Cybersecurity Incident Response & Threat Hunting Engineer

CFS; Atlanta (GA); On-site; USD 125,000 - 135,000; Full time

Job summary

CFS in Atlanta, GA seeks an experienced Information Security Engineer to join a collaborative security operations team. You will protect enterprise systems, investigate threats, and continuously improve monitoring capabilities.

The role blends hands-on security operations, threat detection, incident response, vulnerability management, and platform administration, with cross-functional collaboration across technical and non-technical teams.

Qualifications

• 3+ years in information security or related roles.
• Hands-on security monitoring and incident response.
• Experience administering SIEM/EDR/XDR and vulnerability tools.
• Knowledge of Microsoft Defender and Microsoft Sentinel.
• Threat hunting and incident investigation experience.
• Strong networking, OS, and infra understanding.
• Excellent documentation and reporting skills.
• Ability to manage multiple priorities in fast-paced environments.

Responsibilities

• Investigate and triage security alerts and IOCs.
• Perform threat hunting to identify risks.
• Respond to incidents with containment and remediation.
• Review security events for trends and improvements.
• Administer and optimize security technologies.
• Onboard data sources into monitoring platforms.
• Prepare security documentation and reports.
• Collaborate with IT and engineering teams on security initiatives.

Skills

Security monitoring

Incident response

Threat hunting

Documentation

Cross-functional collaboration

Communication skills

Multi-priority management

Tools

Microsoft Defender

Microsoft Sentinel

EDR/XDR platforms

Vulnerability management tools

Email security solutions

Firewall & network security

Job description

CFS in Atlanta, GA seeks an experienced Information Security Engineer to join a collaborative security operations team. You will protect enterprise systems, investigate threats, and continuously improve monitoring capabilities.

The role blends hands-on security operations, threat detection, incident response, vulnerability management, and platform administration, with cross-functional collaboration across technical and non-technical teams.