Top Senior Cyber Security Jobs in Atlanta, GA

Lead definition and adoption of cloud and on-prem cybersecurity architecture, design secure multi-cloud infrastructure and guardrails, drive standards and working groups, collaborate with engineering and business teams, participate in incident response and risk analysis, evaluate emerging threats and AI-enabled security solutions, and ensure compliance with frameworks and regulations.

Leads industrial cybersecurity operations as an L2 SOC escalation resource. Monitors SIEM and ICS infrastructure, evaluates incidents, develops SOAR playbooks, performs threat hunting and malware analysis, supports forensics, tunes detection rules, recommends remediation, and mentors SOC analysts. The role requires extensive SOC, incident response, SIEM/SOAR, and security automation experience, including Python, with hybrid work in Duluth, Georgia.

Leads industrial cybersecurity operations within a global managed services SOC. Monitors SIEM and ICS environments, investigates and triages incidents, develops SOAR automation and playbooks, performs threat hunting and malware analysis, supports forensics and root cause analysis, tunes detection rules, recommends remediation, and mentors junior SOC analysts. The role serves as an L2 escalation point and requires expertise in SOC operations, incident response, SIEM, SOAR, and Python-based security automation.

Design, build, automate, and operate network security controls across AWS, GCP, private cloud, and enterprise environments. Lead security architecture initiatives, implement zero trust and SASE solutions, assess infrastructure designs, and support firewalls, WAF, DDoS, and IPS/IDS controls. Partner with cybersecurity and trust teams on policies and compliance, mentor engineers, document architectures, and participate in production on-call support.

Lead design, deployment, automation, operation, and improvement of global SASE/SSE services. Migrate legacy proxy/VPN to cloud-delivered SWG, ZTNA, CASB, DLP, and threat protection. Provide technical leadership across network, security, identity, cloud, endpoint, and application teams. Design, configure, troubleshoot, monitor, automate, and document network and security solutions to ensure reliable, scalable, and policy-driven access.

Oversee the security of firm applications, networks, systems, hardware, and mobile devices throughout their lifecycles. Develop security requirements and architecture, manage controls and configurations, perform certification and accreditation, maintain asset inventories, and ensure secure development and acquisition practices. Collaborate across departments and mentor team members while serving as a primary technical security contact. The role requires independent judgment, strong analytical ability, knowledge of security frameworks and technologies, and at least seven years of related experience.

Design and operationalize an enterprise API security program: implement runtime protections, embed security into CI/CD, provide secure API design guidance, build telemetry-driven analytics, define governance, support audit readiness, and partner with engineering to reduce API risk at scale.

The Data Security Architect will design secure architectures for data protection in cloud and hybrid environments, partnering with various teams to embed security in systems and mentoring engineers.

The Chief Information Security Officer leads DLA Piper’s enterprise cybersecurity strategy, governance, risk management, incident response, data protection, third-party security, security awareness, and operational resilience programs. The role advises executives and governance bodies, oversees security controls and emerging technology risk, translates technical risks into business and legal impacts, and builds a high-performing global information security organization. The CISO also manages security policies, audits, regulatory and client obligations, vendor oversight, budgets, talent development, and executive communications.

Designs, automates, and supports complex cybersecurity solutions across cloud and infrastructure environments. Responsibilities include security alert monitoring, incident and vulnerability management, security architecture, SIEM tuning, access reviews, compliance with frameworks such as SOC 2 and CMMC, risk assessments, third-party security reviews, scripting, and secure technology guidance. The role also mentors team members and partners with technical and business stakeholders to improve security posture.

Design and evangelize secure application and platform architectures, embed security into SDLC, define reusable security patterns, conduct threat modeling, advise development/DevOps teams, enforce controls and compliance (SOX/HIPAA), and research and implement security technologies and mitigations.

Lead and perform red-team and penetration testing engagements across network, application, wireless, data center and cloud environments. Conduct complex security assessments, analyze findings, present remediation recommendations, implement solutions, and transfer knowledge to client staff. Partner with senior engineers and apply multi-discipline expertise to solve real-world security challenges.

Lead and execute security governance, risk, and compliance activities including SOC 2 and regulatory compliance audits, internal control testing, GRC platform administration, enterprise risk register maintenance, remediation tracking, and cross-functional policy and questionnaire support. Produce audit reports, dashboards, and risk reporting to leadership.

Design, implement, and operate security platforms (firewalls, IDS/IPS, SIEM, MDM). Perform vulnerability assessments, monitor and analyze security logs, drive remediation, enforce security policies, and evaluate new security technologies.

Advise cloud, IAM, and engineering teams on secure configurations, architecture reviews, CSPM remediation, logging/monitoring, and incident response for primarily Azure (plus AWS/GCP). Support audits, documentation, ISO27017 activities, and participate in on-call security rotations.

Designs, implements, and maintains enterprise identity and access management (AD DS, Entra ID, SSO, MFA). Architects RBAC, JIT, conditional access and non-human identity governance. Leads PKI, privileged access, detection engineering, identity incident response, automation (PowerShell, APIs, IaC), and Tier-3 support. Collaborates across security, DevOps, and infrastructure, authors documentation and runs on-call rotation.

Support Dept. of Commerce ATO efforts by performing full lifecycle RMF/DIACAP assessment and authorization activities, security assessments per NIST 800-53, vulnerability scanning and patch management oversight, risk identification and reporting, configuration management recommendations, technical writing of A&A artifacts, and providing SME guidance for mitigation strategies and security engineering.

Lead implementation of a Cyber Security Operations Center (SOC) and SIEM platform. Manage project schedule (MS Project), scorecards, coordinate infrastructure teams, ensure ordering/installation, run cross-team meetings, and drive timely hand-offs. Requires strong IT and project leadership experience; PMP preferred.

Manage information security projects, ensuring delivery and compliance with ISO/IEC 27000 series. Requires 7+ years project management experience, strong communication, and ability to work with government clients (preferred). Contract role (3+ months) with phone and face-to-face interactions.