Talent.com
Cybersecurity Engineer - Breach and Attack Simulation (BAS)
Cybersecurity Engineer - Breach and Attack Simulation (BAS)Truist • Raleigh, NC, US
serp_jobs.error_messages.no_longer_accepting
Cybersecurity Engineer - Breach and Attack Simulation (BAS)

Cybersecurity Engineer - Breach and Attack Simulation (BAS)

Truist • Raleigh, NC, US
job_description.job_card.variable_days_ago
serp_jobs.job_preview.job_type
  • serp_jobs.job_card.full_time
  • serp_jobs.job_card.part_time
  • serp_jobs.job_card.temporary
job_description.job_card.job_description

Cybersecurity Engineer - Breach and Attack Simulation (BAS)

Join to apply for the Cybersecurity Engineer - Breach and Attack Simulation (BAS) role at Truist

Cybersecurity Engineer - Breach and Attack Simulation (BAS)

Join to apply for the Cybersecurity Engineer - Breach and Attack Simulation (BAS) role at Truist

Get AI-powered advice on this job and more exclusive features.

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary :

Regular

Language Fluency : English (Required)

Work Shift :

1st shift (United States of America)

Please review the following job description :

The Cybersecurity Engineer (Breach and Attack Simulation) supports the design, execution, and maintenance of security validation capabilities that strengthen the firm's defenses. This entry-level role assists in operating BAS / Continuous Security Validation (CSV) tools, performing security testing, and analyzing results to identify control gaps and vulnerabilities. Working under senior engineers and managers, the engineer contributes to integrating BAS capabilities into the enterprise security environment, helping improve detection, response, and overall cyber resilience.

Essential Duties And Responsibilities

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

  • Support BAS Operations : Assist in setting up, executing, and monitoring BAS / CSV attack simulations that emulate adversary tactics, techniques, and procedures (TTPs).
  • Assist in Result Analysis : Help review BAS results to identify potential vulnerabilities, detection gaps, and opportunities for improving security controls.
  • Contribute to Documentation : Maintain accurate records of BAS scenarios, procedures, and outcomes; assist in preparing reports for technical and non-technical stakeholders.
  • Tool and System Integration : Work with senior engineers to integrate BAS platforms with enterprise security tools such as SIEM, EDR, and SOAR.
  • Collaboration and Learning : Partner with red, blue, and purple teams to understand simulation outcomes, strengthen alerts / rules, and expand knowledge of detection engineering.
  • Threat Intelligence Application : Leverage threat intelligence provided by senior staff to help inform test scenarios and understand emerging attack trends.
  • Vulnerability Management Support : Participate in identifying and tracking vulnerabilities highlighted through BAS and other testing.
  • Project Participation : Contribute to security validation initiatives and play supporting roles in larger, more complex projects.
  • Continuous Development : Engage in learning activities to expand knowledge of BAS, cybersecurity frameworks (e.g., NIST, MITRE ATT&CK), and automation / scripting in support of security operations.

Required Qualifications

The requirements listed below are representative of the knowledge, skill and / or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

  • Bachelor's degree and five years of experience in systems engineering or administration or an equivalent combination of education and work experience.
  • In-depth knowledge in applied enterprise information security technologies including but not limited to firewalls, intrusion detection / prevention systems, network operating systems, identity management, database activity monitoring, encryption, content filtering, and Mainframe security
  • Previous experience in planning and managing IT projects
  • Preferred Qualifications :

  • Experience with Breach and Attack (BAS) or Continuous Security Validation (CSV) tools
  • Bachelor's degree and six years of experience or an equivalent combination of education and work experience
  • Banking or financial services experience
  • Experience designing and executing Attack Scenarios : Plan and conduct realistic cyberattack simulations that mimic real-world threat actor tactics, techniques, and procedures (TTPs).
  • Analyze Simulation Results : Evaluate the outcomes of BAS, identifying weaknesses in security controls, vulnerabilities, and gaps in detection and response capabilities.
  • Provide Actionable Recommendations : Develop and present recommendations to improve security policies, procedures, and technologies based on simulation findings.
  • Integrate BAS with Security Infrastructure : Integrate BAS platforms with existing security tools like SIEM and EDR to enhance detection and response capabilities.
  • Document and Communicate : Maintain documentation of BAS methodologies, procedures, and results, and communicate findings to technical and non-technical stakeholders.
  • Collaborate with Security Teams : Work with security analysts and engineers to adjust alerts, rules, and controls based on simulation results.
  • Threat Hunting and Intelligence : Utilize threat intelligence to inform attack scenarios and identify emerging threats.
  • Vulnerability Management : Identify, prioritize, and recommend remediation of high-risk vulnerabilities.
  • Red Teaming and Blue Teaming : May also participate in red, purple, and blue team exercises to further evaluate security posture.
  • Strong understanding of cybersecurity concepts, including attack vectors, TTPs, and security controls.
  • Experience with CI / CD pipeline end to end lifecycle
  • Experience with penetration testing, vulnerability management, and security tools.
  • Proficiency in scripting and automation languages (e.g., Python, PowerShell).
  • Knowledge of common threat intelligence sources and frameworks.
  • Excellent analytical, problem-solving, and communication skills.
  • Ability to work independently and as part of a team.
  • Familiarity with cybersecurity frameworks and standards (e.g., NIST, MITRE ATT&CK and D3FEND).
  • Experience with GRC engineering
  • Experience with commercial BAS tools : AttackIQ, SafeBreach, Cymulate, etc.
  • Experience with detection engineering and SOAR
  • Other Job Requirements / Working Conditions

    Sitting

    Constantly (More than 50% of the time)

    Visual / Audio / Speaking

    Able to access and interpret client information received from the computer and able to hear and speak with individuals in person and on the phone.

    Manual Dexterity / Keyboarding

    Able to work standard office equipment, including PC keyboard and mouse, copy / fax machines, and printers.

    Availability

    Able to work all hours scheduled, including overtime as directed by manager / supervisor and required by business need.

    Travel

    Minimal and up to 10%

    General Description of Available Benefits for Eligible Employees of Truist Financial Corporation : All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist's generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist's defined benefit pension plan, restricted stock units, and / or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

    Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

    EEO is the Law Pay Transparency Nondiscrimination Provision E-Verify

    Seniority level

    Seniority level

    Not Applicable

    Employment type

    Employment type

    Full-time

    Job function

    Job function

    Information Technology

    Referrals increase your chances of interviewing at Truist by 2x

    Get notified about new Cyber Security Engineer jobs in Atlanta, GA

    Atlanta, GA $120,000.00-$150,000.00 1 week ago

    Roswell, GA $80,000.00-$90,000.00 2 months ago

    Engineer, Information Security Threat Intelligence

    Cybersecurity Engineer II | Network Security

    Atlanta, GA $90,000.00-$130,000.00 3 weeks ago

    Cyber Triage and Forensics - Junior Analyst

    Atlanta, GA $60,400.00-$109,600.00 1 day ago

    Atlanta, GA $131,292.70-$172,090.00 1 month ago

    Atlanta, GA $120,000.00-$160,000.00 1 month ago

    Atlanta Metropolitan Area $99,461.00-$128,329.00 14 hours ago

    Senior Security Engineer, Aviation IT Risk

    Cyber Triage and Forensics - Junior Analyst

    Cybersecurity Fraud Staff Engineer (Remote)

    Atlanta, GA $140,000.00-$190,000.00 4 weeks ago

    Atlanta, GA $95,000.00-$115,000.00 1 day ago

    Junior Analyst, Cybersecurity Architecture

    Atlanta, GA $125,000.00-$175,000.00 1 day ago

    Atlanta, GA $125,000.00-$175,000.00 3 weeks ago

    We're unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

    J-18808-Ljbffr

    serp_jobs.job_alerts.create_a_job

    Simulation Engineer • Raleigh, NC, US

    Job_description.internal_linking.related_jobs
    Principal Engineer, Cyber Threat Intelligence

    Principal Engineer, Cyber Threat Intelligence

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for a Principal Engineer - Cyber Threat Intelligence.Key Responsibilities Lead advanced research and analysis of cyber adversary tactics and procedures Produce threat intell...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_hours • serp_jobs.job_card.promoted • serp_jobs.job_card.new
    Cybersecurity Assurance Analyst

    Cybersecurity Assurance Analyst

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for a Cybersecurity Assurance Analyst responsible for ensuring IT systems are secure and compliant with regulations. Key Responsibilities Assist with regular audits of user ac...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    SIEM Engineer

    SIEM Engineer

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for a SIEM Engineer to join a cybersecurity team supporting Cortex XSIAM deployments in a remote capacity. Key Responsibilities of the SIEM Engineer Collaborate with the techn...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Cybersecurity Engineer III

    Cybersecurity Engineer III

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for an Engineer III - Insider Threat.Key Responsibilities Conduct advanced investigations into potential insider threat activities Analyze behavioral indicators and user act...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Senior Azure Cybersecurity Engineer

    Senior Azure Cybersecurity Engineer

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Azure Infrastructure Developer / Cybersecurity Engineer to support U.Key Responsibilities Implement and enforce DoD cybersecurity policies across US Navy systems ...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_hours • serp_jobs.job_card.promoted • serp_jobs.job_card.new
    Principal Engineer Cyber Incident Response

    Principal Engineer Cyber Incident Response

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for a Principal Engineer - Cyber Incident Response.Key Responsibilities Lead technical response and investigation of complex security incidents Provide expertise in forensic...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_hours • serp_jobs.job_card.promoted • serp_jobs.job_card.new
    Cybersecurity Project Manager

    Cybersecurity Project Manager

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for a Cybersecurity Project Manager to join their cybersecurity project team.Key Responsibilities Implement Project Management best practices to reduce risks and improve serv...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Cyber Security Engineer

    Cyber Security Engineer

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for a Cyber Security Engineer for a Contract-to-Hire position, which is 100% remote.Key Responsibilities Serve as a subject matter expert for the cybersecurity operations tea...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Cybersecurity Platform Engineer

    Cybersecurity Platform Engineer

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for a Cybersecurity Platform Engineer.Key Responsibilities Implement, maintain, and optimize Cyber SOC platforms and tooling, including architecture, infrastructure, and appl...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Cybersecurity Director

    Cybersecurity Director

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for a Director of IT Cybersecurity.Key Responsibilities Develop and lead a comprehensive cybersecurity strategy aligned with business objectives Oversee risk management proc...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Principal Engineer Cyber Countermeasures

    Principal Engineer Cyber Countermeasures

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for a Principal Engineer - Cyber Countermeasures.Key Responsibilities Lead the design and implementation of cyber countermeasures against advanced adversary tactics Develop ...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_hours • serp_jobs.job_card.promoted • serp_jobs.job_card.new
    Senior Cybersecurity Architect

    Senior Cybersecurity Architect

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Cybersecurity Architect to join their Information Security team.Key Responsibilities Shape the enterprise security architecture in alignment with business object...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Digital Forensics Engineer

    Digital Forensics Engineer

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for an Engineer III - Digital Forensics & Investigations.Key Responsibilities Lead digital forensic investigations involving cyber incidents and insider threats Perform adva...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_hours • serp_jobs.job_card.promoted • serp_jobs.job_card.new
    Senior Cyber Threat Detection Engineer - Remote

    Senior Cyber Threat Detection Engineer - Remote

    UnitedHealth Group • Raleigh, NC, United States
    serp_jobs.filters.remote
    serp_jobs.job_card.full_time
    Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives.The work you do with our team will directly improve health outcomes by connect...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Project Manager with Cybersecurity

    Project Manager with Cybersecurity

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for a Project Manager with expertise in Cybersecurity, NIST, and HIPAA.Key Responsibilities Collaborate with IT leadership to confirm priorities and support the development o...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Mid-Level Cybersecurity Engineer

    Mid-Level Cybersecurity Engineer

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for a Mid-Level Cybersecurity Maintenance Engineer (Prisma Cloud).Key Responsibilities Maintain and enhance the Prisma Cloud Console and deploy Defenders / Enforcers across var...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_hours • serp_jobs.job_card.promoted • serp_jobs.job_card.new
    Cybersecurity Risk Manager

    Cybersecurity Risk Manager

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for a Manager, Cybersecurity Risk.Key Responsibilities Manage cybersecurity assessment processes for third parties and IT systems, ensuring compliance with information securi...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Digital Forensics Engineer II

    Digital Forensics Engineer II

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for an Engineer II - Digital Forensics & Investigations.Key Responsibilities Lead digital forensic investigations involving cyber incidents, insider threats, fraud, or policy...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_hours • serp_jobs.job_card.promoted • serp_jobs.job_card.new
    Cybersecurity Architect

    Cybersecurity Architect

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for a Sr Cybersecurity Architect to develop and maintain security architecture frameworks and lead cybersecurity initiatives. Key Responsibilities Develop and maintain enterpr...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Cybersecurity Trust Manager

    Cybersecurity Trust Manager

    VirtualVocations • Raleigh, North Carolina, United States
    serp_jobs.job_card.full_time
    A company is looking for a Cybersecurity TPRM & Trust Manager.Key Responsibilities Manage the customer Trust Center and coordinate security audits Respond to customer security inquiries and asse...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted