge of network traffic analysis and packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump)
Knowledge of operating systems, including Windows/Unix ports and services
Knowledge of modern identity and access management concepts
Knowledge of phishing tactics and techniques
Knowledge of advanced cyber threats and vulnerabilities
Knowledge of cyber-attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks)
Knowledge of adversarial tactics, techniques, and procedures
Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions
Knowledge of incident response and handling methodologies
Knowledge of countermeasures to address a variety of threats
Knowledge around leveraging automation, ML, and/or AI
Knowledge of advanced threat hunting techniques
Knowledge of types of digital forensics data and how to recognize them
Knowledge of types and collection of persistent data
Knowledge of file system implementations (e.g., New Technology File System [NTFS], File Allocation Table [FAT], File Extension [EXT])
Knowledge of which system files (e.g., log files, registry files, configuration files) contain relevant information and where to find those system files
Knowledge of processes for seizing and preserving digital evidence
Preferred
Experience working in cloud environments, namely Microsoft Azure and Amazon AWS
Industry certifications in general technology (e.g. Network+, AWS Certified Cloud Practitioner, Microsoft Azure Fundamentals, etc.)
Industry certifications in cyber security, such as: Security+, CySA+, GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Examiner (GCFE), GIAC Cloud Forensics Responder (GCFR), GIAC Certified Forensic Analyst (GCFA), GIAC Network Forensic Analyst (GNFA), GIAC Reverse Engineering Malware Certification (GREM), etc
Experience in Cyber Breach Response, Security Operations Center (SOC), Network Operations Center (NOC), IT/Cyber Engineering, or Intelligence Community (IC)
Benefits
Medical
Dental
Vision
Life insurance
Disability
Accidental death and dismemberment
Tax-preferred savings accounts
401k plan
Vacation
Sick days
Paid holidays
Defined benefit pension plan
Restricted stock units
Deferred compensation plan
Company
Truist
Truist is the sixth-largest commercial bank in the U.S.
10001+ employees
H1B Sponsorship
Truist has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (313)
2024 (247)
2023 (288)
2022 (275)
2021 (278)
2020 (270)
Funding
Current Stage
Late StageTotal Funding
unknown2021-01-01Seed
Leadership Team
Michael Maguire
Chief Financial Officer
James Cordovana
SVP of Cloud Security Enterprise Architect
Recent News
2026-01-16
Bizjournals.com Feed (2025-11-12 15:43:17)
2026-01-15
Company data provided by crunchbase