Senior Cybersecurity Specialist

Equifax, Inc.; Alpharetta (GA); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Equifax, Inc. is seeking a Senior Cybersecurity Specialist (Finance) to join our security team in Alpharetta, GA. This senior individual contributor will support CTI, SOC, network security and proactive security while enhancing operations and intelligence generation.

Expect a 4-day in-office schedule (Mon-Thu) with Friday flexibility for remote work, and in-person interviews. You’ll lead threat intelligence enhancement, triage during incidents, and contribute to red team engagements and

Qualifications

• 5+ years of cybersecurity experience across CTI, SOC, network security or proactive security.
• Comfort with high autonomy and shifting priorities.
• Strong knowledge of SIEM, EDR and network monitoring tools.
• Familiarity with MITRE ATT&CK framework and vulnerability management.

Responsibilities

• Enhance security operations, CTI, network security and proactive security workflows; refine processes, tooling and automation.
• Elevate threat intelligence delivery for faster, actionable insights to teams.
• Support SOC operations surge triage, investigation and root-cause analysis.
• Assist in network architecture reviews and segmentation assessments during audits.
• Contribute to red team engagements, application security testing and TVM surges.

Skills

Cybersecurity expertise

AI/ML tooling familiarity

Communication skills

Adaptability

Tools

SIEM

EDR

Network monitoring tools

Job description

Senior Cybersecurity Specialist (Finance)

We're looking for an experienced, senior individual contributor to join our security team, reporting directly to the Deputy CISO. The person in this seat supports our Cyber Threat Intelligence (CTI), Security Operations Center (SOC), network security, and proactive security functions. We need a true utility player: a versatile cybersecurity professional, ready to support any area which requires immediate assistance on any given day, while spending most of their time enhancing how we operate and how we generate intelligence.

• This position is based out of our Alpharetta, Georgia office.
• We believe great things happen when teams connect. Our schedule is built around 4 days of high-impact, in-office collaboration (Monday-Thursday), paired with Friday Flexibility to wrap up your week remotely.
• This position does not offer immigration sponsorship (current or future) including F-1 STEM OPT extension support.
• This position is not open to third-party vendors or C2C.
• In person interviews are required.

What you'll do

• Enhance how we operate (primary focus):
  You'll learn and enhance our SOC, CTI, network security, and proactive security workflows and make them sharper, refining process, tooling, and automation so the whole program runs faster and cleaner. You'll give the Security Operations Program an independent, cross-functional view of how the program is performing and where it's headed next.
• Sharpen our threat intelligence:
  You'll elevate how we produce, enrich, and deliver threat intelligence, so it's faster and more actionable for the teams that depend on it. That means analyzing threat actor tactics, techniques, and procedures, tracking indicators of compromise, and strengthening how intelligence flows through the organization.
• Surge into SOC operations when we need you:
  When volume spikes or a major incident hits, you'll jump into triage, investigation, and response, and support root cause analysis afterward.
• Surge into network security when we need you:
  You'll support network architecture reviews, segmentation assessments, and investigations into anomalous activity during crunches or audits.
• Surge into proactive security when we need you:
  You'll contribute to red team engagements, perform application security testing, and support threat and vulnerability management (TVM) surges; scanning, prioritization, and remediation tracking.
• Bring AI into how we work:
  We want someone genuinely excited about AI-powered tools, not just aware of them. You'll pilot agentic tools that reduce manual workload, build AI-assisted playbooks for triage and reporting, and bring the Security Operations Leaders a clear point of view on where AI can move the whole program forward.

What experience you need

• 5+ or more years of cybersecurity experience, with real depth in at least three of the following: CTI, SOC operations, network security, or proactive security (red team, application testing, TVM).
• Comfort with high autonomy and shifting priorities, you can move between strategic improvement work and hands-on execution without losing momentum.
• Strong working knowledge of SIEM, EDR, and network monitoring tools.
• Deep familiarity with the MITRE ATT&CK framework and vulnerability management practices.
• Hands-on experience with AI and large language model (LLM)-based tools, and a clear point of view on applying them operationally.
• Excellent written and verbal communication, you'll brief the Security Operations leadership directly and often.

What could set you apart

• CISSP, GCTI, GCIH, OSCP, CEH, or an equivalent certification.
• Scripting or automation experience (Python, PowerShell, or similar).
• Cloud security experience across AWS, Azure, or GCP.
• Prior experience in a roaming or cross-functional senior security role - a fusion analyst, security operations improvement lead, or similar.