Open Atlanta Cybersecurity jobs

Summary

Leads security architecture efforts across all cybersecurity domains for new technology implementations, major system changes and mergers/acquisitions at an insurance and financial-services company, and drives updates to security standards and policies in response to regulatory or business change. The role communicates risk to executive leadership, performs third-party and cloud security risk assessments, serves as subject-matter expert during incident response, and supports SOX, PCI and HIPAA/HITECH compliance. The position is remote-eligible from EST or CST US locations and is not eligible for visa sponsorship.

Summary

Senior staff-level Identity and Access Management architect defining enterprise IAM reference architectures, RBAC/ABAC models, and privileged-access designs such as just-in-time access and credential vaulting across UKG's cloud, infrastructure, and application environments. Performs security architecture reviews and threat modeling for identity initiatives and supports SOC, ISO 27001, and PCI compliance.

Summary

Governance, risk and compliance engineering at Flock Safety, leading audit readiness and evidence management for SOC 2, ISO 27001, ISO 27701 and privacy frameworks with an automation-first approach. The role builds automated workflows that turn point-in-time audits into continuous compliance monitoring across cloud and SaaS systems, and handles customer assurance requests, security questionnaires and due diligence. Certifications such as Security+, CISA, CRISC or ISO 27001 Internal Auditor are listed as a plus.

Summary

Individual-contributor security architect designing enterprise security architecture blueprints and Security Architecture as Code, translating security policies and regulatory requirements into reusable, machine-readable, version-controlled architecture assets integrated into software delivery workflows. Uses AWS cloud-security expertise and Infrastructure-as-Code tools such as Terraform, CloudFormation, and AWS CDK, and evaluates AI-generated architecture recommendations for compliance accuracy. Onsite, first shift.

Summary

Leads the security design and risk-assessment approach for Fiserv's enterprise AI program, shaping the reference architectures, risk tiering and guardrail standards the business builds against. Relevant background spans security architecture, threat modeling with methods such as STRIDE, zero trust design, AI security policy and certifications including CISSP and CISM.

Summary

This is a senior cyber security engineer role leading enterprise information security design and implementation at a children's hospital system, overseeing security systems, standards, and policies while mentoring team members. The role spans security architecture, penetration and vulnerability assessments, security incident and event monitoring, and patch deployment across endpoint and network protection tools.

Summary

Senior security engineer leading the enterprise API vulnerability-management program, using tools such as Akamai, Salt Security, Traceable, and Burp Suite to identify and remediate API vulnerabilities, and building automated API security testing into CI/CD pipelines. Performs penetration testing and partners with DevSecOps and application teams on remediation. Five days per week onsite in Atlanta, Raleigh, or Charlotte.

Summary

Security engineer deploying and operating container-vulnerability scanning tools across the software development lifecycle, writing Python/JavaScript/Terraform automation scripts, and working with development teams on remediation. Also performs threat modeling, security testing, and penetration testing for cybersecurity technology projects. Five days per week onsite in Atlanta.

Summary

Senior threat-hunting and incident-response engineer in Truist's 24x7 Cyber Fusion Center, developing and testing hunting hypotheses across internal and external data sources and leading investigation, containment, eradication, and recovery for security incidents. Performs digital forensics across endpoint, network, and log data and participates in a rotating on-call schedule. Onsite in Atlanta or Zebulon, North Carolina.

Summary

Senior threat-hunting and incident-response engineer in Truist's 24/7 Cyber Fusion Center, developing hunting hypotheses and performing digital forensics and incident response across endpoint, network, and log data. This is a dedicated 3rd-shift role (11pm-7am, Sunday night through Friday morning) onsite in Zebulon, North Carolina, with a 15 percent shift differential.

Summary

A senior cyber threat-hunter role at Fiserv (a second posting of the role), pairing proactive threat hunting and detection engineering with DFIR, malware analysis, and reverse engineering supported by behavioral analytics and data science. It expects roughly eight-plus years of hands-on hunting and forensics experience in a payments environment.

Summary

Runs threat hunting and adversary pursuit at Flock Safety across cloud environments, IoT hardware and corporate applications, validating custom detections with the offensive security team and mapping them to the MITRE ATT&CK framework. The role designs incident response and tabletop exercises, serves as escalation for deep root cause analysis, and writes detection logic in Splunk SPL, YARA or Sigma alongside malware analysis and security automation work. It sits above tier 1 SOC triage and stays hands-on rather than managerial.

Summary

Individual contributor role standing up Flock Safety's Product Security Incident Response Team and owning its coordinated vulnerability disclosure program, including operating as CVE Numbering Authority with vulnerability intake, triage SLAs, severity rubrics and public CVE publishing. The work drives remediation across hardware, firmware, device and cloud SRE, mobile, legal, communications and support, and produces public advisories, postmortems and PSIRT performance metrics. Requires applying CVSS, CWE, EPSS and SSVC and a technical background in embedded or firmware, Linux and Android device, AWS cloud or mobile application security.

Summary

Manages large information-security projects and programs, conducting advanced threat analysis, vulnerability assessments, and penetration testing, and leading incident-response efforts including forensic investigation and reconstruction. Guides identity and access management and data-protection practices across the enterprise, requiring 7+ years of information-security experience.

Summary

This role supports a health insurer's data-at-rest encryption program and cloud database security, onboarding databases, applications and cloud resources into enterprise data-protection and monitoring platforms and performing security event validation, log analysis and operational troubleshooting for those technologies. A substantial automation component runs alongside the security work: Terraform, Ansible, scripting and CI/CD pipelines used to build automated workflows, operational playbooks and infrastructure-as-code, plus entry-level data science concepts applied to security operations visibility. The analyst works across AWS, Azure and GCP with infrastructure, database administration, cloud engineering, DevOps and cybersecurity teams, supports proof-of-concept evaluations of new cloud database technologies, and is required onsite one to two days per week.

Summary

Third-party vendor risk role within information security, performing security risk assessments of vendors, evaluating vendor controls, reviewing contracts and building remediation plans. The assessment scope spans IP network infrastructure, firewalls, intrusion detection and prevention, access control, data encryption, physical security and cloud security, with peer review, remediation evidence review and status reporting as recurring duties. Certifications named are CISSP, CRISC and CISA.

Summary

Senior cyber risk management role informing risk decisioning and supporting controls governance for Fiserv's commercial businesses. Related areas include application and infrastructure security, vulnerability management, validation activities, security documentation and cloud environments, with certifications such as CISA, CISM, CISSP or CRISC relevant.

Summary

Cyber and technology risk managers at Fiserv act as trusted advisors who translate the requirements to be secure, vigilant and resilient into terms business and technology teams can act on, in line with the company's cyber risk appetite. The role draws on information risk management, information assurance and infrastructure security, with certifications such as CISA, CISM, CISSP or CRISC relevant.

Summary

Senior threat hunting and incident response inside a bank's security program — leading technical analysis of emerging threats, building and testing detection rules with engineering teams, mapping findings to MITRE ATT&CK, and automating hunts, with Jupyter notebooks and AI tooling featuring prominently. Also covers forensic and eDiscovery investigation support and training security operations staff.

Summary

Senior DevSecOps engineer on the Cloud Security Team building and enhancing automated, cloud-native security solutions to protect payment platforms and applications. Work includes infrastructure-as-code and automation in Python, Bash or Terraform, and establishing secure-by-design engineering standards across teams.

Summary

Senior DevSecOps engineer on the Cloud Security Team building and enhancing automated, cloud-native security solutions to protect payment platforms and applications. Work includes infrastructure-as-code and automation in Python, Bash or Terraform, and establishing secure-by-design engineering standards across teams.

Summary

Coordinates containment, eradication and post-incident activities for critical cybersecurity incidents as part of the Global Cybersecurity Incident Management team, serving as an escalation point for the Security Operations Center and running root-cause and post-incident reviews. Includes a 24x7 on-call rotation for critical security incidents and coordination of bug-bounty finding remediation.

Summary

This is a senior project management role leading cross-functional projects and programs spanning business systems, IT, and security rather than a hands-on security position. Responsibilities include defining scope and timelines, coordinating IT, security, cloud ops, and vendor teams, managing budgets and change control, and ensuring projects meet governance and compliance standards. PMP or Agile certification is preferred, along with familiarity using AI and LLM tools to support delivery.

Summary

Cyber governance role at Fiserv interpreting and applying cybersecurity frameworks and guidance, including NIST standards and ISO 27001. Related areas include information assurance, PCI DSS, COBIT, gap and trend analysis and compliance dashboards, with certifications such as CISA, CISM, CISSP or CRISC relevant.

Summary

Works across Fiserv's cybersecurity, technology risk management and risk engineering teams to strengthen governance processes, identify control gaps and support risk-informed decision-making. The role blends risk assessment practice with hands-on analytics and automation skills such as Python, SQL, Git and workflow automation, and touches AI and prompt engineering work.

Summary

A full stack application engineering job inside Truist banking technology: Java, J2EE, Spring Boot and microservices on the back end with TypeScript, Node.js and React on the front, running on OpenShift, Kubernetes and AWS. The security engineer half of the title refers to building and maintaining security controls and monitoring and orchestrating calls to REST, SOAP and encrypted messaging services inside multi stage fraud detection flows, not a dedicated security operations post. The posting is explicit that the role is on site in the listed hubs, and it includes leading moderately complex projects and possibly overseeing a small team.

Summary

Lead engineer and primary technical owner of a Saviynt-based identity governance and administration platform, responsible for platform architecture, configuration and production readiness, joiner-mover-leaver lifecycle processes, access requests, certifications, provisioning logic and SaaS connectors and integrations. The role designs and enforces security controls including Conditional Access, Zero Trust principles and periodic access reviews, drives root-cause analysis and post-go-live stabilization, mentors junior engineers and shapes the long-term IGA roadmap. Seven or more years of IT experience with identity governance depth is required; candidates must be a US citizen or green card holder intending to naturalize, and must work full time on site within 50 miles of the employing Reserve Bank.

Summary

Internal Audit role serving as the cybersecurity subject-matter expert, auditing technology controls across cloud platforms, industrial control systems, and data-privacy frameworks and applying NIST, PCI, and COBIT standards to assess security posture. Conducts interviews, independently executes audit test procedures, and reports findings and remediation recommendations to IT and security leadership. This is an audit/compliance function rather than hands-on security engineering.

Summary

Information security compliance role on a Global Information and Content Security team supporting the organization globally, anchored on PCI compliance and extending to SSAE 18, SOX and data privacy regulatory monitoring. Duties include cloud controls testing across AWS, Azure and GCP, risk analysis, control testing, audit support, remediation planning and process improvement, with reporting through Tableau and Power BI. Certifications named are PCI Qualified Security Assessor, PCIP, CISA, CISM and CISSP.

Summary

A bank cybersecurity analyst role centered on analyzing, identifying and documenting cybersecurity information and risk, working in support of several other internal security teams rather than owning a single system. The posting points toward vulnerability assessment, governance-risk-and-compliance and audit process work with security operations center exposure, and names Security+ as its certification signal.

Summary

A bank cybersecurity analyst role centered on analyzing, identifying and documenting cybersecurity information and risk, working in support of several other internal security teams rather than owning a single system. The posting points toward vulnerability assessment, governance-risk-and-compliance and audit process work with security operations center exposure, and names Security+ as its certification signal.

Summary

A bank cybersecurity analyst role centered on analyzing, identifying and documenting cybersecurity information and risk, working in support of several other internal security teams rather than owning a single system. The posting points toward vulnerability assessment, governance-risk-and-compliance and audit process work with security operations center exposure, and names Security+ as its certification signal.

Summary

A platform engineering role assisting with the design and development of fully autonomous CI/CD pipelines that carry cloud deployments, including automation of the underlying infrastructure, services, and application build and deployment. The named ground covers Terraform, Ansible playbooks, Jenkins, Git and Python across Kubernetes, AKS and OpenShift on both Azure and AWS, with information security and chaos engineering listed alongside the delivery tooling.

Summary

A cloud platform role designing and developing fully autonomous CI/CD pipelines for cloud deployments, covering automation of infrastructure, services, and application build and deployment. The named ground covers Ansible, Terraform, Jenkins and Python across Kubernetes and OpenShift on AWS and Azure, with infrastructure as code, configuration management, change management and chaos engineering among the listed practices.

Summary

Sits inside the Regions cyber security organization, covering security for cloud applications, infrastructure and platform technologies at the bank. The posted description is brief, but the listed skills point to hands-on vulnerability assessment and penetration testing work with Nessus, nmap and Burp Suite, plus scripting and OWASP practices, with CompTIA Security+ named among the qualifications.

Summary

Senior backend engineering role on Slack's Vulnerability Management team, building the internal systems and tooling that detect, prioritize, track and remediate security vulnerabilities across the infrastructure rather than performing manual assessments. Work includes driving integration strategy across vulnerability scanners and aggregation pipelines and making decisions about data ownership, tool consolidation and signal quality. It is framed as a high-ownership individual contributor role that sets technical direction for how vulnerability management is automated at scale.

Summary

A cybersecurity-focused ServiceNow role leading the design, configuration, and optimization of ServiceNow capabilities that support security risk, compliance, third-party risk, and PCI assessment processes. Work includes building workflows, data models, control libraries, evidence-collection processes, dashboards, and integrations, and developing enterprise information security policies and standards. This is a hybrid position requiring one to two days per week in-office.

Summary

Cloud security architecture at a health insurer, focused on operationalizing cyber defense across AWS, Azure, GCP, and OCI: ensuring security controls, logging, and telemetry are enabled and validated, and setting the roadmap for CSPM, threat detection, logging pipelines, and incident response integration. The architect develops cloud threat monitoring use cases and trains SOC analysts to triage and remediate the resulting alerts, works complex cloud security events and misconfigurations with incident response, evaluates and onboards vendor technologies, and reviews new cloud, AI, and SaaS services in governance before approval. FedRAMP-compliant architecture design is in scope, and the role is hybrid at one to two days per week in office with a commuting-distance requirement.

Summary

Offensive security leadership role at a health insurer, driving development of AI-driven offensive tooling and autonomous agents that extend penetration testing and red team operations. The posting pairs conventional red team and threat simulation work with AI security testing, listing prompt injection and jailbreak testing, adversarial testing of LLM applications, MITRE ATLAS, PyRIT and Garak, plus EDR and XDR evasion testing and malware development. It expects production-grade software engineering in Python, cloud fluency across AWS, GCP and Azure, and mentoring plus stakeholder management responsibilities.

Summary

Enterprise cybersecurity architecture role leading the strategy and design of security architecture across on-premises, hybrid, and multi-cloud environments, spanning cloud security, encryption, DevSecOps, threat modeling, and access management. Positioned as a senior architect role (CISSP and TOGAF referenced) rather than hands-on software development.

Summary

Enterprise architecture role owning target-state architecture and modernization strategy for client identity and access management, fraud, and anti-money-laundering systems at a large bank. The work is strategy and governance rather than implementation: evaluating architectural alternatives on cost, value, scalability, and risk, setting and enforcing enterprise technology standards, and coordinating with CIAM, fraud, AML, cloud platform, and application development teams. It also carries a mentorship and evangelism component across the bank architecture community.

Summary

Hands-on security engineering for enterprise AI systems, covering guardrails, prompt-injection defenses, content and output filtering, secure tool-use boundaries, logging, monitoring logic, and detection content for AI-enabled applications and agents in a regulated environment. The stack leans heavily on infrastructure as code with Terraform and CloudFormation, GitLab CI/CD, Python automation, and cloud security tooling across AWS, Azure, ECS, EKS, and Kubernetes workloads. The posting states the role is five days a week in the Atlanta or Charlotte office.

Summary

AI security governance and posture management rather than build work: conducting security reviews and risk assessments of enterprise AI use cases and architectures, investigating shadow AI activity through cloud security and endpoint protection platforms, and validating controls against internal standards. The team is still establishing these processes, so the posting emphasizes operating in ambiguity and partnering across security engineering, architecture, risk, compliance, legal, and business teams. Prior AI security posture management experience is not required, but a background in cybersecurity, cloud security, security operations, or technology governance is, and the role is five days a week in Charlotte or Atlanta.

Summary

Application security consulting role focused on making vulnerability data actionable: interpreting findings across SAST, SCA, secrets, API, container, and IaC scanning, performing control testing and validation with evidence collection, and coaching application teams through remediation and vulnerability burndown. It also carries a program-metrics and standards component, producing burndown, aging, trend, and adoption reporting, refining AppSec intake workflows, and working with DevOps teams to embed security in CI/CD. The posting requires a minimum of seven years in information security and states the role is five days a week in the Atlanta, Charlotte, or Raleigh hub.

Summary

An information security compliance role leading PCI DSS activities across the enterprise, including control interpretation, assessment readiness, evidence review, scope validation, and remediation tracking. The advisor supports ISA/QSA assessments (ROC, SAQ, AOC) and third-party service-provider reviews, and also touches HIPAA, HITRUST, SOC 2, and NIST audit activities. This is a hybrid position requiring one to two days per week in-office within commuting distance.

Summary

Ownership of the enterprise AI governance architecture roadmap and its technical implementation on OneTrust and associated GRC platforms, with the emphasis on integration and strong governance controls. The listed skill set pairs compliance and risk work with hands-on engineering, naming REST API integrations, Python, JavaScript, Power BI, data mapping, traceability, continuous monitoring, PCI DSS, and incident response.

Summary

Builds identity and access management software inside UKG's Global Security organization, covering identity governance, privileged access management, authentication and authorization across enterprise and cloud environments. The work is service, automation and tooling development in Go, C# and Python, plus integrations between applications, cloud platforms and identity providers using SAML 2.0, OAuth 2.0, OIDC, LDAP and Active Directory, with Saviynt and infrastructure-as-code for IAM services across GCP and AWS. Requires 5+ years across software engineering, security engineering or identity and access management.

Summary

An enterprise cybersecurity architecture role leading the strategy and design of security architecture across on-premises, hybrid, and multi-cloud environments at a payments/fintech company. Covers cloud security, encryption, threat modeling, DevSecOps, network security, and identity and access management, with frameworks such as TOGAF and PCI DSS referenced. CISSP and deep security-architecture experience are expected.

Summary

Despite the security engineer title, most of the scope is an identity infrastructure assessment: evaluating a client's Active Directory and Azure/Entra ID forest, domain, organizational unit, security group, authentication and group policy design, prioritizing gaps by criticality and risk, and recommending remediation with resource and budget estimates. The distinguishing piece is Microsoft Purview, where the engineer manages migration of enterprise data governance and compliance frameworks. Data gathering runs through PowerShell queries, SailPoint reports, ADUC, ManageEngine and StealthAUDIT, and the posting asks for a background as an Active Directory architect.

Summary

A senior security engineer at Truist who owns certificate lifecycle automation end-to-end — extending existing Venafi issuance/renewal automation into the deployment and validation layers across servers, load balancers (F5), web servers (IIS, Apache, NGINX), and application environments. The role is explicitly focused on the 'last mile' of certificate installation rather than PKI issuance, and contributes to enterprise crypto agility and quantum-safe readiness initiatives. Ansible, scripting, and API automation expertise required; Charlotte, Raleigh-Durham, or Atlanta preferred.

Summary

A security operations center role within a managed security services (MSS) team, serving as a primary responder for client security systems through health checks, ticket triage, SIEM and endpoint product support, and escalation handling. The work centers on security tooling such as SentinelOne, CrowdStrike, Splunk, and Microsoft Sentinel. This is a third-shift overnight position (Wednesday through Saturday), with Security+/Network+ preferred.

Summary

An identity and access management engineering role owning the technical architecture, platform standards and roadmap for privileged access management at AIG, built on Idira/CyberArk vaulting. Day-to-day work is configuring vaults, safes, platforms, connectors, workflows and password policies, and architecting integrations with Active Directory and Entra ID, SIEM and ITDR platforms, cloud IAM across AWS, Azure and GCP, ServiceNow and CI/CD pipelines. The posting asks for 10+ years of PAM-focused experience including building custom connectors, and stresses that audit and regulatory scrutiny demands extreme attention to detail.

Summary

A staff-level cloud security role focused on architecture, configuration and governance across AWS, GCP and Azure. The posting emphasizes container security, Kubernetes, Docker, DevSecOps, Python automation, CI/CD, threat modeling, compliance and cloud security posture tooling.

Summary

A DevSecOps role that partners with other engineers and information technology staff to orchestrate code builds, quality and security analyses, deployments and automated testing through CI/CD release candidacy pipelines. The named ground covers Jenkins, Ansible, Terraform, Git, Python and YAML across Kubernetes and AKS on AWS and Azure, framed as platform engineering and cloud-native delivery.

Summary

Despite the software tag, this is a client-facing cybersecurity leadership role that splits between virtual CISO advisory and hands-on security architecture for a consulting firm's client portfolio. The vCISO side owns security strategy, risk registers, compliance programs (SOC 2, ISO 27001, HIPAA, PCI DSS, NIST CSF) and incident response leadership, while the architect side designs secure network, cloud, application, and identity architectures. It is a hybrid role based in Duluth, GA, and also supports pre-sales scoping of engagements.

Summary

Senior network security specialist leading a payments company's Secure Web Gateway, Proxy, SASE, and Zero Trust transformation, owning the architecture and engineering of Zscaler (ZIA/ZPA) and Palo Alto platforms (Panorama, NGFW, Prisma Access, Threat Prevention) across a global enterprise, plus IPS/IDS and firewall-adjacent controls. A hands-on technical leadership role with a rotating on-call schedule; requires US citizen or green card holder (no visa sponsorship); hybrid three days per week.

Summary

Lead cyber threat intelligence analyst at a bank, conducting hands-on analysis of threat actors, campaigns, malware, phishing, and financial-sector threats and producing tactical, operational, and strategic intelligence products for security teams and leadership. Maps activity to MITRE ATT&CK and supports threat hunting, detection engineering, incident response, and vulnerability management as a senior individual contributor. Requires working from a US Bank location three or more days per week; no visa sponsorship.

Summary

A senior edge and perimeter security engineering role for WBD's web properties. The work implements and maintains WAF and DDoS protections, bot mitigation, firewall rules, log analysis, API security, OWASP controls, cloud WAF services, scripting, infrastructure as code and CDN integrations.

Summary

A cybersecurity-focused data engineering role building and documenting big-data pipelines that support security engineers, database architects, data analysts, and data scientists. The listed skills span SQL and NoSQL databases, Spark, BigQuery, Kafka, and ETL/ELT alongside cybersecurity and firewalls, blending data engineering with a security-data mission. It can be based in Columbus, Ohio or Alpharetta, Georgia among other US locations.

Summary

This is an on-site enterprise cybersecurity engineering role with an Arctiq client in Marietta, GA, focused on threat detection, incident response, and security engineering rather than software development. Responsibilities span network and endpoint security, SOC enhancement, security monitoring platforms, security assessments and audits, and leading incident response activities. It expects 10-plus years of IT experience with at least 8 focused on cybersecurity and network infrastructure, including network authentication and NAC.

Summary

A cloud security engineering role leading the deployment and operation of cloud security tooling across a multi-cloud enterprise, including Wiz, AWS GuardDuty, Security Hub, Inspector, and Microsoft Defender. Work covers CSPM/CWPP, IAM and KMS hardening, threat detection and incident response, and embedding security guardrails into CI/CD via Terraform. Security certifications such as CCSP and AWS Security Specialty are preferred.

Summary

This is a security-engineering role focused on container and host-based network micro-segmentation (Illumio), including hands-on implementation with application teams, maintaining security tooling, and participating in day-to-day Cyber Security Operations Center monitoring and incident response. It is a security-operations and network-segmentation specialty rather than software development. The employer states it will not sponsor work visas, so applicants must already be authorized to work in the US.

Summary

A client-facing IT audit and cybersecurity risk advisory role at a consulting and accounting firm, delivering risk, governance, internal audit, and compliance services with a HITRUST focus. The role sits within a Risk Advisory practice serving external clients rather than an internal security team. Work location arrangements are discussed per opportunity across several U.S. offices.

Summary

A cloud security architecture role defining cybersecurity policies, standards, and secure design patterns for product and enterprise architecture teams to adopt. The work spans risk analysis, security governance, incident-response gap analysis, and embedding controls such as vulnerability management, zero trust, and identity governance, primarily in an AWS environment. It is a security-specialist role rather than software development, calling for cybersecurity-focused experience and knowledge of frameworks such as ISO 27000 and NIST.

Summary

Product/application security engineer securing the software a payments company builds, explaining detected vulnerabilities to engineering teams, recommending remediation, and writing coded reference implementations for security patterns such as authentication and encryption. Uses SAST/DAST/SCA tooling and threat modeling aligned to PCI, SOC, and GDPR. Hybrid three days per week; requires US citizen or green card holder (no visa sponsorship).

Summary

This role builds AI/ML and generative AI applications aimed specifically at cybersecurity operations, covering threat detection, alert triage, vulnerability analysis, and identity analytics, and embeds secure coding and controls into the delivery pipelines. It expects hands-on software development plus integration with security tooling such as SIEM, SOAR, EDR/XDR, and IAM, along with agentic AI and LLM orchestration experience.

Summary

Network security engineering role centered on Palo Alto Networks firewall management, including Expedition and Panorama, for a fintech payments company. It involves implementing and improving the firewall security program with deep knowledge of network routing and security protocols such as TCP/IP, SSL, TLS, and IPSEC VPN, plus IDPS, NAC, and ISE. Requires the ability to travel to Atlanta-area data centers.

Summary

A senior security-operations role at health insurer Elevance Health, leading a SOC analyst shift: serving as the escalation point during security-event investigations and incident response, mentoring junior analysts, and maintaining SOC playbooks and on-call coverage. The work also spans implementing and configuring network-security systems and coordinating security vendors. Hybrid with 1-2 in-office days per week and a stated preference for the Indianapolis office.

Summary

Data security engineering role implementing and supporting authentication protocols (SAML, PingID) alongside data loss prevention and endpoint and threat-detection tooling such as CrowdStrike, Tanium, and CyberArk, plus access management and incident response. Certifications like CISSP, CISM, and CISA are referenced; multiple US locations.

Summary

A cybersecurity engineer role designing and implementing security capabilities across the software development lifecycle — threat modeling, security testing, and penetration testing — plus configuring security technologies in production, leading incident response and basic forensics for in-scope services, and mentoring other security engineers. Requires a bachelor's degree or equivalent experience.

Summary

This is a cybersecurity architecture and advisory role reporting to the bank's Cybersecurity Architect Senior Manager, split roughly 40% security architecture, 50% technical leadership, and 10% research and development, designing security solutions for third-party/vendor relationships and setting security direction alongside product and solution architects. It requires 2+ years of cybersecurity architecture experience plus 6+ years each of information-security and technology-delivery experience.

Summary

Despite the resilience-focused title, this is an information security senior advisor role covering network security, access control, and secure messaging alongside business continuity, crisis management, and third-party risk management (TPRM). It develops security policies, standards, and incident and crisis response plans and can serve as technical lead on mergers and acquisitions; the position is hybrid with 1-2 in-office days per week.

Summary

This is a hands-on security engineering role implementing, monitoring, and maintaining security controls, responding to alerts and vulnerabilities, and supporting incident investigations and audit evidence-gathering for ACI Worldwide's systems and networks. It requires 2-4 years of security engineering/operations experience, includes an on-call rotation for security incidents, and values familiarity with SIEM, cloud security (AWS/Azure), and AI-driven security tooling; certifications are preferred but not required.

Summary

This is a cybersecurity governance, risk, and compliance (GRC) role, not a hands-on security engineering job -- it centers on maintaining security policies, running third-party vendor security risk assessments, and coordinating evidence collection for SOC 2, PCI, and CIS audits and certifications. The analyst also helps administer the company's security awareness training program and acts as a liaison between Security, Legal, Engineering, and external auditors.

Summary

A senior offensive-security role leading threat-emulation and adversarial-simulation exercises across enterprise networks, applications, cloud, and physical-security domains. Develops custom tools, payloads, and exploits, leads purple-team engagements, and mentors junior operators; expertise with C2 frameworks (Cobalt Strike, Metasploit, Mythic, Sliver) and EDR/XDR evasion expected.

Summary

A broad senior security analyst role for a retailer, split across security monitoring and day-to-day operations, vulnerability and risk management, incident response and digital forensics (including malware analysis), threat hunting, and security engineering/architecture. It involves on-call duties during off-hours and holidays and travel between offices, warehouses, data centers, and vendor sites. Requires 2+ years of IT, IT audit, networking, or network-security experience and a bachelor's degree.

Summary

A senior enterprise security-architecture leadership role defining and evolving the organization-wide security architecture and aligning security strategy with business priorities, in partnership with a global security team. It demands deep expertise in enterprise-architecture and security frameworks (TOGAF, NIST, ISO, SABSA, Zero Trust), cloud security, IAM, and risk/compliance, plus 10+ years including 5+ in cybersecurity architecture. Hybrid schedule in Charlotte/Atlanta/Phoenix, with the first 90 days required fully onsite.

Summary

Identity-security engineering role centered on Privileged Access Management despite the generic Information Security Engineer title - owning CyberArk components end-to-end (onboarding, credential rotation, and privileged session controls) for both human and non-human identities, and partnering with IAM, infrastructure, and application teams. Also applies secure-by-design principles to protecting secrets and API keys used by automation.

Summary

Leading offensive security operations against a major bank's AI/ML systems — adversarial testing of LLMs and model pipelines (prompt injection, data poisoning, model inversion, jailbreaks) alongside traditional red teaming, plus building custom tooling and mentoring red team engineers. A senior technical-authority role requiring 8+ years of relevant experience.

Summary

A management role over identity and access management at a regional bank, leading a mixed team of engineers, analysts, and administrators who implement IAM practices across the enterprise and keep operations running. The stated toolset leans toward privileged access and secrets management with CyberArk and HashiCorp Vault, alongside DevSecOps work such as CI/CD pipelines and infrastructure as code.

Summary

Security engineering role at a payments company centered on assessing, implementing and supporting network and cloud security technologies. The posting names firewalls and next-generation firewalls, cloud-based proxy solutions, IDS/IPS, DNS security and DDoS protection, with associated skills spanning cloud and application security across AWS and GCP, security assessments, infrastructure-as-code and threat detection.

Summary

Level 2 operational support for enterprise IAM platforms (SailPoint, Saviynt, Okta, Ping, Entra ID, and similar) — troubleshooting authentication, SSO, and provisioning incidents, supporting identity lifecycle processes and access reviews, and assisting with upgrades and patching. Requires US citizenship with the ability to obtain a government security clearance, English/Spanish fluency, and willingness to work shift rotations including evenings and weekends.

Summary

Split pre-sales and delivery security architect at an IT services firm — roughly half discovery, proposals, and RFPs, half hands-on design and deployment of Microsoft security tooling (Entra ID, Sentinel) and enterprise EDR, with CrowdStrike Falcon strongly preferred. Requires being in or regularly commuting to the Atlanta metro and about 25% travel.

Summary

Security engineering for foundational Microsoft identity infrastructure at a bank — designing and operating Active Directory Domain Services, ADFS, certificate services, DNS/DHCP, Entra Connect, MIM, and related services, plus Cisco ISE and the Symantec and Quest product suites. Office-centric five days a week (Atlanta, Charlotte, Raleigh, or Wilson, NC) with no visa sponsorship or immigration support. For an infrastructure-identity engineer rather than an application security specialist.

Summary

Principal cybersecurity advisor (AI security) role at Optiv, operating as a client-facing, quota-carrying pre-sales advisor within a Center of Excellence: designing AI-focused security solutions, identifying AI security concerns, driving services pipeline and cross-sell, and advising client executives on AI security strategy and roadmaps. Fully remote within the continental US.

Summary

Hands-on cloud security engineering across four major clouds — Google Cloud, Azure, AWS, and Oracle Cloud — building security tooling and controls from scratch with real coding, managing the company's cloud-native application protection platform (CNAPP), and remediating cloud vulnerabilities for a supply-chain commerce software vendor.

Summary

A hands-on application-security leadership role owning Carter's enterprise AppSec architecture, secure-by-default standards, and DevSecOps toolchain across web, mobile, and API surfaces. The work spans threat modeling, secure code review, SAST/DAST and manual penetration testing, CI/CD security gates, and securing AI/ML integrations against prompt injection and model supply-chain risks. Requires 5+ years in application security or secure code review with strong coding in Python, Java, JavaScript, or Go, plus PCI-DSS, NIST, and OWASP audit involvement and some travel between Carter's offices.

Summary

A security architect opening on the business enablement side at Regions in Nashville. The posting as captured carries no substantive role description beyond the title, so scope, stack, and requirements are unspecified — candidates would need the original listing for specifics.

Summary

Offensive security and red team research role identifying and exploiting weaknesses across product, cloud, and AI systems. Work blends full-scope penetration testing and red team operations with GenAI attack simulation such as prompt injection, jailbreaking, and model extraction, plus deepfake and voice-synthesis attacks against the company's voice authentication and deepfake detection. It includes building offensive-security automation in Python and partnering with blue-team and SecOps on remediation, and is a remote role.

Summary

A threat-intelligence and cyber-defense analyst role on NCR Voyix's Global Information Security team, actively threat-hunting, investigating and escalating security incidents, building detections, and leading incident-response activities including forensics. Requires participation in weekly status calls and an on-call rotation covering off-hours and weekends; based at NCR's Atlanta headquarters.

Summary

A network security engineering role designing, operating, and hardening defense-in-depth controls, including next-generation firewalls, IPS, WAF, DDoS protection, DLP, and Zero Trust Network Access, across cloud and on-prem environments, with active threat hunting and high-severity incident response. It is a hybrid role (onsite 3 days/week) and the employer states it cannot offer sponsorship.

Summary

Client-facing IT audit and cybersecurity risk advisory role at a national accounting and consulting firm, with a focus on HITRUST assessments. Work involves evaluating clients' IT and security controls and helping them meet compliance and risk-management requirements.

Summary

An Identity and Access Management engineer at Regions Bank, designing, developing and integrating IAM systems and solutions with tools like HashiCorp Vault, CyberArk and Kubernetes. It blends software engineering with security, sitting at the IAM intersection rather than general app development.

Summary

Staff-level product security engineer covering the end-to-end security of Greenlight's consumer app, digital platform, and an emerging hardware device line within a regulated financial services environment. Leads threat modeling (STRIDE, PASTA), hands-on penetration testing, and PSIRT vulnerability triage and coordinated disclosure, and is establishing security guardrails for AI-assisted development workflows and AI-powered product features. Reports to the Senior Manager of Product Security and partners with architects and executives on secure design.

Summary

A senior security operations analyst role at Warner Bros. Discovery performing hands-on SOC work: security event analysis, incident response and investigations with root-cause analysis and technical report writing, using Splunk, Microsoft Sentinel and SentinelOne across Linux and Windows, plus digital forensics, firewall and IDS/IPS, and CIRT/CSIRT investigations. It expects Python, PowerShell and Bash scripting and includes mentoring; Atlanta.

Summary

Security engineering across the software development lifecycle at a bank — threat modeling, security testing, and penetration testing, integrating and configuring security technologies in production, maintaining baselines and guardrails, and leading incident-response execution for in-scope services. The posting is framed as a general duty description without a single platform focus, and includes mentoring and leading workstreams. For a broad, senior-leaning security engineer rather than a niche specialist.

Summary

A security automation engineer role at Truist focused on identifying automation opportunities in cybersecurity incident management workflows and building solutions using scripting, APIs, orchestration tools, and Microsoft 365 platforms. The role also involves active participation in cyber incident coordination — triaging, tracking, and facilitating stakeholder communication through the incident lifecycle. Requires a minimum of 3 years in security engineering; posted in Charlotte, Raleigh-Durham, or Atlanta with hybrid expectations.

Summary

A cybersecurity controls-assurance management role, partnering across technology and operations to ensure security controls are designed, implemented, and monitored to strengthen risk management and compliance. The brief excerpt emphasizes control testing, control frameworks, and continuous or automated testing. Multiple Southeast U.S. locations.

Summary

A senior security engineering role on Truist's Proxy Team, evolving the enterprise secure access platform and modernizing internet access and traffic control capabilities. The work emphasizes consistent policy enforcement across encrypted, non-HTTP, and real-time traffic, plus automation to improve visibility and posture. This is an onsite, office-centric role 5 days a week in a Truist core location in Charlotte, Raleigh, or Atlanta.

Summary

A cybersecurity management role leading enterprise Governance, Risk & Compliance and security-assurance programs, ensuring cyber risks are identified, managed, and communicated and that regulatory and framework compliance is maintained. Responsibilities span the governance framework, risk assessments and the risk register, audit coordination, third-party and vendor security risk, and oversight of security operations (monitoring, incident response, vulnerability management) via MDR/MSSP/SOC providers. It combines strategic leadership with operational oversight across GRC and security operations.

Summary

A principal cybersecurity architecture and engineering role leading the design and implementation of enterprise security solutions across major cloud providers (AWS, Azure, GCP, OCI), including network and micro-segmentation, Zero Trust, data protection such as encryption, tokenization, and DLP, and endpoint detection and response. The role also leads incident response and digital analysis and applies frameworks such as NIST, ISO 27001/62443, CIS Controls, and MITRE ATT&CK. Remote-eligible, though the first 90 days require fully on-site work; certifications such as CISSP or CISM are valued.

Summary

A senior security engineer role on Truist's Proxy team evolving the enterprise secure-access platform, modernizing internet-access and traffic-control capabilities and enforcing consistent policy across encrypted and real-time traffic with automation. The position is onsite five days a week at a Truist core location in Charlotte, Raleigh, or Atlanta. A fit for a network/proxy security engineer who can work fully on-site.

Summary

A Senior Identity & Access Architect role at OEConnection designing enterprise IAM across on-prem, hybrid, and cloud using Active Directory, Microsoft Entra ID, and Okta, plus MFA/passwordless, federation, and RBAC/ABAC. Based in Atlanta, Austin, or Cleveland. An enterprise identity-platform architecture role.

Summary

A hands-on network security architecture role centered on Zero Trust and SASE/SSE, leading enterprise secure-access design and migration off legacy VPNs. Zscaler ZPA and ZIA experience is preferred, with Palo Alto Prisma Access or Cisco Secure Access as alternatives, and the work integrates identity providers such as Entra ID, Active Directory, MFA, and PKI. This is a contract role based in Atlanta requiring three mandatory onsite days per week, Tuesday through Thursday.

Summary

Hands-on penetration testing of Honeywell's own Industrial Automation products — application, network, firmware, and hardware security assessment, with ICS pentesting exposure valued — plus mentoring junior testers and helping automate the testing toolchain. Wants 7+ years of pentest experience (or 5+ plus 2 years of application development), and notes occasional lifting of up to 25 pounds.

Summary

A senior security engineer at GreenSky, the Atlanta point-of-sale consumer-lending technology company, working on its highly scalable payments and lending platform. The role is hybrid in Atlanta, three days in office and two remote. The posting is light on specific duties beyond the senior security-engineering scope; best for an experienced security engineer who wants fintech work in Atlanta.

Summary

A cybersecurity incident-response specialist role at Geotab, a global IoT and connected-vehicle telematics company processing billions of data points daily. The focus is hands-on incident detection and response within a large data and fleet-analytics platform; suited to IR-focused analysts and engineers.

Summary

A senior cybersecurity engineer at a bank focused specifically on internet proxy and web-filtering operations, integrating automation, application and monitoring systems. The role collaborates with the Cybersecurity Operations Center on security-automation use cases and leans on knowledge of SIEM, SOAR/orchestration, and remote browser isolation or enterprise browsers. It requires 3+ years in proxy/filtering tools, is office-based, does not sponsor visas, and lists a range of 57K to 113K.

Summary

A management role at Regions leading the development and implementation of enterprise and cyber-security architecture plans grounded in business requirements and technology strategy, drawing on broad experience across technical, security, and solution architecture. A security-architecture leadership role at a US bank (Hoover, AL).

Summary

Management-level architecture role at a regional bank spanning enterprise architecture and cyber security architecture. The stated bar is eight years of experience across two or more technology disciplines in a heterogeneous environment, such as technical architecture, security architecture, solution architecture or network management. Named focus areas include DevSecOps, virtualization and IT security architecture.

Summary

Active Directory infrastructure ownership with a security and governance emphasis: forests, domains, trusts, organizational units, group policy, and domain controller health, plus hardening, patching, and remediation across complex AD estates. Identity lifecycle work is explicitly part of the job, provisioning and deactivating accounts through integrated IAM workflows and building role and group structures that follow least-privilege principles alongside IAM and PAM teams. The position is framed as a senior day-to-day operations and thought leadership resource, not solely project delivery, at a services firm working across client environments.

Summary

Leads a combined team of security analysts and security engineers at a revenue-intelligence software company, covering both the operations side that defends the environment and the engineering side that builds the security stack of SIEM, CNAPP, SWG, EDR and vulnerability scanners. The role oversees the vulnerability management lifecycle end to end, serves as the escalation point for incidents, and is expected to push the team from manual triage toward automated detection and response. It also carries executive visibility, translating engineering projects and operational risk into business context for the CISO and leadership.

Summary

A mid-to-senior cybersecurity risk analyst role at Deluxe (a fintech/payments company) focused on cyber resiliency — leading tabletop exercises, conducting IT risk assessments, maintaining the cyber risk management program documentation, and producing risk reporting for a regulated business. The posted compensation range is $120,000-$130,000 annually; 5-8+ years of risk management experience required.

Summary

Identity and access management engineering role implementing and maintaining Ping Identity solutions for SSO, MFA, and adaptive authentication, and orchestrating low-code identity workflows with PingOne DaVinci. Work includes building authentication policies, supporting Joiner-Mover-Leaver processes, migrating legacy apps to OIDC, OAuth 2.0, SAML, and SCIM, and scripting operational automation. Combines software engineering with identity-security specialization on the Ping platform.

Summary

A security governance-risk-compliance (GRC) role on ICE's global Information Security program — producing security metrics and reporting, running assessment/attestation, and owning vulnerability-management workflows. This is security GRC rather than software development. Atlanta, GA.

Summary

An information-security architect role specializing in AI risk management, focused on securing enterprise adoption of generative AI at Wolters Kluwer. The work involves assessing GenAI implementations, designing security controls, applying AI risk frameworks such as NIST AI RMF and ISO/IEC 42001, and threat modeling with the OWASP LLM Top 10. It expects a security certification such as CISSP, CISA, or CISM, plus hands-on familiarity with platforms like Azure OpenAI, AWS Bedrock, and Vertex AI.

Summary

A hands-on senior security analyst and application-security specialist role at PowerPlan strengthening the security posture of its cloud-hosted SaaS: maturing vulnerability management by consolidating SAST, DAST, SCA and pen-test findings (e.g., DefectDojo), running security operations with CrowdStrike Falcon, Qualys and Rapid7, hardening CI/CD pipelines, and securing AWS and/or Azure, aligned to NIST CSF 2.0. It is embedded with DevOps and product teams; Atlanta.

Summary

A senior identity-systems analyst role shaping Chick-fil-A's provisioning and lifecycle-management program. The work owns roadmap, requirements, technical execution, vendor coordination, troubleshooting and monitoring across identity platforms, with SailPoint, Python/XML scripting and IAM process expertise called out.

Summary

A senior product-security architecture role at Dematic reporting to the VP of Global Product Security, setting the technical security strategy across the company's software and operational-technology products. The focus is architectural guidance and vision for building and operating secure products, partnering with product development, engineering, sales and support teams rather than hands-on implementation.

Summary

Governance, risk, and compliance work rather than hands-on security operations - coordinating enterprise-wide risk assessment and remediation, authoring information security policy and standards, running security awareness and training programs, and managing network, operating system, database, and application compliance assessments and configuration audits. The research focus is the distinguishing detail: the analyst supports compliance monitoring of secure research environments and projects involving Controlled Unclassified Information and participates in research cybersecurity and export control reviews. Emory positions this as an experienced independent contributor who guides other team members and stands in for department leadership.

Summary

An IAM and SSO engineering role in Emory OIT focused on secure application access. The work is onboarding and offboarding applications into Entra ID and Shibboleth, maintaining CMDB and application catalog records, using ServiceNow workflows, and supporting federated identity integrations.

Summary

A senior cyber-defense engineering role in Emory University's central IT, spanning incident response, vulnerability management, intrusion detection and prevention, threat intelligence, and security operations across cloud and on-prem environments. It is a hands-on blue-team seat investigating incidents and analyzing security telemetry in a higher-education setting.

Summary

Information Security Risk Management Senior Analyst role conducting qualitative and FAIR-based cyber risk quantification assessments across enterprise applications, cloud platforms, infrastructure and manufacturing technologies. Facilitates structured risk workshops, develops executive-ready risk recommendations, and supports the enterprise Crown Jewels risk program, acting as an advisor to business and technology leaders on emerging risks such as AI adoption.

Summary

A senior-director role leading enterprise cybersecurity governance, risk, and compliance at Infor, a global cloud, AI, and enterprise-SaaS company, setting GRC strategy across a multi-cloud product portfolio and navigating global regulation spanning data privacy, AI governance, and cloud sovereignty. It is an executive GRC-leadership seat directing risk, compliance, audit, policy, and third-party risk teams.

Summary

This is an ITIL-style incident and problem management role more than a hands-on security analyst seat: facilitating security incidents to resolution, scoping and documenting them, managing escalations, creating problem records, and driving root cause and no-repeat plans to completion. Preferred background is incident, problem, or change management with ITIL v4 Foundation plus a base working knowledge of IT systems, and two or more years of leadership experience. The position is remote with no travel and no direct reports.