cyber hunt & respond principal engineer

automation engineer

cyber security analyst (10a-7p shift) Jobs in Atlanta

cyber security analyst (10a-7p shift)

cybersecurity engineer (multi-cloud expertise) Jobs in Atlanta

cybersecurity engineer ii, saas (remote) Jobs in Atlanta

cybersecurity engineer ii, saas (remote)

cybersecurity staff engineer pki

The Home Depot

<div><div>Position Purpose:
This position is part of the PKI team in Cybersecurity with a focus on developing and deploying certificate automation solutions. This team supports applications and devices across the entire Home Depot enterprise. This role will lead initiatives for automation of services for platforms issuing and managing certificates and gathering data through interfaces related to certificates. This role will lead development and application services, the individual will need significant experience in application and system development. 
 
Key Responsibilities:<ul><li>
100% Deliver Execution, Plans &amp; Aligns, Develop Others - Design, review and execute solutions to protect the enterprise; Lead, mentor and provide guidance; Facilitate vulnerability management programs across systems, networking and engineering teams; Develop, test, deply and operationalize security monitoring, assessment and response solutions</li></ul> 
Direct Manager/Direct Reports:<ul><li>
This position typically reports to Manager or Sr. Manager</li><li>
This position has 0 Direct Reports</li></ul> 
Travel Requirements:<ul><li>
No travel required.</li></ul> 
Physical Requirements:<ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul> 
Working Conditions:<ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul> 
Minimum Qualifications:<ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li></ul> 
Preferred Qualifications:<ul><li>
Proficiency with cloud platforms (GCP and Entra preferred)</li><li>
Experience required in developing and deploying solutions using Terraform</li><li>
Experience required in developing and deploying solutions using Kubernetes or other container solutions</li><li>
Proficiency in programming languages such as Python, Java, or Scala.</li><li>
Experience with scripting languages (e.g., Bash, PowerShell) for automation tasks.</li><li>
Experience with data extraction and ingestion processes to support the PKI certificate data lake</li><li>
Proficiency of Cloud Functions / Cloud Run with proven experience on using workload identify federation from Github;</li><li>
Experience with Github and Github actions.
</li><li>Experience in design and implementing the exception captures, retry logic, and use deadletter concept to retrieve failed jobs for asynchronous execution from the scripts.
Minimum Education:<ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul> 
Preferred Education:<ul><li>
No additional education</li></ul> 
Minimum Years of Work Experience:<ul><li>
8</li></ul> 
Preferred Years of Work Experience:<ul><li>
No additional years of experience</li></ul> 
Minimum Leadership Experience:<ul><li>
None</li></ul> 
Preferred Leadership Experience:<ul><li>
None</li></ul> 
Certifications:<ul><li>
None</li></ul> 
Competencies:<ul><li>
Action Oriented</li><li>
Collaborates</li><li>
Drives Engagement</li><li>
Communicates Effectively</li><li>
Customer Focus</li><li>
Drives Results</li><li>
Manages Conflict</li></ul></li></ul></div> 
Apply End Date: 03/26/2026</div>

Cybersecurity Staff Engineer | PKI

<div>Position Purpose:
This role is a key technical position on the SaaS Security team, responsible for the integration, development, and automation of the SaaS Security program. The CyberSecurity Engineer II will focus on the technical onboarding of SaaS applications into security tooling, developing custom solutions to enhance data visibility and reporting, and automating security processes to enable the program to scale across the enterprise. 
Key Responsibilities:<ul><li>
100% Deliver Execution &amp; Problem Solving - Collaborate with Enterprise Technology to configure and integrate cybersecurity systems that mitigate risk; Troubleshoot and quickly resolve escalated incidents; Design, build, configure, maintain, monitor cybersecurity threat defense capabilities and user access management; Coordinate integration and collaboration with managed security providers; Investigate and recommend corrective actions related to incidents</li></ul> 
Direct Manager/Direct Reports:<ul><li>
This position typically reports to Manager or Sr. Manager</li><li>
This position has 0 Direct Reports</li></ul> 
Travel Requirements:<ul><li>
No travel required.</li></ul> 
Physical Requirements:<ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul> 
Working Conditions:<ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul> 
Minimum Qualifications:<ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li><li>
3+ years of experience in Information Security, IT, or software development.</li><li>
Experience with scripting or development languages (e.g., Python, PowerShell, JavaScript).</li><li>
Experience working with APIs (REST, SOAP).</li><li>
Understanding of fundamental cybersecurity principles.</li></ul>
Preferred Qualifications:<ul><li>
Bachelor's degree in Computer Science, Information Systems, or a related field.</li><li>
Experience in a cloud or SaaS security role.</li><li>
Hands-on experience with identity protocols (SAML, OAuth, OIDC, SCIM).</li><li>
Experience building dashboards or reports in data visualization tools (e.g., Tableau, Power BI, Grafana).</li><li>
Security certifications such as CompTIA Security+, GCLD, or GCSA.</li></ul>
Minimum Education:<ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul> 
Preferred Education:<ul><li>
No additional education</li></ul> 
Minimum Years of Work Experience:<ul><li>
2</li></ul> 
Preferred Years of Work Experience:<ul><li>
No additional years of experience</li></ul> 
Minimum Leadership Experience:<ul><li>
None</li></ul> 
Preferred Leadership Experience:<ul><li>
None</li></ul> 
Certifications:<ul><li>
None</li></ul> 
Competencies:<ul><li>
Action Oriented</li><li>
Collaborates</li><li>
Communicates Effectively</li><li>
Customer Focus</li><li>
Drives Results</li></ul></div>

Cybersecurity Engineer II, SaaS (REMOTE)

Guidehouse

<div>Job Family:
IT Cyber Security 
Travel Required:
Up to 10% 
Clearance Required:
None
What You Will Do:
We are seeking a highly skilled and experienced Cybersecurity Engineer with extensive expertise in multiple cloud environments, including AWS, Azure, and Google Cloud. The ideal candidate will have a strong background in cloud security, with the ability to design, implement, and manage security solutions across various cloud platforms. This role requires a proactive individual who can enhance our security posture through effective cloud security strategies and practices. Must have experience working in a Federal secured environment or enterprise.
Key Responsibilities:
Cloud Security Architecture<ul><li>
Design and implement robust security architectures for cloud environments (AWS, Azure, Google Cloud).</li><li>
Develop and enforce security policies, standards, and best practices for cloud deployments.</li><li>
Ensure compliance with industry standards and regulatory requirements.</li></ul>
Security Operations<ul><li>
Monitor and respond to security incidents and alerts in cloud environments.</li><li>
Conduct regular security assessments and audits to identify vulnerabilities and risks.</li><li>
Implement and manage security tools and technologies to enhance cloud security.</li></ul>
Identity and Access Management (IAM)<ul><li>
Design and manage IAM policies and roles to ensure secure access to cloud resources.</li><li>
Implement multi-factor authentication (MFA) and other access controls to protect sensitive data.</li><li>
Conduct regular reviews of IAM policies and access permissions.</li></ul>
Data Protection<ul><li>
Implement encryption and data protection mechanisms to safeguard data in transit and at rest.</li><li>
Develop and maintain data loss prevention (DLP) strategies for cloud environments.</li><li>
Ensure secure backup and recovery processes for critical data.</li></ul>
Automation and DevSecOps<ul><li>
Integrate security into the DevOps pipeline to ensure secure development and deployment practices.</li><li>
Develop and implement automation scripts and tools to enhance security operations.</li><li>
Collaborate with development and operations teams to promote a culture of security.</li></ul>
Threat Intelligence and Incident Response<ul><li>
Gather and analyze threat intelligence to stay informed about the latest threats and attack techniques.</li><li>
Develop and maintain incident response plans and playbooks for cloud environments.</li><li>
Conduct post-incident reviews to identify lessons learned and implement improvements.</li></ul> 
What You Will Need:<ul><li>
US Citizenship required, due to nature of client engagement</li><li>
Bachelor's degree from an accredited university in Computer Science, Information Security, IT Systems Engineering or a related field AND Eight (8+) plus years of post-graduation work experience in cybersecurity, with a focus on cloud security; Or Master's degree from an accredited university in Computer Science, Information Security, IT Systems Engineering or a related field AND Six (6+) plus years of post-graduation work experience in cybersecurity, with a focus on cloud security.</li><li>
Note: Internships, Co-ops, Fellowships and graduate research work does not count towards years of experience.</li><li>
Strong knowledge of cloud security frameworks, standards, and best practices (e.g., CSA, NIST).</li><li>
Proficiency with cloud security tools and technologies (e.g., AWS Security Hub, Azure Security Center, Google Cloud Security Command Center).</li><li>
Excellent problem-solving skills and the ability to think like an attacker.</li><li>
Strong communication and presentation skills, with the ability to convey complex technical concepts to non-technical stakeholders.</li><li>
Ability to work independently and as part of a team in a fast-paced environment.</li><li>
Ability to travel as required.</li><li>
Currently reside in the contiguous United States.</li><li>
Ability to work in a Guidehouse Office or Client Office location as needed</li></ul>
What Would Be Nice To Have:<ul><li>
Cybersecurity certifications such as CISSP or Network+</li><li>
Previous experience implementing O365 security tools</li><li>
Management consulting experience with Federal, State or Local Government clients</li></ul>
#LI-DNI 
What We Offer:
Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.
Benefits include:<ul><li>
Medical, Rx, Dental &amp; Vision Insurance</li><li>
Personal and Family Sick Time &amp; Company Paid Holidays</li><li>
Position may be eligible for a discretionary variable incentive bonus</li><li>
Parental Leave and Adoption Assistance</li><li>
401(k) Retirement Plan</li><li>
Basic Life &amp; Supplemental Life</li><li>
Health Savings Account, Dental/Vision &amp; Dependent Care Flexible Spending Accounts</li><li>
Short-Term &amp; Long-Term Disability</li><li>
Student Loan PayDown</li><li>
Tuition Reimbursement, Personal Development &amp; Learning Opportunities</li><li>
Skills Development &amp; Certifications</li><li>
Employee Referral Program</li><li>
Corporate Sponsored Events &amp; Community Outreach</li><li>
Emergency Back-Up Childcare Program</li><li>
Mobility Stipend</li></ul>
About Guidehouse
Guidehouse is an Equal Opportunity Employer&ndash;Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.
Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.
If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.
All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or guidehouse@myworkday.com. Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.
If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse&rsquo;s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact recruiting@guidehouse.com. Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant&rsquo;s dealings with unauthorized third parties.
Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.</div>

Cybersecurity Engineer (Multi-Cloud Expertise)

Landmark Properties, Inc.

<div>Job Description
Senior Director of Data Management and Security
The Senior Director of Data Management and Security is responsible for defining, leading, and executing the organization&rsquo;s enterprise AI adoption, data management, and security strategies. This role combines innovation with oversight of data governance, data quality, and data lifecycle management and includes ownership of data security, data protection controls, and risk management practices.
This leader will ensure that all organizational data&mdash;structured and unstructured&mdash;is properly classified, protected, monitored, and governed across its lifecycle. They will facilitate discussion within and between department entities regarding the use of and access to company data. The Senior Director will also oversee the use and optimization of Microsoft Defender, Microsoft Purview, and related Microsoft 365 security and compliance platforms to enforce policy, monitor threats, and prevent data loss.
The ideal candidate has deep expertise in data management, cybersecurity practices, and modern cloud security frameworks, including hands-on experience with Microsoft security and compliance technologies.
Reports to: Associate Vice President - Information Technology
Direct Reports: Business Systems Developer, Security Analyst, and other staff as needed.
Duties/Responsibilities: The duties listed below are an outline of the Senior Director&rsquo;s responsibilities and should not be considered an all-inclusive list. As the needs of the organization change, these duties may be modified as needed.
Strategic Leadership<ul><li>
Develop and execute the enterprise data management and data security strategy, including governance, protection, classification, quality, and lifecycle processes.</li><li>
Lead organizational adoption of data stewardship, data literacy, and secure data handling practices including the use of AI and Automated Decision Making Tools (ADMTs).</li><li>
Provide executive-level insights and reporting on data initiatives, security posture, risk trends, and compliance readiness.</li><li>
Lead data stewardship and data literacy programs to promote effective data usage across the organization.</li></ul>
Data Governance &amp; Management<ul><li>
Oversee enterprise data architecture, data platforms, and cloud-based data ecosystems.</li><li>
Establish and enforce data policies, standards, and procedures aligned with regulatory, contractual, and internal requirements.</li><li>
Direct data integration, migration, transformation, and quality initiatives in support of business objectives.</li><li>
Collaborate with business leaders to promote data-driven innovation and continuous improvement.</li></ul>
Data Security &amp; Compliance<ul><li>
Define and oversee the organization's data security framework, ensuring alignment with cybersecurity and information governance standards.</li><li>
Implement and manage a comprehensive data classification framework to ensure sensitive data is correctly labeled, handled, and protected.</li><li>
Lead the deployment, configuration, and continuous tuning of Microsoft Purview for:<ul><li>
Data classification and labeling (sensitivity labels)</li><li>
Data Loss Prevention (DLP)</li><li>
Information protection and governance</li><li>
Insider risk management and auditing</li></ul></li><li>
Lead the deployment and operational use of Microsoft Defender security technologies, including:<ul><li>
Microsoft Defender for Cloud Apps</li><li>
Microsoft Defender for Endpoint</li><li>
Microsoft Defender for Identity</li><li>
Microsoft Defender for Office 365</li></ul></li><li>
Ensure proactive monitoring, detection, and response to data risks, threats, and security incidents.</li><li>
Partner with cybersecurity teams to implement zero-trust security principles across data environments.</li></ul>
Data Loss Prevention &amp; Protection<ul><li>
Develop and continuously refine the organization's retention and DLP policies across email, endpoints, cloud storage, and enterprise applications in conjunction with the legal team.</li><li>
Lead ongoing testing, auditing, and refinement of security controls that prevent unauthorized data access, sharing, or exfiltration.</li><li>
Ensure appropriate encryption, access control, retention, and risk mitigation strategies for all data assets.</li></ul>
Team Leadership &amp; Collaboration<ul><li>
Manage and mentor the data management and security teams, including business systems, data governance, and security analysts.</li><li>
Foster a culture of accountability, innovation, and secure-by-design thinking.</li><li>
Work closely with IT, cybersecurity, legal, and business stakeholders to ensure alignment and shared ownership of data risk.</li></ul>
Industry Awareness &amp; Innovation<ul><li>
Track industry trends, emerging threats, cloud capabilities, and evolving best practices in data management and security.</li><li>
Recommend, design, and implement modern tools and methodologies that strengthen the organization's data capabilities.</li><li>
Provide regular reporting and insights to executive leadership on data initiatives, risks, and opportunities.</li></ul>
Education &amp; Experience<ul><li>
Bachelor&rsquo;s degree in Computer Science, Information Systems, Cybersecurity, Data Science, or a related field. Master&rsquo;s degree is preferred.</li><li>
8+ years of progressive experience in data management, governance, or cybersecurity roles, with 3+ years in leadership.</li><li>
Experience with Microsoft cloud security and compliance platforms (Microsoft Defender, Microsoft Purview) required.</li><li>
Experience with enterprise data platforms (e.g., Microsoft Azure, AWS, Snowflake) preferred.</li></ul>
Preferred Knowledge, Skills, &amp; Abilities.<ul><li>
Deep understanding of data management, governance frameworks, and data security best practices.</li><li>
Strong expertise in data classification, DLP, and cloud security architectures.</li><li>
Hands-on experience implementing and managing Microsoft Purview and Microsoft Defender solutions.</li><li>
Experience with the use of AI and Power Platform Tools to automate tasks and provide access to common data.</li><li>
Exceptional leadership, communication, and stakeholder management skills.</li><li>
Ability to work cross-functionally in a highly collaborative environment.</li><li>
Strong analytical, problem-solving, and strategic planning skills.</li></ul>
Work Environment<ul><li>
The work environment characteristics described herein are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. The noise level in the work environment is usually moderate.</li><li>
Travel: May require travel to sites as needed, around 20%</li></ul>
Physical Demands:
<ul><li>The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.</li></ul><ul><li>
While performing the duties of this job, the employee is frequently required to stand; walk; sit; use hands to finger, handle, or feel; reach with hands and arms; climb or balance; stoop, kneel, crouch, or crawl and talk or hear.</li><li>
Specific vision abilities required by this job include close vision, distance vision, peripheral vision, depth perception, and the ability to adjust focus.</li><li>
The employee may infrequently drive a vehicle (intrastate and interstate travel) or be subject to air travel for purposes of Company business.</li></ul>
#LI-LF1
Landmark Properties is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.</div>

Senior Director - Data Management & Security

Information Technology Senior Management Forum

<div><div>Posted Date
3/11/2026
</div><div>Description
<div>)***
ESSENTIAL DUTIES AND RESPONSIBILITIES:<ul><li>
As Digital Forensics &amp; Incident Response (DFIR) professionals, individuals in this role must be well-versed in log, packet, network, endpoint, root cause analysis, containment, and eradication.</li><li>
A programming, computer science, or data science background will be important to success in this role as unstructured data will need automated decisions made and other data reduction techniques applied. Depending on the candidate, the role will likely start with basic searches and visualizations but may lead to pioneering use of Machine Learning and Artificial Intelligence techniques and tools. Familiarity with programming and malicious code critical to success in this role.</li><li>
This candidate must have a strong knowledge of windows internals to effectively respond to and eradicate advanced attacks. This role must advocate for the organization&rsquo;s threat hunting efforts. The ability to quickly identify nefarious artifacts versus benign activity will be a key skill for this position. Cyber &amp; Respond Engineers will be asked to consult on a variety of problems (technical and non-technical) within the team and larger organization.</li><li>
The Cyber Hunt &amp; Respond Senior Engineer is responsible for conducting presentations and mentoring others interested or responsible for related data science, threat hunting, or incident response.</li><li>
Develop/invent highly innovative solutions within multiple information security technologies, theories and/or techniques that impact CIS strategy</li><li>
Develop security designs for systems and networks with multilevel security requirements</li><li>
Lead highly complex and visible projects with notable risk and complexity</li></ul>
QUALIFICATIONS
Required Qualifications:
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.<ul><li>
Bachelor&rsquo;s degree in Computer Science, Computer Engineering, Cybersecurity, or related field of relevant education, certification, or related training.</li><li>
8 years of experience in Cybersecurity or related work</li><li>
Knowledge of one or more cloud platforms and cloud security</li><li>
Knowledge of general information technology (IT) and cybersecurity</li><li>
Knowledge of computer networking concepts and protocols, and network security methodologies.</li><li>
Knowledge of network traffic analysis and packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).</li><li>
Knowledge of operating systems, including Windows/Unix ports and services.</li><li>
Knowledge of modern identity and access management concepts</li><li>
Knowledge of phishing tactics and techniques</li><li>
Knowledge of advanced cyber threats and vulnerabilities.</li><li>
Knowledge of cyber-attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).</li><li>
Knowledge of adversarial tactics, techniques, and procedures</li><li>
Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions.</li><li>
Knowledge of incident response and handling methodologies.</li><li>
Knowledge of countermeasures to address a variety of threats</li><li>
Knowledge around leveraging automation, ML, and/or AI</li><li>
Knowledge of advanced threat hunting techniques</li><li>
Knowledge of types of digital forensics data and how to recognize them.</li><li>
Knowledge of types and collection of persistent data.</li><li>
Knowledge of file system implementations (e.g., New Technology File System [NTFS], File Allocation Table [FAT], File Extension [EXT]).</li><li>
Knowledge of which system files (e.g., log files, registry files, configuration files) contain relevant information and where to find those system files.</li><li>
Knowledge of processes for seizing and preserving digital evidence.</li><li>
Strong functional and technical knowledge of information/cyber security capabilities with deep expertise in one or more of the following areas: Encryption, Data Security, Application Security, End Point Security, Identity and Access Management, Windows/Unix/Linux Systems Security, Mainframe Security, Perimeter Security, Network Security, Mobility Security, Cyber Security, Cryptography, or Authentication Systems</li><li>
Strong understanding of service lifecycle management, strategic planning, and the cyber security landscape</li></ul>
Preferred Qualifications:<ul><li>
Experience working in cloud environments, namely Microsoft Azure and Amazon AWS.</li><li>
Master&rsquo;s degree or MBA and ten years of experience in business analysis or an equivalent combination of education and work experience.</li><li>
Banking or financial services experience</li><li>
Prior management experience</li><li>
Experience in leading large-scale complex projects from beginning to end</li><li>
ISSEP Certification</li><li>
Other security certifications (e.g. CCNA Security, GSEC, GCED, GPPA, etc.)</li><li>
Other technical Certifications (e.g. CCNA, RHCE, MCSE, etc.)</li><li>
Certification in Information Security Management (e.g. Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC) or Certified Information Security Manager (CISM)), or related security certification(s)</li></ul>
General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist&rsquo;s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist&rsquo;s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.
Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.
EEO is the Law E-Verify IER Right to Work</div>
</div><div></div><div><div>Type<div>
Full-time</div></div></div></div>

Cyber Hunt & Respond Principal Engineer

Truist

<div>The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.
Need Help?
If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).
Regular or Temporary:
Regular
Language Fluency: English (Required)
Work Shift:
1st shift (United States of America)<h3 class="jobSectionHeader">
Please review the following job description:</h3>
The Cyber Hunt &amp; Respond Principal Engineer (Principal Hunter) is an advanced role within the 24/7 Cyber Fusion Center. This role has 2 core functions, proactive Threat Hunting &amp; reactive Incident Response coverage.
 
 
Hunting involves searching through large, diverse sets of internal and external data to discover previously undetected threats. This role is creative and owns the development of new hypotheses on how adversaries may be attacking the organization and will prove the hypotheses based on our available data. Additionally, this role will work with internal groups to express the data needs to explore potential threats. 
 
Principal Hunters demonstrate deep expertise across advanced querying languages, assembly-level analysis, Python, regular expressions, debugging and reverse engineering tools, anti-analysis and evasion techniques, security automation, and artificial intelligence (AI). They are responsible for designing, building, and operationalizing net new threat hunting capabilities that materially improve the organization&rsquo;s ability to detect and respond to advanced adversaries (e.g. nation-state threats). 
 
In addition to hands on technical leadership, Principal Hunters serve as mentors and technical authorities for analysts, hunters, and incident responders. They provide guidance, coaching, and technical review to elevate the overall skill level, analytical rigor, and hunting maturity of the Cyber Fusion Center. 
This role participates in an on-call rotation and requires availability outside standard business hours, as necessitated by cyber incidents and imminent threat activity. 
 
***For this opportunity, Truist will not sponsor an applicant for work visa status or employment authorization, nor will we offer any immigration-related support for this position (including, but not limited to H-1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN-1 or TN-2, E-3, O-1, or future sponsorship for U.S. lawful permanent residence status.)***
ESSENTIAL DUTIES AND RESPONSIBILITIES:<ul><li>
As Digital Forensics &amp; Incident Response (DFIR) professionals, individuals in this role must be well-versed in log, packet, network, endpoint, root cause analysis, containment, and eradication.</li><li>
A programming, computer science, or data science background will be important to success in this role as unstructured data will need automated decisions made and other data reduction techniques applied. Depending on the candidate, the role will likely start with basic searches and visualizations but may lead to pioneering use of Machine Learning and Artificial Intelligence techniques and tools. Familiarity with programming and malicious code critical to success in this role.</li><li>
This candidate must have a strong knowledge of windows internals to effectively respond to and eradicate advanced attacks. This role must advocate for the organization&rsquo;s threat hunting efforts. The ability to quickly identify nefarious artifacts versus benign activity will be a key skill for this position. Cyber &amp; Respond Engineers will be asked to consult on a variety of problems (technical and non-technical) within the team and larger organization.</li><li>
The Cyber Hunt &amp; Respond Senior Engineer is responsible for conducting presentations and mentoring others interested or responsible for related data science, threat hunting, or incident response.</li><li>
Develop/invent highly innovative solutions within multiple information security technologies, theories and/or techniques that impact CIS strategy</li><li>
Develop security designs for systems and networks with multilevel security requirements</li><li>
Lead highly complex and visible projects with notable risk and complexity</li></ul>
QUALIFICATIONS
Required Qualifications:
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.<ul><li>
Bachelor&rsquo;s degree in Computer Science, Computer Engineering, Cybersecurity, or related field of relevant education, certification, or related training.</li><li>
8 years of experience in Cybersecurity or related work</li><li>
Knowledge of one or more cloud platforms and cloud security</li><li>
Knowledge of general information technology (IT) and cybersecurity</li><li>
Knowledge of computer networking concepts and protocols, and network security methodologies.</li><li>
Knowledge of network traffic analysis and packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).</li><li>
Knowledge of operating systems, including Windows/Unix ports and services.</li><li>
Knowledge of modern identity and access management concepts</li><li>
Knowledge of phishing tactics and techniques</li><li>
Knowledge of advanced cyber threats and vulnerabilities.</li><li>
Knowledge of cyber-attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).</li><li>
Knowledge of adversarial tactics, techniques, and procedures</li><li>
Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions.</li><li>
Knowledge of incident response and handling methodologies.</li><li>
Knowledge of countermeasures to address a variety of threats</li><li>
Knowledge around leveraging automation, ML, and/or AI</li><li>
Knowledge of advanced threat hunting techniques</li><li>
Knowledge of types of digital forensics data and how to recognize them.</li><li>
Knowledge of types and collection of persistent data.</li><li>
Knowledge of file system implementations (e.g., New Technology File System [NTFS], File Allocation Table [FAT], File Extension [EXT]).</li><li>
Knowledge of which system files (e.g., log files, registry files, configuration files) contain relevant information and where to find those system files.</li><li>
Knowledge of processes for seizing and preserving digital evidence.</li><li>
Strong functional and technical knowledge of information/cyber security capabilities with deep expertise in one or more of the following areas: Encryption, Data Security, Application Security, End Point Security, Identity and Access Management, Windows/Unix/Linux Systems Security, Mainframe Security, Perimeter Security, Network Security, Mobility Security, Cyber Security, Cryptography, or Authentication Systems</li><li>
Strong understanding of service lifecycle management, strategic planning, and the cyber security landscape</li></ul>
Preferred Qualifications:<ul><li>
Experience working in cloud environments, namely Microsoft Azure and Amazon AWS.</li><li>
Master&rsquo;s degree or MBA and ten years of experience in business analysis or an equivalent combination of education and work experience.</li><li>
Banking or financial services experience</li><li>
Prior management experience</li><li>
Experience in leading large-scale complex projects from beginning to end</li><li>
ISSEP Certification</li><li>
Other security certifications (e.g. CCNA Security, GSEC, GCED, GPPA, etc.)</li><li>
Other technical Certifications (e.g. CCNA, RHCE, MCSE, etc.)</li><li>
Certification in Information Security Management (e.g. Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC) or Certified Information Security Manager (CISM)), or related security certification(s)</li></ul>
General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist&rsquo;s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist&rsquo;s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.
Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.
EEO is the Law E-Verify IER Right to Work</div>

J.M. Huber Corporation

<div>
 
 Portfolio Business
 
 
 :
 
 Corporate
 
 
 J.M. Huber Corporation is one of the largest privately held, family-owned companies in the United States. Established in 1883, we are a diversified, global supplier of specialty and commodity chemicals, hydrocolloid solutions, engineered wood products and natural resources to customers spanning a wide variety of industries. With approximately $3 billion in sales and 4,000 employees worldwide, we have a material presence in more than 20 countries.
 
 
 
 Position Summary
 
 
 
 JM Huber is a family‑owned company that empowers you to make an impact from day one. As a global leader in engineered materials and woods products, we offer opportunities to innovate and grow. With a people‑first culture and operations in 20+ countries, Huber is a place where you can build your career. With our internship/co-op program, you will gain practical, hands-on experience, mentorship, and professional development. Join us and be part of a proud legacy.
 
 
 We are seeking a personable and highly motivated Co-Op to support the Global Cybersecurity team with strategic projects related to Risk and compliance and Security operations. As part of the co-op experience you will have the chance to work with experienced Cybersecurity professionals. If you&rsquo;re looking for real-world work experience and hands-on learning, this may be the position for you!
 
 
 
 Principal Duties &amp; Responsibilities
 
 
 
 <ul>
 <li>
 Assist in 3rd party risk assessments and remediations
 </li>
 <li>
 Assist in Optimizing Vulnerability management process
 </li>
 <li>
 Facilitate timely remediation of vulnerabilities in collaboration with business stakeholders
 </li>
 <li>
 Review Incident alerts and respond timely
 </li>
 <li>
 Assist in maturing SIEM Solution
 </li>
 <li>
 Assist in IT Security Policy / Standards creation
 </li>
 <li>
 Embrace AI / RPA and assist with identifying value adding business use cases
 
 
 </li>
 </ul>
 
 Specialized/Technical Knowledge Or Required Skills
 
 
 
 <ul>
 <li>
 Current rising senior in undergrad or graduate student studying Information Technology, Cybersecurity or any related field
 </li>
 <li>
 Proficiency with Microsoft 365 and Zoom
 </li>
 <li>
 Excellent oral and written communication skills
 </li>
 <li>
 Ability to work in detail-oriented, dynamic and changing environment
 </li>
 <li>
 Ability to commute to Cumberland (Smyrna) area
 </li>
 <li>
 Ability to work Summer 2026 full-time and Fall 2026 full/part-time (June 2026 to December 2026)
 
 
 </li>
 </ul>
 Our employees are our strongest asset, and their safety, health, and well-being is our highest priority. We respect the individual by providing opportunities for professional and personal development. Our Principles drive us to create an inclusive workplace where employees share core values, show dignity and respect toward others, and work hard to achieve their best performance.
 
 
 J.M. Huber Corporation is an EEO employer. Pre-employment drug screening is required
</div>

Global Cyber Security Co-Op

Explore 203+ Cybersecurity staff engineer pki in Atlanta this March. Find roles across top companies and apply now to boost your career.

203 cybersecurity staff engineer pki jobs In Atlanta

Cybersecurity Staff Engineer | PKI

Cybersecurity Engineer II, SaaS (REMOTE)

Cybersecurity Engineer (Multi-Cloud Expertise)

Senior Director - Data Management & Security

Cyber Hunt & Respond Principal Engineer

Cyber Hunt & Respond Principal Engineer

Global Cyber Security Co-Op