Security Engineer - Directory Services

We need to produce HTML fragment with headings

for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. No Job ID etc. Remove boilerplate. Must preserve all substantive info. We need to parse the posting. Key content: - Description: "Come join a growing team that is responsible for the design/engineering/operation of the following foundational infrastructure technology services:" then list of services. - For this opportunity: Truist will not sponsor visa etc. (maybe not needed as heading? It's a note about sponsorship; could be part of About the role? Might be considered metadata; but we can include in a paragraph under About the role maybe. - This position is office-centric 5 days a week in one of the following offices: (Atlanta/GA, Charlotte/NC, Raleigh/NC, or Wilson, NC.) That's schedule/location info. Could be Schedule section? It mentions work shift: 1st shift (United States of America). Also Regular or Temporary: Regular. Language Fluency: English (Required). So we have schedule info: office-centric 5 days a week, work shift 1st shift. Could put under Schedule section. - Essential Duties And Responsibilities: list of duties (many bullet-like sentences). We'll put under Responsibilities

with

• each duty. - Qualifications: Required Qualifications list (bullet). Preferred Qualifications list (maybe under Qualifications or Skills?). The instruction: Use headings for Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We have Required Qualifications and Preferred Qualifications. Could combine under Qualifications heading. Also there is "Knowledge of and experience with the following technology systems and platforms is preferred:" list. That's skills. Could put under Skills heading. - Benefits: General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: details about medical, dental, vision, etc. Also mention 10 days vacation, 10 sick days, paid holidays, defined benefit pension plan, RSU, deferred compensation. So we can put Benefits section. - Pay: Not mentioned. No salary info. So we should NOT create Pay section. - Schedule: We have office-centric 5 days a week, work shift 1st shift. Also Regular/Temporary: Regular. Language Fluency: English (Required). Could be under Schedule heading. - About the role: Could include the initial description about team responsibilities, list of services, visa note, location maybe. But location already in Schedule. Visa note maybe in About the role. We need to avoid filler like "commensurate with experience". Not present. We must not include boilerplate like EEO, Drug Free Workplace, etc. Remove those lines. We must not include application instructions, need help, accommodation request lines. Remove those. We must preserve all substantive information. So we need to keep the list of services, duties, qualifications, preferred qualifications, skills list, benefits details, schedule info, language requirement, regular/temporary, work shift. Let's extract. **About the role** (maybe heading About the role). Content: - Come join a growing team that is responsible for the design/engineering/operation of the following foundational infrastructure technology services: - Microsoft Active Directory Domain Services - Microsoft Active Directory Federation Services (ADFS) - Microsoft Active Directory Certificate Services - Microsoft DHCP - Microsoft DNS - Microsoft Entra Connect - Microsoft Distributed File System (DFS) - Microsoft Key Management Services (KMS) - Microsoft Identity Manager (MIM) - Microsoft Remote Desktop Licensing (RDL) - Quest product suite - Cisco Identity Services Engine (ISE) - Truist will not sponsor an applicant for work visa status or employment authorization, nor will we offer any immigration-related support for this position (including, but not limited to H-1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN-1 or TN-2, E-3, O-1, or future sponsorship for U.S. lawful permanent residence status.) That's substantive. **Responsibilities** (Essential Duties And Responsibilities). List each sentence as
• . Let's list them: 1. Designs and implements cybersecurity solutions that protect critical assets within the job area, contributing to the technical design and implementation approach while following established strategies and patterns. 2. Performs threat modeling, security testing, and penetration testing for the platforms and services in scope, using structured analysis to identify and remediate significant vulnerabilities. 3. Integrates and configures information security technologies in production environments, implementing and refining configuration patterns, automation, and handoff steps for assigned systems or services. 4. Serves as a technical escalation point within the team for challenging security issues, investigating root causes and developing practical, reusable fixes that improve team workflows. 5. Evaluates relevant security threats, tools, and design options, and provides input that helps shape technical plans, priorities, and goals for the job area. 6. Collaborates closely with product and engineering teammates to apply security architecture guidance, secure by design practices, and governance controls in day-to-day development activities. 7. Develops and maintains security baselines, guardrails, and control implementations for systems and applications in the area of responsibility, helping support regulatory and policy compliance. 8. Leads the technical execution of incident response and basic forensic activities for services in scope, following playbooks, coordinating tasks with teammates, and suggesting improvements to procedures and tooling. 9. Provides guidance, coaching, and informal training to other security engineers and technical teammates, sharing best practices through design and code reviews and knowledge sharing sessions. 10. Leads significant security engineering workstreams or end-to-end processes within the job area, coordinating contributions from lower level technical professionals and reviewing outputs for quality and alignment. **Qualifications** (Required Qualifications). List: - Bachelor’s degree or equivalent education, training, and work-related experience. - Minimum of 5 years of experience in security engineering or related cybersecurity roles. - Advanced knowledge in cybersecurity principles, theories, and concepts. - Proven experience in software development lifecycle security practices. - Advanced knowledge of threat modeling, security testing, and penetration testing. - Experience implementing and managing complex information security technologies. **Preferred Qualifications** maybe also under Qualifications or separate? Could add a subsection but we only have headings; we could include both required and preferred under Qualifications heading, maybe separate

  for preferred. But we need to preserve all info. We'll include a paragraph after required list: "Preferred qualifications: Bachelor's degree and six years of experience or an equivalent combination of education and work experience; Banking or financial services experience; Certification Strongly Preferred: ServiceNow's Certified System Administrator (CSA)". Then we also have "Knowledge of and experience with the following technology systems and platforms is preferred:" list. That could go under Skills. **Skills** heading: list of technology systems and platforms preferred: - Microsoft Active Directory Domain Services - Microsoft Active Directory Federation Services (ADFS) - Microsoft Active Directory Certificate Services - Microsoft DHCP - Microsoft DNS - Microsoft Distributed File System (DFS) - Microsoft Key Management Services (KMS) - Microsoft Identity Manager (MIM) - Microsoft Remote Desktop Licensing (RDL) - Quest product suite - Hewlett Packard Enterprise physical servers - Dell physical servers - Windows Server operating systems (Windows Server 2025 through Windows Server 2012 R2) - PowerShell scripting knowledge and ability to write customized scripts - Knowledge of networking and firewall rulesets Also maybe include "Certification Strongly Preferred: ServiceNow's Certified System Administrator (CSA)" as skill. **Benefits** heading: content: - All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. - Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. - Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. - Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. We could also mention "For more details on Truist’s generous benefit plans, please visit our Benefits site." That's maybe boilerplate? It's not application instruction; it's a reference. Might keep but it's generic. Could keep as part of benefits. **Schedule** heading: content: - Regular or Temporary: Regular - Language Fluency: English (Required) - Work Shift: 1st shift (United States of America) - This position is office-centric 5 days a week in one of the following offices: Atlanta/GA, Charlotte/NC, Raleigh/NC, or Wilson, NC. We could combine. Now ensure we don't include any boilerplate like EEO, Drug Free Workplace, etc. Remove those lines. Now produce HTML fragment with

  headings and appropriate

  • or

    . We must not include or . Just fragment. Let's craft. We'll start with

    About the role

    then

    with the description and list maybe as

    for services. Could embed list inside

    but better to use

    . The rule: Use
    • for any list of duties/requirements/benefits, and

      for prose. For services list, it's a list, so use

      . For the visa note, it's prose, could be in same

      after list. Thus:

      About the role

      • Microsoft Active Directory Domain Services
      ...

      Truist will not sponsor an applicant for work visa status or employment authorization, nor will we offer any immigration-related support for this position (including, but not limited to H-1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN-1 or TN-2, E-3, O-1, or future sponsorship for U.S. lawful permanent residence status.)

      But note: The visa note is a sentence; we can put in

      . Now Responsibilities:

      Responsibilities

      • Designs and implements cybersecurity solutions that protect critical assets within the job area, contributing to the technical design and implementation approach while following established strategies and patterns.
      ...
      Qualifications:

      Qualifications

      Required Qualifications:

      • Bachelor’s degree or equivalent education, training, and work-related experience.
      • Minimum of 5 years of experience in security engineering or related cybersecurity roles.
      • Advanced knowledge in cybersecurity principles, theories, and concepts.
      • Proven experience in software development lifecycle security practices.
      • Advanced knowledge of threat modeling, security testing, and penetration testing.
      • Experience implementing and managing complex information security technologies.

      Preferred Qualifications: Bachelor's degree and six years of experience or an equivalent combination of education and work experience; Banking or financial services experience; Certification Strongly Preferred: ServiceNow's Certified System Administrator (CSA).

      But we used which is not prohibited; but we should stick to

      and maybe

      . Could also make a list for preferred qualifications. Let's do list.

      Qualifications

      Required Qualifications:

      ...

      Preferred Qualifications:

      • Bachelor's degree and six years of experience or an equivalent combination