Talent.com
Cybersecurity Engineer - Breach and Attack Simulation (BAS)
Cybersecurity Engineer - Breach and Attack Simulation (BAS)Truist • Raleigh, NC, US
No longer accepting applications
Cybersecurity Engineer - Breach and Attack Simulation (BAS)

Cybersecurity Engineer - Breach and Attack Simulation (BAS)

Truist • Raleigh, NC, US
10 days ago
Job type
  • Full-time
  • Part-time
  • Temporary
Job description

Cybersecurity Engineer - Breach and Attack Simulation (BAS)

Join to apply for the Cybersecurity Engineer - Breach and Attack Simulation (BAS) role at Truist

Cybersecurity Engineer - Breach and Attack Simulation (BAS)

Join to apply for the Cybersecurity Engineer - Breach and Attack Simulation (BAS) role at Truist

Get AI-powered advice on this job and more exclusive features.

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary :

Regular

Language Fluency : English (Required)

Work Shift :

1st shift (United States of America)

Please review the following job description :

The Cybersecurity Engineer (Breach and Attack Simulation) supports the design, execution, and maintenance of security validation capabilities that strengthen the firm's defenses. This entry-level role assists in operating BAS / Continuous Security Validation (CSV) tools, performing security testing, and analyzing results to identify control gaps and vulnerabilities. Working under senior engineers and managers, the engineer contributes to integrating BAS capabilities into the enterprise security environment, helping improve detection, response, and overall cyber resilience.

Essential Duties And Responsibilities

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

  • Support BAS Operations : Assist in setting up, executing, and monitoring BAS / CSV attack simulations that emulate adversary tactics, techniques, and procedures (TTPs).
  • Assist in Result Analysis : Help review BAS results to identify potential vulnerabilities, detection gaps, and opportunities for improving security controls.
  • Contribute to Documentation : Maintain accurate records of BAS scenarios, procedures, and outcomes; assist in preparing reports for technical and non-technical stakeholders.
  • Tool and System Integration : Work with senior engineers to integrate BAS platforms with enterprise security tools such as SIEM, EDR, and SOAR.
  • Collaboration and Learning : Partner with red, blue, and purple teams to understand simulation outcomes, strengthen alerts / rules, and expand knowledge of detection engineering.
  • Threat Intelligence Application : Leverage threat intelligence provided by senior staff to help inform test scenarios and understand emerging attack trends.
  • Vulnerability Management Support : Participate in identifying and tracking vulnerabilities highlighted through BAS and other testing.
  • Project Participation : Contribute to security validation initiatives and play supporting roles in larger, more complex projects.
  • Continuous Development : Engage in learning activities to expand knowledge of BAS, cybersecurity frameworks (e.g., NIST, MITRE ATT&CK), and automation / scripting in support of security operations.

Required Qualifications

The requirements listed below are representative of the knowledge, skill and / or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

  • Bachelor's degree and five years of experience in systems engineering or administration or an equivalent combination of education and work experience.
  • In-depth knowledge in applied enterprise information security technologies including but not limited to firewalls, intrusion detection / prevention systems, network operating systems, identity management, database activity monitoring, encryption, content filtering, and Mainframe security
  • Previous experience in planning and managing IT projects
  • Preferred Qualifications :

  • Experience with Breach and Attack (BAS) or Continuous Security Validation (CSV) tools
  • Bachelor's degree and six years of experience or an equivalent combination of education and work experience
  • Banking or financial services experience
  • Experience designing and executing Attack Scenarios : Plan and conduct realistic cyberattack simulations that mimic real-world threat actor tactics, techniques, and procedures (TTPs).
  • Analyze Simulation Results : Evaluate the outcomes of BAS, identifying weaknesses in security controls, vulnerabilities, and gaps in detection and response capabilities.
  • Provide Actionable Recommendations : Develop and present recommendations to improve security policies, procedures, and technologies based on simulation findings.
  • Integrate BAS with Security Infrastructure : Integrate BAS platforms with existing security tools like SIEM and EDR to enhance detection and response capabilities.
  • Document and Communicate : Maintain documentation of BAS methodologies, procedures, and results, and communicate findings to technical and non-technical stakeholders.
  • Collaborate with Security Teams : Work with security analysts and engineers to adjust alerts, rules, and controls based on simulation results.
  • Threat Hunting and Intelligence : Utilize threat intelligence to inform attack scenarios and identify emerging threats.
  • Vulnerability Management : Identify, prioritize, and recommend remediation of high-risk vulnerabilities.
  • Red Teaming and Blue Teaming : May also participate in red, purple, and blue team exercises to further evaluate security posture.
  • Strong understanding of cybersecurity concepts, including attack vectors, TTPs, and security controls.
  • Experience with CI / CD pipeline end to end lifecycle
  • Experience with penetration testing, vulnerability management, and security tools.
  • Proficiency in scripting and automation languages (e.g., Python, PowerShell).
  • Knowledge of common threat intelligence sources and frameworks.
  • Excellent analytical, problem-solving, and communication skills.
  • Ability to work independently and as part of a team.
  • Familiarity with cybersecurity frameworks and standards (e.g., NIST, MITRE ATT&CK and D3FEND).
  • Experience with GRC engineering
  • Experience with commercial BAS tools : AttackIQ, SafeBreach, Cymulate, etc.
  • Experience with detection engineering and SOAR
  • Other Job Requirements / Working Conditions

    Sitting

    Constantly (More than 50% of the time)

    Visual / Audio / Speaking

    Able to access and interpret client information received from the computer and able to hear and speak with individuals in person and on the phone.

    Manual Dexterity / Keyboarding

    Able to work standard office equipment, including PC keyboard and mouse, copy / fax machines, and printers.

    Availability

    Able to work all hours scheduled, including overtime as directed by manager / supervisor and required by business need.

    Travel

    Minimal and up to 10%

    General Description of Available Benefits for Eligible Employees of Truist Financial Corporation : All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist's generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist's defined benefit pension plan, restricted stock units, and / or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

    Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

    EEO is the Law Pay Transparency Nondiscrimination Provision E-Verify

    Seniority level

    Seniority level

    Not Applicable

    Employment type

    Employment type

    Full-time

    Job function

    Job function

    Information Technology

    Referrals increase your chances of interviewing at Truist by 2x

    Get notified about new Cyber Security Engineer jobs in Atlanta, GA

    Atlanta, GA $120,000.00-$150,000.00 1 week ago

    Roswell, GA $80,000.00-$90,000.00 2 months ago

    Engineer, Information Security Threat Intelligence

    Cybersecurity Engineer II | Network Security

    Atlanta, GA $90,000.00-$130,000.00 3 weeks ago

    Cyber Triage and Forensics - Junior Analyst

    Atlanta, GA $60,400.00-$109,600.00 1 day ago

    Atlanta, GA $131,292.70-$172,090.00 1 month ago

    Atlanta, GA $120,000.00-$160,000.00 1 month ago

    Atlanta Metropolitan Area $99,461.00-$128,329.00 14 hours ago

    Senior Security Engineer, Aviation IT Risk

    Cyber Triage and Forensics - Junior Analyst

    Cybersecurity Fraud Staff Engineer (Remote)

    Atlanta, GA $140,000.00-$190,000.00 4 weeks ago

    Atlanta, GA $95,000.00-$115,000.00 1 day ago

    Junior Analyst, Cybersecurity Architecture

    Atlanta, GA $125,000.00-$175,000.00 1 day ago

    Atlanta, GA $125,000.00-$175,000.00 3 weeks ago

    We're unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

    J-18808-Ljbffr

    Create a job alert for this search

    Cybersecurity Engineer - Breach and Attack Simulation (BAS) • Raleigh, NC, US

    Related jobs
    IAM Analyst - Cybersecurity

    IAM Analyst - Cybersecurity

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for an IAM Analyst 1 specializing in cybersecurity, data analysis, and documentation / reporting.Key Responsibilities : Trigger and track identity verification processes for use...Show more
    Last updated: 13 hours ago • Promoted • New!
    SIEM Engineer

    SIEM Engineer

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for a SIEM Engineer to join a cutting-edge cybersecurity team supporting Cortex XSIAM deployments in a fully remote capacity. Key Responsibilities of the SIEM Engineer Collabo...Show more
    Last updated: 30+ days ago • Promoted
    Remote SIEM Engineer

    Remote SIEM Engineer

    VirtualVocations • Raleigh, North Carolina, United States
    Remote
    Full-time
    A company is looking for a Cortex XSIAM Consultant to join a premier cyber security organization remotely.Key Responsibilities Develop log ingestion strategies and contribute to detection strateg...Show more
    Last updated: 30+ days ago • Promoted
    Cybersecurity Tier 2 Analyst

    Cybersecurity Tier 2 Analyst

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for a Cybersecurity Tier 2 Analyst.Key Responsibilities Review and respond to tickets escalated from Tier 1 analysts Analyze and apply cyber threat intelligence to support d...Show more
    Last updated: 9 hours ago • Promoted • New!
    Senior Cyber Security Engineer

    Senior Cyber Security Engineer

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for a Senior Cyber Security Engineer, Security Validation (Remote).Key Responsibilities Lead Red Team engagements to emulate real-world threat actors and validate enterprise ...Show more
    Last updated: 30+ days ago • Promoted
    Sr Cybersecurity Analyst - Threat Hunting - Remote

    Sr Cybersecurity Analyst - Threat Hunting - Remote

    UnitedHealth Group • Raleigh, NC, United States
    Remote
    Full-time
    Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives.The work you do with our team will directly improve health outcomes by connect...Show more
    Last updated: 2 days ago • Promoted
    Senior Security Engineer

    Senior Security Engineer

    Qualys • Raleigh, NC, United States
    Full-time
    Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!.As a Senior Security Engineer at Qualys, you will play a critical role within ou...Show more
    Last updated: 9 hours ago • Promoted • New!
    Cybersecurity Technical Lead

    Cybersecurity Technical Lead

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for a Continuous Diagnostics and Mitigation (CDM) Technical Lead / Subject-Matter Expert (SME).Key Responsibilities : Serve as the technical lead for the implementation and op...Show more
    Last updated: 2 days ago • Promoted
    Cybersecurity Analyst

    Cybersecurity Analyst

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for an Analyst I, Falcon Complete (Hybrid).Key Responsibilities Exercise incident handling processes across Windows, Mac, and Linux platforms Perform basic malware analysis ...Show more
    Last updated: 30+ days ago • Promoted
    Cybersecurity Cloud SME

    Cybersecurity Cloud SME

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for a Cybersecurity Cloud Subject Matter Expert (SME).Key Responsibilities Serve as the primary cloud security architect for cloud-hosted IT systems, ensuring robust security...Show more
    Last updated: 3 days ago • Promoted
    Lead Cybersecurity Engineer

    Lead Cybersecurity Engineer

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for a Lead Cybersecurity Engineer, Engineering Operations.Key Responsibilities Provide direction for building and enhancing an operational excellence model for the global sec...Show more
    Last updated: 30+ days ago • Promoted
    Cybersecurity Instructor

    Cybersecurity Instructor

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for a Cybersecurity Instructor.Key Responsibilities Host regular live Q&A sessions to assist students in their learning journey Provide personalized support through 1 : 1 vide...Show more
    Last updated: 30+ days ago • Promoted
    New Jersey Licensed Cybersecurity Engineer

    New Jersey Licensed Cybersecurity Engineer

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for a Senior Lead, Cybersecurity Engineering.Key Responsibilities Administer and maintain logical security controls on z / OS systems Oversee incident response, vulnerability ...Show more
    Last updated: 3 days ago • Promoted
    Cloud Engineer

    Cloud Engineer

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for a Google Workspace and Cloud Engineer.Key Responsibilities Manage and secure Google Workspace and other cloud security platforms Implement and oversee cloud security mea...Show more
    Last updated: 30+ days ago • Promoted
    Senior SOC Security Engineer

    Senior SOC Security Engineer

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for a Senior SOC / Splunk Security Engineer.Key Responsibilities Monitor, detect, and respond to security incidents using SIEM and EDR tools Conduct deep-dive investigations i...Show more
    Last updated: 30+ days ago • Promoted
    Senior Cybersecurity Engineer (Top Secret)

    Senior Cybersecurity Engineer (Top Secret)

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for a Cleared Senior Cybersecurity Engineer (Top Secret).Key Responsibilities Secure cloud-based environments and implement security solutions Drive Continuous RMF practices...Show more
    Last updated: 3 days ago • Promoted
    Director of Cybersecurity Operations

    Director of Cybersecurity Operations

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for a Director of Falcon Complete (Remote).Key Responsibilities Oversee a team of Managers and Security Operations Analysts Partner with stakeholders to define strategic cyb...Show more
    Last updated: 5 hours ago • Promoted • New!
    Trade Surveillance Engineer

    Trade Surveillance Engineer

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for a TradingHub Trade Surveillance Engineer (equities, fixed income, FX, Derivatives).Key Responsibilities Lead the implementation and customization of TradingHub Trade Surv...Show more
    Last updated: 12 days ago • Promoted
    AWS Security Engineer

    AWS Security Engineer

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for an AWS Cybersecurity Consultant.Key Responsibilities Design and manage AWS organizational governance, including Service Control Policies and multi-account structures Imp...Show more
    Last updated: 1 day ago • Promoted
    Cybersecurity Lead

    Cybersecurity Lead

    VirtualVocations • Raleigh, North Carolina, United States
    Full-time
    A company is looking for a Senior IT Generalist / Cybersecurity Lead.Key Responsibilities Lead CMMC readiness, implementation, and sustainment activities across the organization Develop and main...Show more
    Last updated: 10 days ago • Promoted