cybersecurity engineer ii, saas (remote)

engineer, systems reliability Jobs in Atlanta

engineer, systems reliability

security engineer - hybrid (atlanta, ga) Jobs in Atlanta

security engineer - hybrid (atlanta, ga)

security operations specialist Jobs in Atlanta

security operations specialist

security engineer

OneDigital

<div><div>No other company in our industry is supercharging the way they work and serve their clients like OneDigital. Fresh thinking has always been the core of OneDigital&rsquo;s vision and growth strategy. It&rsquo;s how we stand out in our industry, it&rsquo;s how we stay competitive and resilient in a changing world. Most importantly, our innovative approach is helping more people do their best work and live their best lives. Innovation fuels our employee experience by making it easier to do your best work anytime, anywhere and from any device. And our tech-based products for clients are a game changer in our industry. If you thrive on change and innovation, OneDigital is the career choice for you.</div><div></div><div>
Our Newest Opportunity:</div><div>
Summary:</div><div>
The Security Engineer Serves as a trusted advisor and subject matter expert to clients and guide senior leadership through managing business impacts and risk mitigation associated with a cyber incident or data breach ensuring client satisfaction.</div><div></div><div>
Essential Duties and Responsibilities (include but are not limited to):</div><ul><li>
Be the &ldquo;face of security&rdquo;, sit with business and engineering teams.</li><li>
Understand business as a whole.</li><li>
Act as the incident commander in specific engagements and lead company remediation functions coordinating with IT and Compliance teams to handle inquiries, briefings, and client facing status reports in a variety of formats.</li><li>
Augment the existing security practices in place and work with the teams to mature the security practice across the organization</li></ul><div></div><div>
Qualifications, Skills and Requirements:</div><ul><li>
Understand what it means to be compliant with HIPPA</li><li>
Respond to client audit requests</li><li>
Creating policies, procedures and documentation for security best practices.</li><li>
Ability to perform PC Encryption, Mobile Device Management, Penetration testing, and system hardening.</li><li>
Wholistic understanding of Information, systems, and Network Security</li><li>
Minimum of one of the following certifications: HCISPP, GIAC, CISSP, CEH.</li></ul><div></div><div>
Education, Training and Experience:</div><ul><li>
Strong technical communication skills (oral and written) and client demeanor, including experience briefing executive management.</li><li>
Experience with forensic tools and anti-cyber attack technology and methodologies.</li><li>
Experience taking an organization through a certification process such as SOCII, ISO27001, or HITRUST</li><li>
Professional degree relevant to technology or cybersecurity</li><li>
Strong understanding and interpretation of HIPAA</li></ul><div></div>
Your base pay is dependent upon your skills, education, qualifications, professional experience, and location. In addition to base pay, some roles are eligible for variable compensation, commission, and/or annual bonus based on your individual performance and/or the company&rsquo;s performance. We also offer eligible employees health, wellbeing, retirement, and other financial benefits, paid time off, overtime pay for non-exempt employees, and robust learning and development programs. You will receive reimbursement of job-related expenses per the company policy and may receive employee perks and discounts.
To learn more, visit: www.onedigital.com/careers<div></div><div>
OneDigital is an equal opportunity employer. Not only as a matter of standard, but to honor and celebrate our differences. We believe that the power of ONE starts with you. We are committed to cultivating and preserving a culture that celebrates diversity, insists on equity and inclusion, and connects us. Ensuring our people feel seen, valued, respected, and supported is fundamental to our core values and business goals.</div><div></div><div>
OneDigital provides equal employment opportunities to all employees and applicants for employment regardless of their: veteran status, uniformed servicemember status, race, color, religion, sex, sexual orientation, gender identity, age (40 and over), pregnancy (including childbirth, lactation and related medical conditions), national origin or ancestry, citizenship or immigration status, physical or mental disability, genetic information (including testing and characteristics) or any other category protected by federal, state or local law (collectively, &ldquo;protected characteristics&rdquo;). A copy of the Federal EEO poster is linked <div>here</div>.</div><div></div><div>
Pursuant to local Fair Chance Ordinances, we will consider qualified applications with arrest or conviction records for employment. For applicable candidates, the following ordinances are linked here to inform you of your rights as an applicant:</div><div></div><div><div>
City and County of San Francsico</div></div><div><div>
City of Los Angeles</div></div><div><div>
County of Los Angeles</div></div><div></div><div>
Employment decisions shall comply with all other applicable federal, state and city/county laws prohibiting discrimination in employment. OneDigital complies with all criminal history inquiry [or &lsquo;ban the box&rsquo;] laws in California, Connecticut, Colorado, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New Mexico, Oregon, Rhode Island, Vermont and Washington.</div><div></div><div><i>
In short, we believe in hiring the most qualified applicant for the position, regardless of background.</i></div><div></div><div>
If you have questions about our hiring policies and practices, we would be happy to discuss upon receiving your application. We hope to welcome you to OneDigital and look forward to hearing from you.</div><div></div><div><br>
OneDigital understands the immense responsibility and opportunities provided by Artificial Intelligence. We utilize advanced Artificial Intelligence [AI] technologies to enhance our recruitment process. This includes using AI to filter candidates based on their qualifications and to rediscover potential candidates from our existing applicant pool. Our AI systems help us efficiently identify the best fit for our open positions, ensuring a streamlined and effective hiring experience. However, AI does not replace the humans in our process. If you have concerns about our use of AI, you may opt out where laws allow.</div><div></div><div>
Thank you for your interest in joining the OneDigital team!</div></div>

Security Engineer - Hybrid (Atlanta, GA)

CVS Health

<div><p>We&rsquo;re building a world of health around every individual &mdash; shaping a more connected, convenient and compassionate health experience. At CVS Health&reg;, you&rsquo;ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger &ndash; helping to simplify health care one person, one family and one community at a time.</p><p></p><p><b>
Position Summary</b></p><p></p><p>
Development, Standards &amp; Secure Design</p><ul><li>
Lead development and enforcement of application and AI security policies, standards, and guardrails, embedding security-by-design across both traditional and AI-driven systems.</li><li>
Establish secure design patterns for AI agent frameworks, covering prompt management, tool invocation, memory handling, autonomy boundaries, and escalation controls.</li><li>
Promote organization-wide awareness of AI-specific risks such as model misuse, prompt injection, data leakage, and unsafe agent behavior.</li></ul><p></p><p>
AI &amp; Agentic Security Architecture</p><ul><li>
Serve as the principal SME for securing AI-enabled applications and agentic system architectures.</li><li>
Architect and review secure designs for systems leveraging LLMs/foundation models, autonomous and semi-autonomous agents, RAG pipelines, and tool‑using or decision‑making workflows.</li><li>
Define identity, authorization, data access, and observability controls specific to agentic environments while partnering closely with AI platform, product, and data teams to ensure responsible AI delivery.</li></ul><p></p><p>
Collaboration, Leadership &amp; Influence</p><ul><li>
Influence engineering and product teams to integrate secure engineering practices and align security with compliance, privacy, and responsible AI initiatives.</li><li>
Advise senior leadership on AI security implications, architectural decisions, and long-term strategy while shaping roadmaps that anticipate emerging AI threats and regulatory requirements.</li></ul><p></p><p>
Testing, Analysis &amp; Risk Management</p><ul><li>
Lead advanced security testing and risk assessments for AI-enabled systems, including threat modeling of agent workflows, abuse/misuse analysis, and secure design reviews of AI pipelines.</li><li>
Evaluate and guide adoption of new AI security tools, ensuring protections maintain confidentiality, integrity, availability, and responsible data use.</li></ul><p></p><p>
Operational Response &amp; Continuous Improvement</p><ul><li>
Provide senior technical leadership during incidents involving application or AI systems, guiding response strategies for misuse, data exposure, and autonomous failures.</li><li>
Translate operational learnings into improved security architecture, controls, and system resilience.</li></ul><p></p><p>
Mentorship, Innovation &amp; Strategy</p><ul><li>
Mentor senior and principal engineers to elevate security maturity across the organization.</li><li>
Contribute to research and evaluation of emerging AI security practices and play a key role in shaping the long-term application and AI security roadmap, advocating for security as a strategic accelerator for AI adoption.</li></ul><p></p><p><b>
Required Qualifications</b></p><p></p><ul><li>
10+ years of experience designing, building, and securing large-scale applications and platforms.</li><li>
7+ years of expertise in <b>application security</b>, including threat modeling, secure design, and vulnerability management.</li><li>
7+ years of programming experience in one or more languages such as <b>Python, Java, JavaScript, C#, or Go</b>.</li><li>
5+ years of experience with <b>AI-enabled systems</b>, including LLM-based applications or agentic workflows.</li><li>
5+ years of experience public cloud platforms (AWS, Azure, and/or GCP) and modern application architectures.</li><li>
3+ years of experience with containerized, serverless, and microservice-based architectures.</li></ul><p></p><p><b>
Preferred Qualifications</b></p><p></p><ul><li>
Hands-on experience securing AI agents, RAG pipelines, and tool-using LLM systems.</li><li>
Proven ability to lead complex security initiatives from concept through enterprise-scale adoption.</li><li>
Familiarity with AI governance, responsible AI principles, and emerging AI security standards.</li><li>
Experience integrating security controls into CI/CD pipelines for AI and application workloads.</li><li>
Strong understanding of compliance frameworks (PCI, HIPAA, NIST, HITRUST, CSA).</li><li>
Experience influencing security strategy beyond a single team, including enterprise or platform-level impact.</li><li>
Contributions to security research, open-source projects, or industry communities.</li></ul><p></p><p><b>
Education</b></p><p></p><ul><li>
Bachelor&rsquo;s degree or equivalent experience (High School Diploma and 4 years relevant experience)</li></ul><p></p><p><b>
Pay Range</b></p><p>
The typical pay range for this role is:</p><p></p>
$144,200.00 - $288,400.00<p><br>
This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company&rsquo;s equity award program.</p><p><br>
Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.</p><p></p><p><b>
Great benefits for great people</b></p><p></p><p>
We take pride in our comprehensive and competitive mix of pay and benefits &ndash; investing in the physical, emotional and financial wellness of our colleagues and their families to help them be the healthiest they can be. In addition to our competitive wages, our great benefits include:</p><ul><li><p><b>
Affordable medical plan options,</b> a <b>401(k) plan </b>(including matching company contributions), and an <b>employee stock purchase plan</b>.</p></li><li><p><b>
No-cost programs for all colleagues </b>including wellness screenings, tobacco cessation and weight management programs, confidential counseling and financial coaching.</p></li><li><p><b>
Benefit solutions that address the different needs and preferences of our colleagues</b> including paid time off, flexible work schedules, family leave, dependent care resources, colleague assistance programs, tuition assistance, retiree medical access and many other benefits depending on eligibility.</p></li></ul><p></p><p>
For more information, visit https://jobs.cvshealth.com/us/en/benefits</p><p></p>
We anticipate the application window for this opening will close on: 03/18/2026<p></p><p>
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.</p></div>

Principal Application Security Engineer – AI & Agentic Systems

Cargill

<div><p>Cargill is committed to providing food and agricultural solutions to nourish the world in a safe, responsible, and sustainable way. Sitting at the heart of the supply chain, we partner with farmers and customers to source, make and deliver products that are vital for living.<br>
Our 155,000 team members innovate with purpose, providing customers with life&rsquo;s essentials so businesses can grow, communities prosper, and consumers live well. With over 160 years of experience as a family company, we look ahead while remaining true to our values. We put people first. We reach higher. We do the right thing&mdash;today and for generations to come.</p><div><div><div><h2 class="jobSectionHeader"><b>
Job Purpose and Impact</b></h2>
</div><div><ul><li><p>
The Senior Consultant, Application Security Engineer will be responsible for embedding security across the SDLC, partnering with development teams, and strengthening the organization&rsquo;s overall application security posture.</p></li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Key Accountabilities</b></h2>
</div><div><ul><li>Lead application security reviews from design through automated and hands‑on testing.</li><li>
Collaborate with development teams to define security requirements and provide secure design guidance.</li><li>
Implement and manage AppSec tools, including SAST, DAST, and WAF integrations, with a focus on automation and CI/CD integration.</li><li>
Deliver developer‑focused security education through training, workshops, and knowledge‑sharing content.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Qualifications</b></h2>
</div><div><ul><li>Minimum requirement of 4 years of relevant work experience. Typically reflects 5 years or more of relevant experience.</li><li>
Experience with SAST/DAST tools and secure SDLC practices.</li><li>
Familiarity with OWASP Top 10, threat modeling, and secure coding principles.</li><li>
Ability to perform code reviews and application security testing.</li><li>
Strong communication skills and ability to partner with engineering teams.</li></ul><p><b>
Preferred Skills</b></p><ul><li>
Cloud security knowledge (AWS, Azure, or GCP).</li><li>
Programming experience (Java, Python, .NET, JavaScript).</li></ul></div></div></div><p>
Equal Opportunity Employer, including Disability/Vet.</p></div>

Sr. Consultant, Info Security, App, Data, Cloud Security

The Home Depot

<div><p><b>Position Purpose:</b></p><p>
This role is a key technical position on the SaaS Security team, responsible for the integration, development, and automation of the SaaS Security program. The CyberSecurity Engineer II will focus on the technical onboarding of SaaS applications into security tooling, developing custom solutions to enhance data visibility and reporting, and automating security processes to enable the program to scale across the enterprise.</p><p><b><br>
Key Responsibilities:</b></p><ul><li>
100% Deliver Execution &amp; Problem Solving - Collaborate with Enterprise Technology to configure and integrate cybersecurity systems that mitigate risk; Troubleshoot and quickly resolve escalated incidents; Design, build, configure, maintain, monitor cybersecurity threat defense capabilities and user access management; Coordinate integration and collaboration with managed security providers; Investigate and recommend corrective actions related to incidents</li></ul><p><b><br>
Direct Manager/Direct Reports:</b></p><ul><li>
This position typically reports to Manager or Sr. Manager</li><li>
This position has 0 Direct Reports</li></ul><p><b><br>
Travel Requirements:</b></p><ul><li>
No travel required.</li></ul><p><b><br>
Physical Requirements:</b></p><ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul><p><b><br>
Working Conditions:</b></p><ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul><p><b><br>
Minimum Qualifications:</b></p><ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li><li>
3+ years of experience in Information Security, IT, or software development.</li><li>
Experience with scripting or development languages (e.g., Python, PowerShell, JavaScript).</li><li>
Experience working with APIs (REST, SOAP).</li><li>
Understanding of fundamental cybersecurity principles.</li></ul><p><b>
Preferred Qualifications:</b></p><ul><li>
Bachelor's degree in Computer Science, Information Systems, or a related field.</li><li>
Experience in a cloud or SaaS security role.</li><li>
Hands-on experience with identity protocols (SAML, OAuth, OIDC, SCIM).</li><li>
Experience building dashboards or reports in data visualization tools (e.g., Tableau, Power BI, Grafana).</li><li>
Security certifications such as CompTIA Security+, GCLD, or GCSA.</li></ul><p><b>
Minimum Education:</b></p><ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul><p><b><br>
Preferred Education:</b></p><ul><li>
No additional education</li></ul><p><b><br>
Minimum Years of Work Experience:</b></p><ul><li>
2</li></ul><p><b><br>
Preferred Years of Work Experience:</b></p><ul><li>
No additional years of experience</li></ul><p><b><br>
Minimum Leadership Experience:</b></p><ul><li>
None</li></ul><p><b><br>
Preferred Leadership Experience:</b></p><ul><li>
None</li></ul><p><b><br>
Certifications:</b></p><ul><li>
None</li></ul><p><b><br>
Competencies:</b></p><ul><li>
Action Oriented</li><li>
Collaborates</li><li>
Communicates Effectively</li><li>
Customer Focus</li><li>
Drives Results</li></ul></div><p></p>

Cybersecurity Engineer II, SaaS (REMOTE)

Guidehouse

<div><p>Job Family:</p>
IT Cyber Security<p><br>
Travel Required:</p>
Up to 10%<p><br>
Clearance Required:</p>
None<p>
What You Will Do:</p><p>
We are seeking a highly skilled and experienced Cybersecurity Engineer with extensive expertise in multiple cloud environments, including AWS, Azure, and Google Cloud. The ideal candidate will have a strong background in cloud security, with the ability to design, implement, and manage security solutions across various cloud platforms. This role requires a proactive individual who can enhance our security posture through effective cloud security strategies and practices. Must have experience working in a Federal secured environment or enterprise.</p><p>
Key Responsibilities:</p><p>
Cloud Security Architecture</p><ul><li>
Design and implement robust security architectures for cloud environments (AWS, Azure, Google Cloud).</li><li>
Develop and enforce security policies, standards, and best practices for cloud deployments.</li><li>
Ensure compliance with industry standards and regulatory requirements.</li></ul><p>
Security Operations</p><ul><li>
Monitor and respond to security incidents and alerts in cloud environments.</li><li>
Conduct regular security assessments and audits to identify vulnerabilities and risks.</li><li>
Implement and manage security tools and technologies to enhance cloud security.</li></ul><p>
Identity and Access Management (IAM)</p><ul><li>
Design and manage IAM policies and roles to ensure secure access to cloud resources.</li><li>
Implement multi-factor authentication (MFA) and other access controls to protect sensitive data.</li><li>
Conduct regular reviews of IAM policies and access permissions.</li></ul><p>
Data Protection</p><ul><li>
Implement encryption and data protection mechanisms to safeguard data in transit and at rest.</li><li>
Develop and maintain data loss prevention (DLP) strategies for cloud environments.</li><li>
Ensure secure backup and recovery processes for critical data.</li></ul><p>
Automation and DevSecOps</p><ul><li>
Integrate security into the DevOps pipeline to ensure secure development and deployment practices.</li><li>
Develop and implement automation scripts and tools to enhance security operations.</li><li>
Collaborate with development and operations teams to promote a culture of security.</li></ul><p>
Threat Intelligence and Incident Response</p><ul><li>
Gather and analyze threat intelligence to stay informed about the latest threats and attack techniques.</li><li>
Develop and maintain incident response plans and playbooks for cloud environments.</li><li>
Conduct post-incident reviews to identify lessons learned and implement improvements.</li></ul><p><br>
What You Will Need:</p><ul><li>
US Citizenship required, due to nature of client engagement</li><li>
Bachelor's degree from an accredited university in Computer Science, Information Security, IT Systems Engineering or a related field AND Eight (8+) plus years of post-graduation work experience in cybersecurity, with a focus on cloud security; Or Master's degree from an accredited university in Computer Science, Information Security, IT Systems Engineering or a related field AND Six (6+) plus years of post-graduation work experience in cybersecurity, with a focus on cloud security.</li><li>
Note: Internships, Co-ops, Fellowships and graduate research work does not count towards years of experience.</li><li>
Strong knowledge of cloud security frameworks, standards, and best practices (e.g., CSA, NIST).</li><li>
Proficiency with cloud security tools and technologies (e.g., AWS Security Hub, Azure Security Center, Google Cloud Security Command Center).</li><li>
Excellent problem-solving skills and the ability to think like an attacker.</li><li>
Strong communication and presentation skills, with the ability to convey complex technical concepts to non-technical stakeholders.</li><li>
Ability to work independently and as part of a team in a fast-paced environment.</li><li>
Ability to travel as required.</li><li>
Currently reside in the contiguous United States.</li><li>
Ability to work in a Guidehouse Office or Client Office location as needed</li></ul><p>
What Would Be Nice To Have:</p><ul><li>
Cybersecurity certifications such as CISSP or Network+</li><li>
Previous experience implementing O365 security tools</li><li>
Management consulting experience with Federal, State or Local Government clients</li></ul><p>
#LI-DNI</p><p><br>
What We Offer:</p><p>
Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.</p><p>
Benefits include:</p><ul><li><p>
Medical, Rx, Dental &amp; Vision Insurance</p></li><li><p>
Personal and Family Sick Time &amp; Company Paid Holidays</p></li><li><p>
Position may be eligible for a discretionary variable incentive bonus</p></li><li><p>
Parental Leave and Adoption Assistance</p></li><li><p>
401(k) Retirement Plan</p></li><li><p>
Basic Life &amp; Supplemental Life</p></li><li><p>
Health Savings Account, Dental/Vision &amp; Dependent Care Flexible Spending Accounts</p></li><li><p>
Short-Term &amp; Long-Term Disability</p></li><li><p>
Student Loan PayDown</p></li><li><p>
Tuition Reimbursement, Personal Development &amp; Learning Opportunities</p></li><li><p>
Skills Development &amp; Certifications</p></li><li><p>
Employee Referral Program</p></li><li><p>
Corporate Sponsored Events &amp; Community Outreach</p></li><li><p>
Emergency Back-Up Childcare Program</p></li><li><p>
Mobility Stipend</p></li></ul><p>
About Guidehouse</p><p>
Guidehouse is an Equal Opportunity Employer&ndash;Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.</p><p>
Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.</p><p>
If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.</p><p>
All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or guidehouse@myworkday.com. Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.</p><p>
If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse&rsquo;s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact recruiting@guidehouse.com. Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant&rsquo;s dealings with unauthorized third parties.</p><p>
Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.</p></div>

Cybersecurity Engineer (Multi-Cloud Expertise)

Acrisure LLC

<div></div><div><div>About Acrisure</div><div>
A global fintech leader, Acrisure empowers millions of ambitious businesses and individuals with the right solutions to grow boldly forward. Bringing cutting-edge technology and top-tier human support together, we connect clients with customized solutions across a range of insurance, reinsurance, payroll, benefits, cybersecurity, mortgage services &ndash; and more.</div><div></div><div>
In the last twelve years, Acrisure has grown in revenue from $38 million to almost $5 billion and employs over 19,000 colleagues in more than 20 countries. Acrisure was built on entrepreneurial spirit. Prioritizing leadership, accountability, and collaboration, we equip our teams to work at the highest levels possible.</div><div></div><div>
Job Summary:</div><div>
The Senior Incident Response Engineer will lead advanced security incident response efforts, focusing on Microsoft E5 security capabilities and Data Loss Prevention (DLP). This role combines technical expertise with leadership responsibilities, ensuring robust detection, containment, and remediation of threats while driving proactive security measures across the enterprise.</div><div></div><div>
Responsibilities:</div><div></div><div>
Incident Response:</div><ul><li>
Detect, analyze, and respond to security incidents detected by EDR, SIEM, and Cloud Security tooling as well as MDR service providers.</li><li>
Lead post-incident reviews and drive process improvements.</li><li>
Perform advanced threat hunting using Microsoft Defender and related tools.</li><li>
Integrate threat intelligence and adapt detection strategies based on real world threats observed by the organization.</li><li>
Conduct forensic data acquisition, log analysis, and root cause determination for endpoint incidents.</li><li>
Develop and maintain incident response playbooks and runbooks across the security operations toolset.</li><li>
Collaborate with analysts and other IR engineers to identify opportunities for improvement and tuning of detection rules.</li><li>
Collaborate with IT, legal, HR, communications, and other business units.</li></ul><div></div><div>
Microsoft Security &amp; Policy Design</div><ul><li>
Collaborate on the design, implementation, and maintenance of security policies for Microsoft security components, including:<ul><li>
Defender for Endpoint</li><li>
Defender for Cloud Apps</li><li>
Microsoft Purview DLP</li><li>
Intune</li><li>
Conditional Access &amp; Information Protection</li></ul></li><li>
Regularly review and update policies based on evolving threats and lessons learned.</li><li>
Collaborate with compliance and IT teams to enforce security standards and regulatory requirements.</li></ul><div></div><div>
Requirements</div><ul><li>
Proficiency with Microsoft 365 Security Suite as well as other security tooling such as SentinelOne, Google SecOps, Abnormal Security, and others.</li><li>
Strong experience with incident response, digital forensics, and threat hunting across a hybrid environment.</li><li>
Knowledge of endpoint operating systems (Windows, macOS, and Linux).</li><li>
Experience with cloud environments such as Azure, AWS, and GCP.</li><li>
Experience with scripting (PowerShell, Python, or Bash) for automation and log parsing desired.</li><li>
Embrace a metric-driven approach to continuous improvement.</li><li>
Excellent analytical and critical thinking skills; ability to work in high-pressure situations.</li><li>
Effective verbal and written communication abilities.</li><li>
Meticulous with strong organizational skills and the ability to handle multiple priorities.</li><li>
Ability to work independently and within a collaborative, team-oriented environment.</li></ul><div></div><div>
Education and Experience:</div><ul><li>
Bachelor&rsquo;s degree in computer science, Information Security, Cybersecurity, or related discipline (or equivalent experience).</li><li>
Minimum 5 years of progressive information security experience.</li><li>
At least 4 years focused on incident response, including investigations across different security domains (endpoint, application, DLP, and more).</li><li>
Expertise in Infrastructure Security: In-depth understanding of infrastructure security, including Windows, Active Directory, Unix/Linux, Mobile Security, and Privileged Access Management.</li><li>
Relevant certifications (one or more preferred): GCFA, GCIH, CHFI, CySA+, MS SC-200, MS SC-400 or similar.</li></ul><div></div><div>
#LI-CH1</div><div></div><div>
Candidates should be comfortable with an on-site presence to support collaboration, team leadership, and cross-functional partnership.</div><div></div><div><br>
Why Join Us:</div><div>
At Acrisure, we&rsquo;re building more than a business, we&rsquo;re building a community where people can grow, thrive, and make an impact. Our benefits are designed to support every dimension of your life, from your health and finances to your family and future.</div><div></div><div>
Making a lasting impact on the communities it serves, Acrisure has pledged more than $22 million through its partnerships with Corewell Health Helen DeVos Children's Hospital in Grand Rapids, Michigan, UPMC Children's Hospital in Pittsburgh, Pennsylvania and Blythedale Children's Hospital in Valhalla, New York.</div><div></div><div><br>
Employee Benefits</div><div>
We also offer our employees a comprehensive suite of benefits and perks, including:</div><ul><li><div>
Physical Wellness: Comprehensive medical insurance, dental insurance, and vision insurance; life and disability insurance; fertility benefits; wellness resources; and paid sick time.</div></li><li><div>
Mental Wellness: Generous paid time off and holidays; Employee Assistance Program (EAP); and a complimentary Calm app subscription.</div></li><li><div>
Financial Wellness: Immediate vesting in a 401(k) plan; Health Savings Account (HSA) and Flexible Spending Account (FSA) options; commuter benefits; and employee discount programs.</div></li><li><div>
Family Care: Paid maternity leave and paid paternity leave (including for adoptive parents); legal plan options; and pet insurance coverage.</div></li><li><div>
&hellip; and so much more!</div></li></ul><div><i>
This list is not exhaustive of all available benefits. Eligibility and waiting periods may apply to certain offerings. Benefits may vary based on subsidiary entity and geographic location.</i></div><div></div><div><br>
Acrisure is an Equal Opportunity Employer. We consider qualified applicants without regard to race, color, religion, sex, national origin, disability, or protected veteran status. Applicants may request reasonable accommodation by contacting <i>leaves@acrisure.com</i>.</div><div></div><div>
Final candidates will be required to complete post-offer verification processes related to the role and in accordance with applicable laws.</div><div></div><div><br>
California Residents: Learn more about our privacy practices for applicants by visiting the <div>Acrisure California Applicant Privacy Policy</div>.</div><div></div><div><br>
Recruitment Fraud: Please visit here to learn more about our <div>Recruitment Fraud Notice</div>.</div><div></div><div><br>
Welcome, your new opportunity awaits you.</div></div><div></div>

Senior Security Incident Response Engineer

Information Technology Senior Management Forum

<div><div><p>Posted Date</p>
<p>3/11/2026</p>
</div><div><p>Description</p>
<p></p><div>)***<p><b>
ESSENTIAL DUTIES AND RESPONSIBILITIES:</b></p><ul><li>
As Digital Forensics &amp; Incident Response (DFIR) professionals, individuals in this role must be well-versed in log, packet, network, endpoint, root cause analysis, containment, and eradication.</li><li>
A programming, computer science, or data science background will be important to success in this role as unstructured data will need automated decisions made and other data reduction techniques applied. Depending on the candidate, the role will likely start with basic searches and visualizations but may lead to pioneering use of Machine Learning and Artificial Intelligence techniques and tools. Familiarity with programming and malicious code critical to success in this role.</li><li>
This candidate must have a strong knowledge of windows internals to effectively respond to and eradicate advanced attacks. This role must advocate for the organization&rsquo;s threat hunting efforts. The ability to quickly identify nefarious artifacts versus benign activity will be a key skill for this position. Cyber &amp; Respond Engineers will be asked to consult on a variety of problems (technical and non-technical) within the team and larger organization.</li><li>
The Cyber Hunt &amp; Respond Senior Engineer is responsible for conducting presentations and mentoring others interested or responsible for related data science, threat hunting, or incident response.</li><li>
Develop/invent highly innovative solutions within multiple information security technologies, theories and/or techniques that impact CIS strategy</li><li>
Develop security designs for systems and networks with multilevel security requirements</li><li>
Lead highly complex and visible projects with notable risk and complexity</li></ul><p><b>
QUALIFICATIONS</b></p><p><b>
Required Qualifications:</b></p><p>
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.</p><ul><li>
Bachelor&rsquo;s degree in Computer Science, Computer Engineering, Cybersecurity, or related field of relevant education, certification, or related training.</li><li>
8 years of experience in Cybersecurity or related work</li><li>
Knowledge of one or more cloud platforms and cloud security</li><li>
Knowledge of general information technology (IT) and cybersecurity</li><li>
Knowledge of computer networking concepts and protocols, and network security methodologies.</li><li>
Knowledge of network traffic analysis and packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).</li><li>
Knowledge of operating systems, including Windows/Unix ports and services.</li><li>
Knowledge of modern identity and access management concepts</li><li>
Knowledge of phishing tactics and techniques</li><li>
Knowledge of advanced cyber threats and vulnerabilities.</li><li>
Knowledge of cyber-attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).</li><li>
Knowledge of adversarial tactics, techniques, and procedures</li><li>
Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions.</li><li>
Knowledge of incident response and handling methodologies.</li><li>
Knowledge of countermeasures to address a variety of threats</li><li>
Knowledge around leveraging automation, ML, and/or AI</li><li>
Knowledge of advanced threat hunting techniques</li><li>
Knowledge of types of digital forensics data and how to recognize them.</li><li>
Knowledge of types and collection of persistent data.</li><li>
Knowledge of file system implementations (e.g., New Technology File System [NTFS], File Allocation Table [FAT], File Extension [EXT]).</li><li>
Knowledge of which system files (e.g., log files, registry files, configuration files) contain relevant information and where to find those system files.</li><li>
Knowledge of processes for seizing and preserving digital evidence.</li><li>
Strong functional and technical knowledge of information/cyber security capabilities with deep expertise in one or more of the following areas: Encryption, Data Security, Application Security, End Point Security, Identity and Access Management, Windows/Unix/Linux Systems Security, Mainframe Security, Perimeter Security, Network Security, Mobility Security, Cyber Security, Cryptography, or Authentication Systems</li><li>
Strong understanding of service lifecycle management, strategic planning, and the cyber security landscape</li></ul><p><b>
Preferred Qualifications:</b></p><ul><li>
Experience working in cloud environments, namely Microsoft Azure and Amazon AWS.</li><li>
Master&rsquo;s degree or MBA and ten years of experience in business analysis or an equivalent combination of education and work experience.</li><li>
Banking or financial services experience</li><li>
Prior management experience</li><li>
Experience in leading large-scale complex projects from beginning to end</li><li>
ISSEP Certification</li><li>
Other security certifications (e.g. CCNA Security, GSEC, GCED, GPPA, etc.)</li><li>
Other technical Certifications (e.g. CCNA, RHCE, MCSE, etc.)</li><li>
Certification in Information Security Management (e.g. Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC) or Certified Information Security Manager (CISM)), or related security certification(s)</li></ul><p><b>
General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: </b>All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist&rsquo;s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist&rsquo;s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.</p><p><b><i>
Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.</i></b></p><p>
EEO is the Law E-Verify IER Right to Work</p></div>
</div><div></div><div><div><p>Type</p><div><p>
Full-time</p></div></div></div></div>

Cyber Hunt & Respond Principal Engineer

Explore 129+ Security engineer in Atlanta this March. Find roles across top companies and apply now to boost your career.