Cybersecurity Engineer III-V

Cybersecurity Engineer III-V Lead Security Engineering for Mission-Critical Technology Environments Georgia System Operations Corporation (GSOC) is seeking a Cybersecurity Engineer to lead advanced cybersecurity engineering, security monitoring, vulnerability management, incident response, and continuous improvement initiatives that strengthen the organization's security posture. This role serves as a senior technical resource across cybersecurity disciplines, supporting secure technology operations for GSOC Shared Services and the broader Family of Companies. You will help evaluate, implement, optimize, and manage cybersecurity platforms, security controls, and manage security services across enterprise environments. This opportunity is ideal for an experienced cybersecurity professional who enjoys leading complex security engineering initiatives, mentoring technical team members, partnering across infrastructure and application teams, and driving practical risk reduction in a mission-critical environment. Successful candidates will bring expert-level cybersecurity knowledge, strong technical leadership, and hands-on experience across security operations, vulnerability management, threat intelligence, cloud security, endpoint protection, containerized or virtualized environments, and enterprise security architecture. What You'll Do As a Cybersecurity Engineer, you will play a key role in leading cybersecurity engineering, threat detection, vulnerability management, incident response, and enterprise security improvement efforts. You will: Serve as a technical subject matter expert across cybersecurity disciplines for internal teams, vendors, external stakeholders, and partners across the Family of Companies. Lead implementation, administration, and optimization of SIEM, EDR, security monitoring, and other cybersecurity platforms. Develop and maintain detection rules, alerting logic, dashboards, threat intelligence integrations, and security monitoring content. Conduct threat hunting, analyze indicators of compromise, and support proactive identification of security risks. Lead cybersecurity incident investigation, coordination, response, root-cause analysis, corrective action, and incident response playbook development. Manage vulnerability scanning, assessment, remediation prioritization, validation testing, metrics, and risk reduction reporting. Design, implement, and maintain enterprise security technologies, controls, secure configuration baselines, hardening standards, and security automation. Implement and maintain security controls within Azure and other cloud environments, including cloud monitoring, governance, detection, and architecture review support. Lead endpoint and infrastructure security activities, including endpoint security administration, least-privilege initiatives, endpoint hardening, and collaboration with Infrastructure and EUC teams. Review new technologies and projects for security requirements and help ensure controls align with business, regulatory, and industry requirements. Develop and maintain cybersecurity documentation, including policies, procedures, standards, guidelines, technical baselines, and program documentation. Lead implementation and management of enterprise data security capabilities, including data classification, protection policies, monitoring, reporting, and incident response. Engineer and maintain secure containerized and virtualized environments through security controls, hardening standards, and aligned monitoring practices. Partner with MSSPs, third-party SOCs, consultants, professional services organizations, vendors, and value-added resellers to evaluate, implement, optimize, and manage cybersecurity services and platforms. At this senior level, this role also: Mentors cybersecurity professionals and serves as a senior technical resource for the cybersecurity team. Provides technical guidance to Infrastructure, EUC, application, cloud, and cross-functional project teams. Assists cybersecurity leadership with strategic planning, security roadmap development, and program maturity efforts. Leverages blue team, red team, or purple team experience to support penetration testing, adversary emulation, threat hunting, and control validation activities. Stays current with security trends, technologies, regulatory requirements, and industry best practices. What You Bring Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Technology, or a related field. Equivalent combination of education, training, and directly related work experience may be considered. Ideally 8+ years of experience in cyber or information security; twelve or more years of relevant experience may also be considered. Expert-level knowledge of cybersecurity architecture, security engineering principles, enterprise technologies, and industry best practices. Strong technical skills and understanding of security events across multiple operating system and appliance platforms. Strong analytical, troubleshooting, problem-solving, and documentation skills. Excellent written and verbal communication skills, including the ability to clearly explain technical issues to both technical and non-technical stakeholders. Ability to lead implementation of processes, collaborate with diverse stakeholders, and resolve issues in a practical and professional manner. Strong customer service mindset and ability to adapt quickly to evolving technologies, processes, and compliance standards. Preferred Qualifications Security Operations & Threat Detection Expertise with security monitoring and analysis tools, including SIEM and IDS/IPS platforms. Experience developing detection use cases, threat hunting methodologies, and security monitoring content aligned with industry frameworks such as MITRE ATT&CK. Experience leading cybersecurity incident investigations and coordinating enterprise incident response activities. Security Engineering & Architecture Experience designing, implementing, and maintaining enterprise security controls across network, endpoint, identity, cloud, and application environments. Experience evaluating, implementing, and integrating cybersecurity technologies into existing enterprise environments. Experience developing cybersecurity policies, standards, procedures, architecture principles, and technical security baselines. Experience supporting Zero Trust architecture initiatives is a plus. Vulnerability, Data & Cloud Security Expertise with vulnerability scanning platforms and vulnerability remediation guidance. Experience implementing and administering enterprise data security technologies, including data classification, data loss prevention, encryption, and data governance solutions. Experience securing cloud environments such as AWS, Azure, or Google Cloud Platform, including cloud-native security controls and architectures. Experience securing containerized and virtualized environments such as Kubernetes, Docker, VMware, or similar platforms. Collaboration & Leadership Demonstrated experience leading, mentoring, and developing cybersecurity professionals. Experience leading cross-functional projects involving infrastructure, networking, cloud, and application teams. Experience managing relationships with MSSPs, third-party SOCs, consultants, professional services organizations, and technology vendors. Frameworks & Certifications Working knowledge of cybersecurity frameworks and regulatory standards such as NIST CSF, NIST 800-53, CIS Controls, and ISO 27001. CISSP or GIAC certification is preferred. CySA +, CCSP, CISM, GCIH, or OSCP certifications are a plus. Leveling Overview Cybersecurity Engineer V - Senior technical expert responsible for leading cybersecurity engineering, security operations, vulnerability management, threat intelligence, incident response, cloud security, data security, and enterprise security architecture initiatives. This role serves as a senior technical resource and mentor while supporting strategy, roadmap development, security program maturity, and cross-functional risk reduction across mission-critical technology environments. Additional Role Expectations Occasional evening and weekend work may be required to support operations and security event response. This role may support customers, incident response processes, and systems after hours as needed. The role is primarily office-based. Advantages of Working at GSOC Working at GSOC means more than just a job-- it's an opportunity to contribute to work that truly matters. Mission-Driven Impact Your work directly supports the security posture of technology systems that enable reliable business and operational support across GSOC and the broader Family of Companies. Cybersecurity Leadership & Innovation Lead high-impact security engineering, threat detection, vulnerability management, cloud security, and security architecture work in a collaborative, mission-focused environment. Strong Values and Professional Standards Work in an environment grounded in accountability, collaboration, integrity, and continuous improvement where security, compliance, and operational excellence are core priorities. Work Environment & Benefits GSOC offers a professional, collaborative work environment with competitive compensation, comprehensive benefits, Georgia System Operations