Cybersecurity Engineer III-V

Georgia System Operations Corporation; Tucker (GA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) Match

Parental Leave

Educational Assistance

Annual Performance Bonus

Paid Time Off

Volunteer Time Off

Job summary

Georgia System Operations Corporation (GSOC) is seeking a Senior Cybersecurity Engineer to lead advanced security engineering, monitoring, vulnerability management, and incident response across enterprise environments. You will act as a senior technical resource, mentoring staff, coordinating with infrastructure and application teams, and driving risk reduction through practical security controls and blue team activities.

This role is primarily office-based in Tucker, GA.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related field.
• Ideally 8+ years of experience in cyber or information security; twelve or more years may be considered.
• Expert‑level knowledge of cybersecurity architecture, security engineering principles, enterprise technologies, and industry best practices.
• Strong analytical, troubleshooting, problem‑solving, and documentation skills.
• Excellent written and verbal communication skills for technical and non‑technical stakeholders.

Responsibilities

• Lead cybersecurity engineering, threat detection, vulnerability management, incident response, and enterprise security improvement efforts.
• Serve as a technical SME across cybersecurity disciplines for internal teams, vendors, and partners.
• Lead implementation, administration, and optimization of SIEM, EDR, security monitoring, and other platforms.
• Develop and maintain detection rules, alerting logic, dashboards, and threat intelligence integrations.
• Conduct threat hunting, analyze indicators of compromise, and support risk reduction.
• Lead incident investigations, coordination, root‑cause analysis, and action planning.
• Manage vulnerability scanning, remediation prioritization, validation testing, metrics, and risk reporting.
• Design, implement, and maintain enterprise security controls and blue team hardening.
• Implement and maintain security controls in Azure and cloud environments.
• Lead endpoint security activities and collaboration with Infrastructure/EUC teams.
• Review new technologies for security requirements and alignment with regulations.
• Develop and maintain cybersecurity documentation and program materials.

Skills

Cybersecurity architecture

Security engineering

Threat detection

Incident response

Leadership

Communication

Risk assessment

Education

Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related field

Tools

SIEM

EDR

Kubernetes

Docker

VMware

Cloud security platforms

Job description

Lead Security Engineering for Mission-Critical Technology Environments

Georgia System Operations Corporation (GSOC) is seeking a Cybersecurity Engineer to lead advanced cybersecurity engineering, security monitoring, vulnerability management, incident response, and continuous improvement initiatives that strengthen the organization's security posture.

This role serves as a senior technical resource across cybersecurity disciplines, supporting secure technology operations for GSOC Shared Services and the broader Family of Companies. You will help evaluate, implement, optimize, and manage cybersecurity platforms, security controls, and manage security services across enterprise environments.

This opportunity is ideal for an experienced cybersecurity professional who enjoys leading complex security engineering initiatives, mentoring technical team members, partnering across infrastructure and application teams, and driving practical risk reduction in a mission-critical environment.

Successful candidates will bring expert-level cybersecurity knowledge, strong technical leadership, and hands‑on experience across security operations, vulnerability management, threat intelligence, cloud security, endpoint protection, containerized or virtualized environments, and enterprise security architecture.

What You’ll Do

As a Cybersecurity Engineer, you will play a key role in leading cybersecurity engineering, threat detection, vulnerability management, incident response, and enterprise security improvement efforts.

You will:

• Serve as a technical subject matter expert across cybersecurity disciplines for internal teams, vendors, external stakeholders, and partners across the Family of Companies.
• Lead implementation, administration, and optimization of SIEM, EDR, security monitoring, and other cybersecurity platforms.
• Develop and maintain detection rules, alerting logic, dashboards, threat intelligence integrations, and security monitoring content.
• Conduct threat hunting, analyze indicators of compromise, and support proactive identification of security risks.
• Lead cybersecurity incident investigation, coordination, response, root‑cause analysis, corrective action, and incident response playbook development.
• Manage vulnerability scanning, assessment, remediation prioritization, validation testing, metrics, and risk reduction reporting.
• Design, implement, and maintain enterprise security technologies, controls, secure configuration baselines, hardening standards, and security automation.
• Implement and maintain security controls within Azure and other cloud environments, including cloud monitoring, governance, detection, and architecture review support.
• Lead endpoint and infrastructure security activities, including endpoint security administration, least‑privilege initiatives, endpoint hardening, and collaboration with Infrastructure and EUC teams.
• Review new technologies and projects for security requirements and help ensure controls align with business, regulatory, and industry requirements.
• Develop and maintain cybersecurity documentation, including policies, procedures, standards, guidelines, technical baselines, and program documentation.
• Lead implementation and management of enterprise data security capabilities, including data classification, protection policies, monitoring, reporting, and incident response.
• Engineer and maintain secure containerized and virtualized environments through security controls, hardening standards, and aligned monitoring practices.
• Partner with MSSPs, third‑party SOCs, consultants, professional services organizations, vendors, and value‑added resellers to evaluate, implement, optimize, and manage cybersecurity services and platforms.

At this senior level, this role also:

• Mentors cybersecurity professionals and serves as a senior technical resource for the cybersecurity team.
• Provides technical guidance to Infrastructure, EUC, application, cloud, and cross‑functional project teams.
• Assists cybersecurity leadership with strategic planning, security roadmap development, and program maturity efforts.
• Leverages blue team, red team, or purple team experience to support penetration testing, adversary emulation, threat hunting, and control validation activities.
• Stays current with security trends, technologies, regulatory requirements, and industry best practices.

What You Bring

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Technology, or a related field. Equivalent combination of education, training, and directly related work experience may be considered.
• Ideally 8+ years of experience in cyber or information security; twelve or more years of relevant experience may also be considered.
• Expert‑level knowledge of cybersecurity architecture, security engineering principles, enterprise technologies, and industry best practices.
• Strong technical skills and understanding of security events across multiple operating system and appliance platforms.
• Strong analytical, troubleshooting, problem‑solving, and documentation skills.
• Excellent written and verbal communication skills, including the ability to clearly explain technical issues to both technical and non‑technical stakeholders.
• Ability to lead implementation of processes, collaborate with diverse stakeholders, and resolve issues in a practical and professional manner.
• Strong customer service mindset and ability to adapt quickly to evolving technologies, processes, and compliance standards.

Preferred Qualifications

Security Operations & Threat Detection

• Expertise with security monitoring and analysis tools, including SIEM and IDS/IPS platforms.
• Experience developing detection use cases, threat hunting methodologies, and security monitoring content aligned with industry frameworks such as MITRE ATT&CK.
• Experience leading cybersecurity incident investigations and coordinating enterprise incident response activities.

Security Engineering & Architecture

• Experience designing, implementing, and maintaining enterprise security controls across network, endpoint, identity, cloud, and application environments.
• Experience evaluating, implementing, and integrating cybersecurity technologies into existing enterprise environments.
• Experience developing cybersecurity policies, standards, procedures, architecture principles, and technical security baselines.
• Experience supporting Zero Trust architecture initiatives is a plus.
• Expertise with vulnerability scanning platforms and vulnerability remediation guidance.
• Experience implementing and administering enterprise data security technologies, including data classification, data loss prevention, encryption, and data governance solutions.
• Experience securing cloud environments such as AWS, Azure, or Google Cloud Platform, including cloud‑native security controls and architectures.
• Experience securing containerized and virtualized environments such as Kubernetes, Docker, VMware, or similar platforms.
• Demonstrated experience leading, mentoring, and developing cybersecurity professionals.
• Experience leading cross‑functional projects involving infrastructure, networking, cloud, and application teams.
• Experience managing relationships with MSSPs, third‑party SOCs, consultants, professional services organizations, and technology vendors.

Frameworks & Certifications

• Working knowledge of cybersecurity frameworks and regulatory standards such as NIST CSF, NIST 800‑53, CIS Controls, and ISO 27001.
• CISSP or GIAC certification is preferred.
• CySA+, CCSP, CISM, GCIH, or OSCP certifications are a plus.

Leveling Overview

• Cybersecurity Engineer V - Senior technical expert responsible for leading cybersecurity engineering, security operations, vulnerability management, threat intelligence, incident response, cloud security, data security, and enterprise security architecture initiatives.
• This role serves as a senior technical resource and mentor while supporting strategy, roadmap development, security program maturity, and cross‑functional risk reduction across mission‑critical technology environments.

Additional Role Expectations

• Occasional evening and weekend work may be required to support operations and security event response.
• This role may support customers, incident response processes, and systems after hours as needed.
• The role is primarily office‑based.

Advantages of Working at GSOC

Working at GSOC means more than just a job--it's an opportunity to contribute to work that truly matters.

Mission‑Driven Impact

Your work directly supports the security posture of technology systems that enable reliable business and operational support across GSOC and the broader Family of Companies.

Cybersecurity Leadership & Innovation

Lead high‑impact security engineering, threat detection, vulnerability management, cloud security, and security architecture work in a collaborative, mission‑focused environment.

Strong Values and Professional Standards

Work in an environment grounded in accountability, collaboration, integrity, and continuous improvement where security, compliance, and operational excellence are core priorities.

GSOC offers a professional, collaborative work environment with competitive compensation, comprehensive benefits, and a commitment to creating a respectful and inclusive workplace.

• Benefits include, but are not limited to: Medical, Dental, Vision, 401(k) Match, Parental Leave, Educational Assistance, Annual Performance Bonus, Paid Time Off, and Volunteer Time Off.

Why Join GSOC

At GSOC, you'll help lead cybersecurity engineering and security operations work that protects mission‑critical technology environments and strengthens enterprise resilience.

You'll collaborate with experienced cybersecurity, infrastructure, cloud, application, and business professionals in an environment focused on security, reliability, compliance, and continuous improvement.