Top Cyber Security Jobs in Atlanta, GA

Provides technical leadership for cloud security across AWS, GCP, Kubernetes, and self-managed infrastructure. Defines security standards, reference architectures, threat-modeling practices, IAM controls, detection strategies, incident-response playbooks, vulnerability management, and Kubernetes security standards. Leads cross-functional initiatives, mentors engineers, secures infrastructure-as-code and CI/CD pipelines, and investigates cloud security incidents. This is a senior individual contributor role requiring production cloud security ownership and hands-on coding in Python and Terraform.

This role involves defining and leading the security and risk strategy for Circle's products, ensuring compliance across jurisdictions while managing product security, compliance operations, and risk assessment.

Lead definition and adoption of cloud and on-prem cybersecurity architecture, design secure multi-cloud infrastructure and guardrails, drive standards and working groups, collaborate with engineering and business teams, participate in incident response and risk analysis, evaluate emerging threats and AI-enabled security solutions, and ensure compliance with frameworks and regulations.

Leads industrial cybersecurity operations as an L2 SOC escalation resource. Monitors SIEM and ICS infrastructure, evaluates incidents, develops SOAR playbooks, performs threat hunting and malware analysis, supports forensics, tunes detection rules, recommends remediation, and mentors SOC analysts. The role requires extensive SOC, incident response, SIEM/SOAR, and security automation experience, including Python, with hybrid work in Duluth, Georgia.

Leads industrial cybersecurity operations across global managed services customers. Responsibilities include SIEM monitoring, SOC escalation, SOAR process and playbook development, incident triage, malware analysis, threat hunting, forensic support, alert tuning, remediation orchestration, and mentoring SOC analysts. The role operates as an L2 SOC escalation layer and supports ICS environments including SCADA, HMI, PLC, and RTU systems.

Provides Level 2 SOC escalation and industrial cybersecurity services for OT environments. Monitors SIEM and ICS infrastructure, evaluates and enriches security incidents, develops SOAR playbooks and automation, performs malware analysis and threat hunting, supports forensic investigations, tunes detection rules, coordinates remediation, and mentors junior SOC analysts. The role also documents procedures, communicates security trends, and advises customers on defense-in-depth and control improvements.

Leads industrial cybersecurity operations within a global managed services SOC. Monitors SIEM and ICS environments, investigates and triages incidents, develops SOAR automation and playbooks, performs threat hunting and malware analysis, supports forensics and root cause analysis, tunes detection rules, recommends remediation, and mentors junior SOC analysts. The role serves as an L2 escalation point and requires expertise in SOC operations, incident response, SIEM, SOAR, and Python-based security automation.

Leads industrial cybersecurity operations within a global managed services SOC. Monitors SIEM and ICS infrastructure alerts, investigates and triages incidents, develops SOAR playbooks and automation, performs threat hunting, malware analysis, threat modeling, and supports forensic investigations. Provides remediation guidance, tunes security monitoring controls, supports root cause analysis, mentors SOC analysts, documents procedures, and serves as an L2 escalation resource for industrial customers.

Leads industrial cybersecurity operations for global customers, monitoring SIEM and OT infrastructure, evaluating and escalating incidents, developing SOAR playbooks, conducting malware analysis and threat hunting, supporting forensic investigations, tuning detection rules, coordinating remediation, and mentoring SOC analysts. The role serves as an L2 SOC escalation point and develops security documentation, recommendations, and communications.

Design, build, automate, and operate network security controls across AWS, GCP, private cloud, and enterprise environments. Lead security architecture initiatives, implement zero trust and SASE solutions, assess infrastructure designs, and support firewalls, WAF, DDoS, and IPS/IDS controls. Partner with cybersecurity and trust teams on policies and compliance, mentor engineers, document architectures, and participate in production on-call support.

Build and improve security across applications, cloud infrastructure, internal systems, and products. Responsibilities include identifying and remediating risks, developing security tooling and automation, conducting architecture reviews and threat modeling, integrating security into the software development lifecycle, strengthening identity and access controls, and developing monitoring, vulnerability management, detection, and incident response capabilities.

Implement, operate, automate, and improve Cargill's global SASE/SSE services. Configure SWG, ZTNA, CASB, DLP, and threat protection; migrate legacy remote-access solutions to cloud-delivered security; troubleshoot, maintain, monitor performance, support disaster recovery, and develop automation and documentation.

Lead design, deployment, automation, operation, and improvement of global SASE/SSE services. Migrate legacy proxy/VPN to cloud-delivered SWG, ZTNA, CASB, DLP, and threat protection. Provide technical leadership across network, security, identity, cloud, endpoint, and application teams. Design, configure, troubleshoot, monitor, automate, and document network and security solutions to ensure reliable, scalable, and policy-driven access.

Oversee the security of firm applications, networks, systems, hardware, and mobile devices throughout their lifecycles. Develop security requirements and architecture, manage controls and configurations, perform certification and accreditation, maintain asset inventories, and ensure secure development and acquisition practices. Collaborate across departments and mentor team members while serving as a primary technical security contact. The role requires independent judgment, strong analytical ability, knowledge of security frameworks and technologies, and at least seven years of related experience.

Lead two engineering teams that build and operate the Detection Engine, Threat Intelligence Platform, SOAR, and Case Management. Own hiring, delivery quality, production operations, roadmaps, and partner-visible surfaces. Provide technical architecture guidance (~20% hands-on), ensure SLOs and incident management, coordinate with security practitioners and central engineering, and enable AI/LLM-driven workflows and platform extensibility for SOC, Detection Engineering, and Threat Intelligence customers.

Design and operationalize an enterprise API security program: implement runtime protections, embed security into CI/CD, provide secure API design guidance, build telemetry-driven analytics, define governance, support audit readiness, and partner with engineering to reduce API risk at scale.

Lead enterprise network security architecture, governance modernization, and cybersecurity strategy across on-premises, hybrid, and multi-cloud environments. Design automated governance capabilities using Policy-as-Code, Process-as-Code, workflow optimization, and AI-assisted security analysis. Establish measurable methods for evaluating controls, policy compliance, risk, and governance maturity while influencing executives, architects, engineers, and business stakeholders. The role is fully onsite Monday through Friday and requires approximately 10% travel.

Own Connexure’s information security program, including strategy, policies, risk management, security architecture, tooling, SOC 2 and HITRUST certification oversight, client and vendor due diligence, AI governance, and incident response. Lead the Security Analyst, manage security vendors, partner with Engineering, Sales, Legal, and executives, and report security posture and material risks to leadership and the board.

The Data Security Architect will design secure architectures for data protection in cloud and hybrid environments, partnering with various teams to embed security in systems and mentoring engineers.

Support cyber risk and compliance activities including PCI, SOC, SOX, and regulatory readiness. Maintain internal cyber content, coordinate penetration testing and remediation, support change governance and audit responses, develop scripts/reports for regulatory reporting, and partner with technical and business stakeholders to strengthen security posture and maintain compliance.

The Chief Information Security Officer leads DLA Piper’s enterprise cybersecurity strategy, governance, risk management, incident response, data protection, third-party security, security awareness, and operational resilience programs. The role advises executives and governance bodies, oversees security controls and emerging technology risk, translates technical risks into business and legal impacts, and builds a high-performing global information security organization. The CISO also manages security policies, audits, regulatory and client obligations, vendor oversight, budgets, talent development, and executive communications.

Lead a Developer Enablement Application Security team to design secure systems, integrate application security into CI/CD, perform technical analysis and security reviews, deliver scalable solutions, and communicate risks and metrics to engineering teams and senior stakeholders.

Designs, automates, and supports complex cybersecurity solutions across cloud and infrastructure environments. Responsibilities include security alert monitoring, incident and vulnerability management, security architecture, SIEM tuning, access reviews, compliance with frameworks such as SOC 2 and CMMC, risk assessments, third-party security reviews, scripting, and secure technology guidance. The role also mentors team members and partners with technical and business stakeholders to improve security posture.

Protect enterprise systems and networks by assessing security architecture, implementing security solutions, validating vulnerabilities, responding to incidents, and monitoring cyber risk metrics. The role supports cloud, endpoint, identity, and application security across hybrid environments; recommends remediation, updates procedures, contributes to resiliency planning, and trains junior security personnel. Regular onsite attendance is required for secure system access, collaboration, operational meetings, and sensitive technical work.

Design and evangelize secure application and platform architectures, embed security into SDLC, define reusable security patterns, conduct threat modeling, advise development/DevOps teams, enforce controls and compliance (SOX/HIPAA), and research and implement security technologies and mitigations.