Cybersecurity Engineer III-V

Gasoc; Tucker (GA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k) Match

Parental Leave

Educational Assistance

Annual Performance Bonus

Paid Time Off

Volunteer Time Off

Job summary

Georgia System Operations Corporation (GSOC) seeks a Cybersecurity Engineer to lead advanced engineering, security monitoring, vulnerability management, and incident response across mission critical environments.

You will mentor staff, partner with infrastructure and cloud teams, and drive risk reduction with hands-on, practical security improvements.

Qualifications

• Bachelor’s degree or equivalent in cybersecurity, CS, engineering, or IT.
• 8+ years of experience in cyber or information security; 12+ years considered.
• Expert-level knowledge of cybersecurity architecture and enterprise tech.
• Strong cross-platform security event understanding across OS and appliances.
• Excellent written and verbal communication for technical and non-technical stakeholders.
• Ability to lead implementations, collaborate with diverse teams, and resolve issues.
• Customer service mindset with adaptability to evolving tech and compliance.

Responsibilities

• Lead cybersecurity engineering, threat detection, vulnerability management, and incident response efforts.
• Implement and optimize SIEM, EDR, monitoring platforms, and security controls.
• Develop detection rules, dashboards, and threat intel integrations.
• Conduct threat hunting and investigate indicators of compromise.
• Oversee vulnerability scanning, remediation prioritization, and risk reporting.
• Design secure baselines, hardening standards, and automation across enterprise.
• Maintain cloud security controls in Azure and other environments.
• Guide endpoint security initiatives and least-privilege enforcement.
• Review new technologies for security requirements and compliance alignment.
• Develop cybersecurity documentation, policies, standards, and baselines.
• Collaborate with MSSPs, SOCs, vendors, and professional services.

Skills

Security architecture

Security engineering

Threat hunting

Incident response

Vulnerability management

Cloud security

Endpoint protection

Containerized/virtualized environments

Security operations

Documentation & communication

Education

Bachelor’s degree in Cybersecurity, Computer Science, Engineering, IT

Tools

SIEM

EDR

Kubernetes

Docker

Job description

Lead Security Engineering for Mission-Critical Technology Environments

Georgia System Operations Corporation (GSOC) is seeking a Cybersecurity Engineer to lead advanced cybersecurity engineering, security monitoring, vulnerability management, incident response, and continuous improvement initiatives that strengthen the organization's security posture.

This role serves as a senior technical resource across cybersecurity disciplines, supporting secure technology operations for GSOC Shared Services and the broader Family of Companies. You will help evaluate, implement, optimize, and manage cybersecurity platforms, security controls, and manage security services across enterprise environments.

This opportunity is ideal for an experienced cybersecurity professional who enjoys leading complex security engineering initiatives, mentoring technical team members, partnering across infrastructure and application teams, and driving practical risk reduction in a mission‑critical environment.

Successful candidates will bring expert‑level cybersecurity knowledge, strong technical leadership, and hands‑on experience across security operations, vulnerability management, threat intelligence, cloud security, endpoint protection, containerized or virtualized environments, and enterprise security architecture.

What You’ll Do

As a Cybersecurity Engineer, you will play a key role in leading cybersecurity engineering, threat detection, vulnerability management, incident response, and enterprise security improvement efforts.

You will:

• Serve as a technical subject matter expert across cybersecurity disciplines for internal teams, vendors, external stakeholders, and partners across the Family of Companies.
• Lead implementation, administration, and optimization of SIEM, EDR, security monitoring, and other cybersecurity platforms.
• Develop and maintain detection rules, alerting logic, dashboards, threat intelligence integrations, and security monitoring content.
• Conduct threat hunting, analyze indicators of compromise, and support proactive identification of security risks.
• Lead cybersecurity incident investigation, coordination, response, root‑cause analysis, corrective action, and incident response playbook development.
• Manage vulnerability scanning, assessment, remediation prioritization, validation testing, metrics, and risk reduction reporting.
• Design, implement, and maintain enterprise security technologies, controls, secure configuration baselines, hardening standards, and security automation.
• Implement and maintain security controls within Azure and other cloud environments, including cloud monitoring, governance, detection, and architecture review support.
• Lead endpoint and infrastructure security activities, including endpoint security administration, least‑privilege initiatives, endpoint hardening, and collaboration with Infrastructure and EUC teams.
• Review new technologies and projects for security requirements and help ensure controls align with business, regulatory, and industry requirements.
• Develop and maintain cybersecurity documentation, including policies, procedures, standards, guidelines, technical baselines, and program documentation.
• Lead implementation and management of enterprise data security capabilities, including data classification, protection policies, monitoring, reporting, and incident response.
• Engineer and maintain secure containerized and virtualized environments through security controls, hardening standards, and aligned monitoring practices.
• Partner with MSSPs, third‑party SOCs, consultants, professional services organizations, vendors, and value‑added resellers to evaluate, implement, optimize, and manage cybersecurity services and platforms.

At this senior level, this role also:

• Mentors cybersecurity professionals and serves as a senior technical resource for the cybersecurity team.
• Provides technical guidance to Infrastructure, EUC, application, cloud, and cross‑functional project teams.
• Assists cybersecurity leadership with strategic planning, security roadmap development, and program maturity efforts.
• Leverages blue team, red team, or purple team experience to support penetration testing, adversary emulation, threat hunting, and control validation activities.
• Stays current with security trends, technologies, regulatory requirements, and industry best practices.

What You Bring

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or a related field. Equivalent combination of education, training, and directly related work experience may be considered.
• Ideally 8+ years of experience in cyber or information security; twelve or more years of relevant experience may also be considered.
• Expert‑level knowledge of cybersecurity architecture, security engineering principles, enterprise technologies, and industry best practices.
• Strong technical skills and understanding of security events across multiple operating system and appliance platforms.
• Strong analytical, troubleshooting, problem‑solving, and documentation skills.
• Excellent written and verbal communication skills, including the ability to clearly explain technical issues to both technical and non‑technical stakeholders.
• Ability to lead implementation of processes, collaborate with diverse stakeholders, and resolve issues in a practical and professional manner.
• Strong customer service mindset and ability to adapt quickly to evolving technologies, processes, and compliance standards.

Preferred Qualifications

Security Operations & Threat Detection

• Expertise with security monitoring and analysis tools, including SIEM and IDS/IPS platforms.
• Experience developing detection use cases, threat hunting methodologies, and security monitoring content aligned with industry frameworks such as MITRE ATT&CK.
• Experience leading cybersecurity incident investigations and coordinating enterprise incident response activities.

Security Engineering & Architecture

• Experience designing, implementing, and maintaining enterprise security controls across network, endpoint, identity, cloud, and application environments.
• Experience evaluating, implementing, and integrating cybersecurity technologies into existing enterprise environments.
• Experience developing cybersecurity policies, standards, procedures, architecture principles, and technical security baselines.
• Experience supporting Zero Trust architecture initiatives is a plus.
• Expertise with vulnerability scanning platforms and vulnerability remediation guidance.
• Experience implementing and administering enterprise data security technologies, including data classification, data loss prevention, encryption, and data governance solutions.
• Experience securing cloud environments such as AWS, Azure, or Google Cloud Platform, including cloud‑native security controls and architectures.
• Experience securing containerized and virtualized environments such as Kubernetes, Docker, VMware, or similar platforms.
• Demonstrated experience leading, mentoring, and developing cybersecurity professionals.
• Experience leading cross‑functional projects involving infrastructure, networking, cloud, and application teams.
• Experience managing relationships with MSSPs, third‑party SOCs, consultants, professional services organizations, and technology vendors.

Frameworks & Certifications

• Working knowledge of cybersecurity frameworks and regulatory standards such as NIST CSF, NIST 800‑53, CIS Controls, and ISO 27001.
• CISSP or GIAC certification is preferred.
• CySA+ , CCSP, CISM, GCIH, or OSCP certifications are a plus.

Leveling Overview

• Cybersecurity Engineer V – Senior technical expert responsible for leading cybersecurity engineering, security operations, vulnerability management, threat intelligence, incident response, cloud security, data security, and enterprise security architecture initiatives.
• This role serves as a senior technical resource and mentor while supporting strategy, roadmap development, security program maturity, and cross‑functional risk reduction across mission‑critical technology environments.

Additional Role Expectations

• Occasional evening and weekend work may be required to support operations and security event response.
• This role may support customers, incident response processes, and systems after hours as needed.
• The role is primarily office‑based.

Benefits

Benefits include, but are not limited to: Medical, Dental, Vision, 401(k) Match, Parental Leave, Educational Assistance, Annual Performance Bonus, Paid Time Off, and Volunteer Time Off.

Advantages of Working at GSOC

Working at GSOC means more than just a job-- it's an opportunity to contribute to work that truly matters.

Mission-Driven Impact

Your work directly supports the security posture of technology systems that enable reliable business and operational support across GSOC and the broader Family of Companies.

Cybersecurity Leadership & Innovation

Lead high‑impact security engineering, threat detection, vulnerability management, cloud security, and security architecture work in a collaborative, mission‑focused environment.

Strong Values and Professional Standards

Work in an environment grounded in accountability, collaboration, integrity, and continuous improvement where security, compliance, and operational excellence are core priorities.

Why Join GSOC

At GSOC, you'll help lead cybersecurity engineering and security operations work that protects mission‑critical technology environments and strengthens enterprise resilience.

GSOC Commitment

GSOC offers a professional, collaborative work environment with competitive compensation, comprehensive benefits, and a commitment to creating a respectful and inclusive workplace.