cyber hunt & respond principal engineer Jobs in Atlanta

cyber hunt & respond principal engineer

project manager / senior scrum master Jobs in Atlanta

project manager / senior scrum master

senior accountant

senior angular developer

senior manager decision analytics Jobs in Atlanta

senior manager decision analytics

senior cyber security analyst

Regions Financial

Thank you for your interest in a career at Regions. At Regions, we believe associates deserve more than just a job. We believe in offering performance-driven individuals a place where they can build a career --- a place to expect more opportunities. If you are focused on results, dedicated to quality, strength and integrity, and possess the drive to succeed, then we are your employer of choice.
 
Regions is dedicated to taking appropriate steps to safeguard and protect private and personally identifiable information you submit. The information that you submit will be collected and reviewed by associates, consultants, and vendors of Regions in order to evaluate your qualifications and experience for job opportunities and will not be used for marketing purposes, sold, or shared outside of Regions unless required by law. Such information will be stored in accordance with regulatory requirements and in conjunction with Regions’ Retention Schedule for a minimum of three years. You may review, modify, or update your information by visiting and logging into the careers section of the system.
 
Job Description: 
At Regions, the Cyber Security Analyst is responsible for analyzing, identifying, and documenting cybersecurity risks. This role will require a proactive individual with an understanding of core technology and cybersecurity principles along with industry best practices to investigate, remediate and/or escalate for further evaluation.
 
Primary Responsibilities
 Analyze and respond to cyber threats within various security tools according to documented procedures
 Collaborates with various stakeholders within Cyber Security/Technology departments and standard owners to properly document and communicate security risks
 Proactively supports a feedback loop related to information and events in order to identify and support the remediation of improving precision and accuracy of analysis
 Review and understand Policies, Standards, and Procedures for improved process flows.
 Performs threat hunting, participate in tabletop exercises, and assist in Incident Response on a rotational job-duty basis as needed
 Maintains meticulous records of all work performed, including root cause analysis, indicators of compromise, remediation steps, timeline of events, and impact assessment using clear and concise annotations as needed
 Stays abreast of global cybersecurity threat trends
 Supports and collaborates with various cybersecurity teams to document security posture and assess environment for relevant IOCs and gaps
 Participates in and ensures proper documentation of various security assessments (i.e. Security Architecture Reviews, Red Team assessments, Purple Team engagements, and formal tabletop exercises) as needed
 Analyzes software for violations in Regions Cyber Security standards as needed
 Acts as a coach and mentor to junior analysts
 May lead special projects
 
This position is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay.
 
Requirements
 High School Diploma or GED and (8) years of related post-secondary education and/or experience in Information Security or Information Technology
 Minimum of two (2) relevant certification in Information Security or the ability to obtain relevant certification within twelve months of start date in this position, such as CompTIA Network+/Security+/CySA+, EC-Council Certified Ethical Hacker (CEH), Cisco CCNA/CCNA-Security, GIAC GSEC, etc.
 Willingness and availability to work on a pre-determined shift and rotational on call
 
Preferences
 Minimum of one (1) Intermediate to Advanced Amazon Web Services (AWS) or Azure Architect/Administrator and/or Security specialty certification
 Advanced Incident Response, Cyber Leadership, Penetration Testing certification – GCIH, GSOM, GPEN, CISSP, CISM, OSCP
 Prior working experience in a Security Operations Center (SOC) environment
 Prior experience developing use cases for a Security Operations Center (SOC) from threat hunting and threat detection engineering to investigation playbook and response procedure development
 Understanding of MITRE ATT&CK Framework and Cyberattack Kill Chain and how these frameworks can be used to identify gaps as well as orient analysts in attack progression
 
Skills and Competencies
 Ability to be a self-starter with initiative and drive for continuous improvement.
 Ability to be a team-oriented individual who works well with others and places a premium on the group’s success
 Advanced understanding of information security principles, controls, and technologies
 Demonstrated strong organizational, research, analytical and problem-solving skills to evaluate situations and respond appropriately
 Excellent writing and verbal communication skills
 Strong familiarity with concepts related to security disciplines such as: malware analysis, computer forensics, cyber incident response, network intrusion detection, network traffic and packet analysis, penetration testing, vulnerability scanning, compliance, audit, or cyber threat intelligence.
 Strong investigative and problem-solving skills
 
Preferred qualifications for this role: 
Demonstrated working knowledge of enterprise security tools, including Security Information and Event Management (SIEM) platforms, endpoint protection solutions, and email security technologies, with the ability to analyze alerts, identify threats, and support incident response activities.
 Professional certifications related to cloud technologies or artificial intelligence (e.g., AWS, Azure, GCP, or AI-focused security certifications) are strongly preferred.
 Ability to work a scheduled shift of 10:00 a.m. to 7:00 p.m. , supporting operational security monitoring and response requirements.
 
This position is intended to be onsite, now or in the near future . Associates will have regular work hours, including full days in the office three or more days a week. The manager will set the work schedule for this position, including in-office expectations. Regions will not provide relocation assistance for this position, and relocation would be at your expense. The locations available for this role are Birmingham, AL, Atlanta, GA, Nashville, TN.
 
Regions will not sponsor applicants for work visas for this position at this time. Applicants for this position must currently be authorized to work in the United States on a full-time basis.
 
Position Type Full time
 
Compensation Details
 Pay ranges are job specific and are provided as a point-of-market reference for compensation decisions. Other factors which directly impact pay for individual associates include: experience, skills, knowledge, contribution, job location and, most importantly, performance in the job role. As these factors vary by individuals, pay will also vary among individual associates within the same job.
 
The target information listed below is based on the Metropolitan Statistical Area Market Range for where the position is located and level of the position.
 
Job Range Target: 
Minimum: $95,304.55 USD
 Median: $125,970.00 USD
 
Incentive Pay Plans: This job is not incentive eligible.
 
Benefits Information
 Regions offers a benefits package that is flexible, comprehensive and recognizes that "one size does not fit all" for benefits-eligible associates. Listed below is a synopsis of the benefits offered by Regions for informational purposes, which is not intended to be a complete summary of plan terms and conditions.
 
Paid Vacation/Sick Time
 
401K with Company Match
 
Medical, Dental and Vision Benefits
 
Disability Benefits
 
Health Savings Account
 
Flexible Spending Account
 
Life Insurance
 
Parental Leave
 
Employee Assistance Program
 
Associate Volunteer Program
 
Please note, benefits and plans may be changed, amended, or terminated with respect to all or any class of associate at any time. To learn more about Regions’ benefits, please click or copy the link below to your browser.
 
https://www.regions.com/about-regions/welcome-portal/benefits
 
Location Details Riverchase Operations Center
 Location: Hoover, Alabama
 
Equal Opportunity Employer/including Disabled/Veterans
 
Job applications at Regions are accepted electronically through our career site for a minimum of five business days from the date of posting. Job postings for higher-volume positions may remain active for longer than the minimum period due to business need and may be closed at any time thereafter at the discretion of the company.

Cyber Security Analyst (10a-7p Shift)

The Home Depot

<div><div>Position Purpose:
Protecting what matters most to our associates and consumers by securing our sensitive data and critical assets from current and emerging threats. At The Home Depot Cybersecurity consists of Architecture, Governance, Identity &amp; Access Management, Internal Threat Operations, Issue and Compliance Management, Risk Assessment/Advisory, Security Consulting, Security Operations and Strategic Planning. 
Staff Analysts perform data gathering, analysis, synthesis and develop solutions to support THD Cybersecurity practices. Staff Analyst mentors and guides Jr Analysts. Lead multiple projects, possess excellent communication skills, work well with a team, interact with multiple levels and functions across the organization 
Key Responsibilities:<ul><li>
100% Deliver Execution, Plans &amp; Aligns, Develop Others - Oversee multiple projects simultaneously; Strategic partner to align solutions to customers expectations Communicate to various levels of business partners; Collaborate with stakeholders, business partners, colleagues, developers and others to deliver high quality solutions; Partner cross-functionally to define assess, communicate, implement, train and change management of projects; Lead, mentor and provide guidance to team members and partners; Serve as SME and perform research/analysis within assigned projects</li></ul> 
Direct Manager/Direct Reports:<ul><li>
This position typically reports to Manager or Sr. Manager</li><li>
This position has 0 Direct Reports</li></ul> 
Travel Requirements:<ul><li>
No travel required.</li></ul> 
Physical Requirements:<ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul> 
Working Conditions:<ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul> 
Minimum Qualifications:<ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li></ul> 
Preferred Qualifications:<ul><li>
Advanced Data Querying: Ability to write complex queries (SQL, Python, or Splunk) to pull disparate data points into a cohesive fraud narrative.</li><li>
Tool Architecture: Experience configuring or optimizing fraud detection platforms (e.g., ThreatMetrix, Forter, or internal telemetry) rather than just monitoring them</li><li>
Fraud investigation &amp; strategy experience for staff analyst:</li><li>
Domain Expertise: Deep understanding of modern fraud vectors (e.g., Account Takeover (ATO), Synthetic Identity, Social Engineering, and Payment Fraud). More specifically, confirm the candidate has experience in a fraud org or at a fraud company.</li><li>
SOP Development: Proven ability to translate complex, ambiguous investigative workflows into standardized, repeatable Standard Operating Procedures (SOPs) for junior analysts.</li><li>
Cyber-Threat Intelligence (CTI) Integration: Ability to pivot from a single fraud event to identifying the broader infrastructure behind the attack.</li></ul>
Minimum Education:<ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul> 
Preferred Education:<ul><li>
No additional education</li></ul> 
Minimum Years of Work Experience:<ul><li>
8</li></ul> 
Preferred Years of Work Experience:<ul><li>
No additional years of experience</li></ul> 
Minimum Leadership Experience:<ul><li>
None</li></ul> 
Preferred Leadership Experience:<ul><li>
None</li></ul> 
Certifications:<ul><li>
None</li></ul> 
Competencies:<ul><li>
Action Oriented</li><li>
Collaborates</li><li>
Drives Engagement</li><li>
Communicates Effectively</li><li>
Customer Focus</li><li>
Drives Results</li><li>
Manages Conflict</li></ul></div> 
Apply End Date: 04/13/2026</div>

Cybersecurity Staff Analyst | Identity Fraud

<div>Position Purpose:
This role is the key operational driver of risk reduction for the SaaS Security program. The CyberSecurity Analyst will be responsible for analyzing the findings from our SaaS Security tools, collaborating directly with SaaS application owners to drive the remediation of identified risks, and reporting on the overall security posture of our SaaS environment. This position acts as the crucial link between security data and tangible security improvements. 
Key Responsibilities:<ul><li>
30% Analysis - Perform data gathering, synthesis, and develop solutions; Leverage department standards to achieve results</li><li>
30% Collaborate - Partner with teams to identify trends and resolve problems</li><li>
40% Drive Execution - Evaluate information and provide recommendations based on findings</li></ul> 
Direct Manager/Direct Reports:<ul><li>
This Position typically reports to Manager or Sr. Manager</li><li>
This Position has 0 Direct Reports</li></ul> 
Travel Requirements:<ul><li>
Typically requires overnight travel less than 10% of the time.</li></ul> 
Physical Requirements:<ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul> 
Working Conditions:<ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul> 
Minimum Qualifications:<ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li><li>
2+ years of experience in an Information Security, IT audit, or risk management role.</li><li>
Excellent analytical, problem-solving, and communication skills.</li><li>
Ability to translate complex technical risks into clear, business-oriented language.</li><li>
Strong organizational skills and the ability to manage multiple stakeholder engagements simultaneously.</li></ul> 
Preferred Qualifications:<ul><li>
Bachelor's degree in a relevant field.</li><li>
Experience working directly with business stakeholders to remediate security findings.</li><li>
Familiarity with security frameworks (NIST, ISO 27001) and IT general controls.</li><li>
Experience with ticketing systems (e.g., Jira, ServiceNow) for tracking remediation.</li><li>
Security certifications such as CompTIA Security+, CISM, or CRISC.</li></ul> 
Minimum Education:<ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul> 
Preferred Education:<ul><li>
No additional education</li></ul> 
Minimum Years of Work Experience:<ul><li>
0</li></ul> 
Preferred Years of Work Experience:<ul><li>
No additional years of experience</li></ul> 
Minimum Leadership Experience:<ul><li>
None</li></ul> 
Preferred Leadership Experience:<ul><li>
None</li></ul> 
Certifications:<ul><li>
None</li></ul> 
Competencies:<ul><li>
Action Oriented</li><li>
Collaborates</li><li>
Communicates Effectively</li><li>
Customer Focus</li><li>
Drives Results</li></ul></div>

Cybersecurity Analyst, SaaS (REMOTE)

<div>Position Purpose:
This role is a key technical position on the SaaS Security team, responsible for the integration, development, and automation of the SaaS Security program. The CyberSecurity Engineer II will focus on the technical onboarding of SaaS applications into security tooling, developing custom solutions to enhance data visibility and reporting, and automating security processes to enable the program to scale across the enterprise. 
Key Responsibilities:<ul><li>
100% Deliver Execution &amp; Problem Solving - Collaborate with Enterprise Technology to configure and integrate cybersecurity systems that mitigate risk; Troubleshoot and quickly resolve escalated incidents; Design, build, configure, maintain, monitor cybersecurity threat defense capabilities and user access management; Coordinate integration and collaboration with managed security providers; Investigate and recommend corrective actions related to incidents</li></ul> 
Direct Manager/Direct Reports:<ul><li>
This position typically reports to Manager or Sr. Manager</li><li>
This position has 0 Direct Reports</li></ul> 
Travel Requirements:<ul><li>
No travel required.</li></ul> 
Physical Requirements:<ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul> 
Working Conditions:<ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul> 
Minimum Qualifications:<ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li><li>
3+ years of experience in Information Security, IT, or software development.</li><li>
Experience with scripting or development languages (e.g., Python, PowerShell, JavaScript).</li><li>
Experience working with APIs (REST, SOAP).</li><li>
Understanding of fundamental cybersecurity principles.</li></ul>
Preferred Qualifications:<ul><li>
Bachelor's degree in Computer Science, Information Systems, or a related field.</li><li>
Experience in a cloud or SaaS security role.</li><li>
Hands-on experience with identity protocols (SAML, OAuth, OIDC, SCIM).</li><li>
Experience building dashboards or reports in data visualization tools (e.g., Tableau, Power BI, Grafana).</li><li>
Security certifications such as CompTIA Security+, GCLD, or GCSA.</li></ul>
Minimum Education:<ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul> 
Preferred Education:<ul><li>
No additional education</li></ul> 
Minimum Years of Work Experience:<ul><li>
2</li></ul> 
Preferred Years of Work Experience:<ul><li>
No additional years of experience</li></ul> 
Minimum Leadership Experience:<ul><li>
None</li></ul> 
Preferred Leadership Experience:<ul><li>
None</li></ul> 
Certifications:<ul><li>
None</li></ul> 
Competencies:<ul><li>
Action Oriented</li><li>
Collaborates</li><li>
Communicates Effectively</li><li>
Customer Focus</li><li>
Drives Results</li></ul></div>

Cybersecurity Engineer II, SaaS (REMOTE)

<div>Position Purpose:
The SaaS Security Manager is responsible for leading a team that continuously assesses and improves the security posture of The Home Depot&rsquo;s SaaS applications across the enterprise. This role owns the SaaS Security program, establishes standards and guardrails for SaaS platforms, and partners with product, engineering, and enterprise teams to protect customer, associate, and company data in third-party cloud services. 
Key Responsibilities:<ul><li>
100% Deliver Execution, Plans &amp; Aligns, Develop Others - Collaborate across teams to reduce vulnerabilities, risks, and incident management; Drive execution of solution delivery; Guide teams in strategy, alignment, analysis, and execution to ensure priorities, objectives/deliverables are met; Provide leadership, mentoring, and coaching to direct reports</li></ul> 
Direct Manager/Direct Reports:<ul><li>
This position typically reports to Sr. Manager or Director</li><li>
This position has 6-10 Direct Reports</li></ul> 
Travel Requirements:<ul><li>
No travel required.</li></ul> 
Physical Requirements:<ul><li>
Most of the time is spent sitting in a comfortable position, and there is frequent opportunity to move about. On rare occasions, there may be a need to move or lift light articles.</li></ul> 
Working Conditions:<ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul> 
Minimum Qualifications:<ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li><li>
5+ years of experience in Information Security, with at least 2 years focused on Cloud or SaaS security.</li><li>
2+ years of people management or technical leadership experience.</li><li>
Proven experience securing major enterprise SaaS platforms (e.g., Google Workspace, Microsoft 365, Salesforce, ServiceNow, Slack, Atlassian).</li></ul> 
Preferred Qualifications:<ul><li>
Bachelor's degree in Computer Science, Information Systems, or a related field.</li><li>
Industry certifications: CISSP, CISM, CCSP, or vendor-specific certifications (e.g., Salesforce Certified Security Specialist).</li><li>
Experience with scripting/automation (Python, PowerShell) to automate governance tasks.</li><li>
Experience implementing Data Loss Prevention (DLP) policies across SaaS environments.</li></ul> 
Minimum Education:<ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul> 
Preferred Education:<ul><li>
No additional education</li></ul> 
Minimum Years of Work Experience:<ul><li>
8 yrs</li></ul> 
Preferred Years of Work Experience:<ul><li>
No additional years of experience</li></ul> 
Minimum Leadership Experience:<ul><li>
2+ yrs</li></ul> 
Competencies:<ul><li>
Leadership: Proven ability to lead, motivate, and develop a team of security professionals.</li><li>
Technical Expertise:<ul><li>
Strong knowledge of Identity protocols: SAML, OIDC, SCIM, and OAuth.</li><li>
Familiarity with API security and interconnected SaaS risks (shadow IT, third-party app integrations).</li></ul></li><li>
Strategic Thinking: Ability to prioritize risks in a fast-paced environment and translate technical security risks into business language for stakeholders.</li><li>
Communication: Excellent written and verbal communication skills.</li><li>
Collaboration: Proven ability to work effectively with cross-functional teams (IT, HR, Sales, etc.) to achieve common goals.</li></ul></div>

Cybersecurity Manager, SaaS (REMOTE)

Information Technology Senior Management Forum

<div><div>Posted Date
3/11/2026
</div><div>Description
<div>)***
ESSENTIAL DUTIES AND RESPONSIBILITIES:<ul><li>
As Digital Forensics &amp; Incident Response (DFIR) professionals, individuals in this role must be well-versed in log, packet, network, endpoint, root cause analysis, containment, and eradication.</li><li>
A programming, computer science, or data science background will be important to success in this role as unstructured data will need automated decisions made and other data reduction techniques applied. Depending on the candidate, the role will likely start with basic searches and visualizations but may lead to pioneering use of Machine Learning and Artificial Intelligence techniques and tools. Familiarity with programming and malicious code critical to success in this role.</li><li>
This candidate must have a strong knowledge of windows internals to effectively respond to and eradicate advanced attacks. This role must advocate for the organization&rsquo;s threat hunting efforts. The ability to quickly identify nefarious artifacts versus benign activity will be a key skill for this position. Cyber &amp; Respond Engineers will be asked to consult on a variety of problems (technical and non-technical) within the team and larger organization.</li><li>
The Cyber Hunt &amp; Respond Senior Engineer is responsible for conducting presentations and mentoring others interested or responsible for related data science, threat hunting, or incident response.</li><li>
Develop/invent highly innovative solutions within multiple information security technologies, theories and/or techniques that impact CIS strategy</li><li>
Develop security designs for systems and networks with multilevel security requirements</li><li>
Lead highly complex and visible projects with notable risk and complexity</li></ul>
QUALIFICATIONS
Required Qualifications:
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.<ul><li>
Bachelor&rsquo;s degree in Computer Science, Computer Engineering, Cybersecurity, or related field of relevant education, certification, or related training.</li><li>
8 years of experience in Cybersecurity or related work</li><li>
Knowledge of one or more cloud platforms and cloud security</li><li>
Knowledge of general information technology (IT) and cybersecurity</li><li>
Knowledge of computer networking concepts and protocols, and network security methodologies.</li><li>
Knowledge of network traffic analysis and packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).</li><li>
Knowledge of operating systems, including Windows/Unix ports and services.</li><li>
Knowledge of modern identity and access management concepts</li><li>
Knowledge of phishing tactics and techniques</li><li>
Knowledge of advanced cyber threats and vulnerabilities.</li><li>
Knowledge of cyber-attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).</li><li>
Knowledge of adversarial tactics, techniques, and procedures</li><li>
Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions.</li><li>
Knowledge of incident response and handling methodologies.</li><li>
Knowledge of countermeasures to address a variety of threats</li><li>
Knowledge around leveraging automation, ML, and/or AI</li><li>
Knowledge of advanced threat hunting techniques</li><li>
Knowledge of types of digital forensics data and how to recognize them.</li><li>
Knowledge of types and collection of persistent data.</li><li>
Knowledge of file system implementations (e.g., New Technology File System [NTFS], File Allocation Table [FAT], File Extension [EXT]).</li><li>
Knowledge of which system files (e.g., log files, registry files, configuration files) contain relevant information and where to find those system files.</li><li>
Knowledge of processes for seizing and preserving digital evidence.</li><li>
Strong functional and technical knowledge of information/cyber security capabilities with deep expertise in one or more of the following areas: Encryption, Data Security, Application Security, End Point Security, Identity and Access Management, Windows/Unix/Linux Systems Security, Mainframe Security, Perimeter Security, Network Security, Mobility Security, Cyber Security, Cryptography, or Authentication Systems</li><li>
Strong understanding of service lifecycle management, strategic planning, and the cyber security landscape</li></ul>
Preferred Qualifications:<ul><li>
Experience working in cloud environments, namely Microsoft Azure and Amazon AWS.</li><li>
Master&rsquo;s degree or MBA and ten years of experience in business analysis or an equivalent combination of education and work experience.</li><li>
Banking or financial services experience</li><li>
Prior management experience</li><li>
Experience in leading large-scale complex projects from beginning to end</li><li>
ISSEP Certification</li><li>
Other security certifications (e.g. CCNA Security, GSEC, GCED, GPPA, etc.)</li><li>
Other technical Certifications (e.g. CCNA, RHCE, MCSE, etc.)</li><li>
Certification in Information Security Management (e.g. Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC) or Certified Information Security Manager (CISM)), or related security certification(s)</li></ul>
General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist&rsquo;s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist&rsquo;s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.
Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.
EEO is the Law E-Verify IER Right to Work</div>
</div><div></div><div><div>Type<div>
Full-time</div></div></div></div>

Cyber Hunt & Respond Principal Engineer

Truist

<div>The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.
Need Help?
If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).
Regular or Temporary:
Regular
Language Fluency: English (Required)
Work Shift:
1st shift (United States of America)<h3 class="jobSectionHeader">
Please review the following job description:</h3>
The Cyber Hunt &amp; Respond Principal Engineer (Principal Hunter) is an advanced role within the 24/7 Cyber Fusion Center. This role has 2 core functions, proactive Threat Hunting &amp; reactive Incident Response coverage.
 
 
Hunting involves searching through large, diverse sets of internal and external data to discover previously undetected threats. This role is creative and owns the development of new hypotheses on how adversaries may be attacking the organization and will prove the hypotheses based on our available data. Additionally, this role will work with internal groups to express the data needs to explore potential threats. 
 
Principal Hunters demonstrate deep expertise across advanced querying languages, assembly-level analysis, Python, regular expressions, debugging and reverse engineering tools, anti-analysis and evasion techniques, security automation, and artificial intelligence (AI). They are responsible for designing, building, and operationalizing net new threat hunting capabilities that materially improve the organization&rsquo;s ability to detect and respond to advanced adversaries (e.g. nation-state threats). 
 
In addition to hands on technical leadership, Principal Hunters serve as mentors and technical authorities for analysts, hunters, and incident responders. They provide guidance, coaching, and technical review to elevate the overall skill level, analytical rigor, and hunting maturity of the Cyber Fusion Center. 
This role participates in an on-call rotation and requires availability outside standard business hours, as necessitated by cyber incidents and imminent threat activity. 
 
***For this opportunity, Truist will not sponsor an applicant for work visa status or employment authorization, nor will we offer any immigration-related support for this position (including, but not limited to H-1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN-1 or TN-2, E-3, O-1, or future sponsorship for U.S. lawful permanent residence status.)***
ESSENTIAL DUTIES AND RESPONSIBILITIES:<ul><li>
As Digital Forensics &amp; Incident Response (DFIR) professionals, individuals in this role must be well-versed in log, packet, network, endpoint, root cause analysis, containment, and eradication.</li><li>
A programming, computer science, or data science background will be important to success in this role as unstructured data will need automated decisions made and other data reduction techniques applied. Depending on the candidate, the role will likely start with basic searches and visualizations but may lead to pioneering use of Machine Learning and Artificial Intelligence techniques and tools. Familiarity with programming and malicious code critical to success in this role.</li><li>
This candidate must have a strong knowledge of windows internals to effectively respond to and eradicate advanced attacks. This role must advocate for the organization&rsquo;s threat hunting efforts. The ability to quickly identify nefarious artifacts versus benign activity will be a key skill for this position. Cyber &amp; Respond Engineers will be asked to consult on a variety of problems (technical and non-technical) within the team and larger organization.</li><li>
The Cyber Hunt &amp; Respond Senior Engineer is responsible for conducting presentations and mentoring others interested or responsible for related data science, threat hunting, or incident response.</li><li>
Develop/invent highly innovative solutions within multiple information security technologies, theories and/or techniques that impact CIS strategy</li><li>
Develop security designs for systems and networks with multilevel security requirements</li><li>
Lead highly complex and visible projects with notable risk and complexity</li></ul>
QUALIFICATIONS
Required Qualifications:
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.<ul><li>
Bachelor&rsquo;s degree in Computer Science, Computer Engineering, Cybersecurity, or related field of relevant education, certification, or related training.</li><li>
8 years of experience in Cybersecurity or related work</li><li>
Knowledge of one or more cloud platforms and cloud security</li><li>
Knowledge of general information technology (IT) and cybersecurity</li><li>
Knowledge of computer networking concepts and protocols, and network security methodologies.</li><li>
Knowledge of network traffic analysis and packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).</li><li>
Knowledge of operating systems, including Windows/Unix ports and services.</li><li>
Knowledge of modern identity and access management concepts</li><li>
Knowledge of phishing tactics and techniques</li><li>
Knowledge of advanced cyber threats and vulnerabilities.</li><li>
Knowledge of cyber-attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).</li><li>
Knowledge of adversarial tactics, techniques, and procedures</li><li>
Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions.</li><li>
Knowledge of incident response and handling methodologies.</li><li>
Knowledge of countermeasures to address a variety of threats</li><li>
Knowledge around leveraging automation, ML, and/or AI</li><li>
Knowledge of advanced threat hunting techniques</li><li>
Knowledge of types of digital forensics data and how to recognize them.</li><li>
Knowledge of types and collection of persistent data.</li><li>
Knowledge of file system implementations (e.g., New Technology File System [NTFS], File Allocation Table [FAT], File Extension [EXT]).</li><li>
Knowledge of which system files (e.g., log files, registry files, configuration files) contain relevant information and where to find those system files.</li><li>
Knowledge of processes for seizing and preserving digital evidence.</li><li>
Strong functional and technical knowledge of information/cyber security capabilities with deep expertise in one or more of the following areas: Encryption, Data Security, Application Security, End Point Security, Identity and Access Management, Windows/Unix/Linux Systems Security, Mainframe Security, Perimeter Security, Network Security, Mobility Security, Cyber Security, Cryptography, or Authentication Systems</li><li>
Strong understanding of service lifecycle management, strategic planning, and the cyber security landscape</li></ul>
Preferred Qualifications:<ul><li>
Experience working in cloud environments, namely Microsoft Azure and Amazon AWS.</li><li>
Master&rsquo;s degree or MBA and ten years of experience in business analysis or an equivalent combination of education and work experience.</li><li>
Banking or financial services experience</li><li>
Prior management experience</li><li>
Experience in leading large-scale complex projects from beginning to end</li><li>
ISSEP Certification</li><li>
Other security certifications (e.g. CCNA Security, GSEC, GCED, GPPA, etc.)</li><li>
Other technical Certifications (e.g. CCNA, RHCE, MCSE, etc.)</li><li>
Certification in Information Security Management (e.g. Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC) or Certified Information Security Manager (CISM)), or related security certification(s)</li></ul>
General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist&rsquo;s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist&rsquo;s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.
Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.
EEO is the Law E-Verify IER Right to Work</div>

Explore 408+ Senior cyber security analyst in Atlanta this March. Find roles across top companies and apply now to boost your career.

408 senior cyber security analyst jobs In Atlanta

Cyber Security Analyst (10a-7p Shift)

Cybersecurity Staff Analyst | Identity Fraud

Cybersecurity Analyst, SaaS (REMOTE)

Cybersecurity Engineer II, SaaS (REMOTE)

Cybersecurity Manager, SaaS (REMOTE)

Cyber Hunt & Respond Principal Engineer

Cyber Hunt & Respond Principal Engineer