Senior Cybersecurity Specialist

Equifax Inc.; Alpharetta, Northern (GA, KY); Hybrid; USD 140,000 - 210,000; Full time

Job summary

Equifax Inc. seeks an experienced senior cybersecurity professional to join the security team in Alpharetta, GA. The role supports CTI, SOC, network security, and proactive security functions, with a focus on improving operations and intelligence generation.

Reporting to the Deputy CISO, you will act as a versatile utility player, surge into SOC, network, and proactive security as needed, and explore AI-powered tools to streamline playbooks and triage. In-person interviews are required.

Qualifications

• 5+ years of cybersecurity experience with depth in CTI, SOC operations, network security or proactive security (red team, application testing, TVM)
• Ability to shift priorities autonomously and handle strategic improvements plus hands-on execution
• Strong working knowledge of SIEM, EDR, and network monitoring tools
• Familiarity with the MITRE ATT&CK framework and vulnerability management practices
• Hands-on experience with AI/LLM-based tools and a clear operational use case
• Excellent written and verbal communication to brief leaders

Responsibilities

• Enhance security operations workflows, refine processes, tooling, and automation to speed up the program
• Elevate threat intelligence production, enrichment, and delivery for faster, actionable intel
• Support triage, investigation, and response during incidents and assist root cause analysis
• Contribute to network security reviews, segmentation assessments, and anomaly investigations
• Contribute to proactive security activities including red team engagements, app security testing, TVM surges, and remediation tracking
• Pilot AI-powered tools, build AI-assisted playbooks for triage and reporting, and provide leadership with AI roadmap insights

Job description

We're looking for an experienced, senior individual contributor to join our security team, reporting directly to the Deputy CISO. The person in this seat supports our Cyber Threat Intelligence (CTI), Security Operations Center (SOC), network security, and proactive security functions. We need a true utility player: a versatile cybersecurity professional, ready to support any area which requires immediate assistance on any given day, while spending most of their time enhancing how we operate and how we generate intelligence.

• This position is based out of our Alpharetta, Georgia office.
• We believe great things happen when teams connect. Our schedule is built around 4 days of high-impact, in-office collaboration (Monday-Thursday), paired with Friday Flexibility to wrap up your week remotely.
• This position does not offer immigration sponsorship (current or future) including F-1 STEM OPT extension support.
• This position is not open to third-party vendors or C2C.
• In person interviews are required.

What You'll Do

• Enhance how we operate (primary focus): You'll learn and enhance our SOC, CTI, network security, and proactive security workflows and make them sharper, refining process, tooling, and automation so the whole program runs faster and cleaner. You'll give the Security Operations Program an independent, cross-functional view of how the program is performing and where it's headed next.
• Sharpen our threat intelligence: You'll elevate how we produce, enrich, and deliver threat intelligence, so it's faster and more actionable for the teams that depend on it. That means analyzing threat actor tactics, techniques, and procedures, tracking indicators of compromise, and strengthening how intelligence flows through the organization.
• Surge into SOC operations when we need you: When volume spikes or a major incident hits, you'll jump into triage, investigation, and response, and support root cause analysis afterward.
• Surge into network security when we need you: You'll support network architecture reviews, segmentation assessments, and investigations into anomalous activity during crunches or audits.
• Surge into proactive security when we need you: You'll contribute to red team engagements, perform application security testing, and support threat and vulnerability management (TVM) surges; scanning, prioritization, and remediation tracking.
• Bring AI into how we work: We want someone genuinely excited about AI-powered tools, not just aware of them. You'll pilot agentic tools that reduce manual workload, build AI-assisted playbooks for triage and reporting, and bring the Security Operations Leaders a clear point of view on where AI can move the whole program forward.

What Experience You Need

• 5+ or more years of cybersecurity experience, with real depth in at least three of the following: CTI, SOC operations, network security, or proactive security (red team, application testing, TVM).
• Comfort with high autonomy and shifting priorities, you can move between strategic improvement work and hands-on execution without losing momentum.
• Strong working knowledge of SIEM, EDR, and network monitoring tools.
• Deep familiarity with the MITRE ATT&CK framework and vulnerability management practices.
• Hands-on experience with AI and large language model (LLM)-based tools, and a clear point of view on applying them operationally.
• Excellent written and verbal communication, you'll brief the Security Operations leadership directly and often.

What Could Set You Apart

• CISSP, GCTI, GCIH, OSCP, CEH, or an equivalent certification.
• Scripting or automation experience (Python, PowerShell, or similar).
• Cloud security experience across AWS, Azure, or GCP.
• Prior experience in a roaming or cross-functional senior security role - a fusion analyst, security operations improvement lead, or similar.