Alpharetta, GA

Cybersecurity Jobs in Alpharetta, GA

6 jobs found

Include remote jobs

Today

Application Security Analyst

Hexaware Technologies Alpharetta, GA

Alpharetta, GA

Today

Full time Application Security Application Security Engineering Application Security Testing

Apply Now

Job Description

Hexaware Technologies is seeking an Application Security Analyst in Alpharetta, Georgia, United States (onsite). In this role, you will help protect modern software by finding application security risks early, validating remediation, and communicating priorities clearly to both technical and non-technical stakeholders. The position focuses on hands-on security assessments across web applications, APIs, microservices, and backend systems, with an emphasis on actionable reporting and repeatable testing methods.

What you’ll do

Perform manual application security assessments across web applications, APIs, microservices, and backend systems.
Run application penetration testing to identify vulnerabilities, attack vectors, and exploitation opportunities.
Conduct secure code reviews to uncover insecure coding practices and validate adherence to security standards.
Assess application architectures and recommend security improvements throughout the Software Development Lifecycle (SDLC).
Identify, validate, and prioritize vulnerabilities based on exploitability, business impact, and potential risk.
Analyze security findings to determine root causes and support effective remediation.
Partner with development teams to deliver remediation guidance and security best practices.
Evaluate risks in modern application architectures, including cloud-native and API-driven environments.
Use industry-standard testing tools, including Burp Suite, OWASP ZAP, security proxies, web application scanners, fuzzing tools, and API testing platforms.
Validate fixes through re-testing and verification activities.
Build repeatable testing methodologies and security assessment procedures.
Create security assessment reports covering scope and methodology, technical findings with evidence, severity ratings, root cause analysis, business impact, and practical remediation recommendations.
Present findings to technical and non-technical stakeholders, and communicate remediation priorities to developers, architects, project teams, and leadership.

What you bring

Strong experience performing manual application security assessments and penetration testing.
Deep understanding of common application vulnerabilities and attack techniques.
Hands-on ability to identify and exploit application security weaknesses in web applications, APIs, and backend services.
Strong understanding of secure design and secure development practices.
Proven experience conducting manual source code reviews and identifying insecure coding practices.
Experience reviewing code in one or more languages: Java, C#, Python, JavaScript/TypeScript, Go, Node.js.
Strong knowledge of OWASP Top 10, OWASP ASVS, secure coding best practices, application security testing methodologies, and industry security controls and frameworks.
Understanding of authentication, authorization, session management, encryption, and API security principles.
Experience assessing vulnerability severity using industry-standard methodologies.
Strong analytical and problem-solving skills.
Excellent written and verbal communication skills.
Ability to communicate effectively with developers, architects, project teams, and executive stakeholders.

Tools and technologies

Burp Suite, OWASP ZAP, Security Proxies, Web Application Scanners, Fuzzing Tools, API Testing Platforms
Java, C#, Python, JavaScript/TypeScript, Go, Node.js
OWASP Top 10, OWASP ASVS

Preferred qualifications

Previous software development experience.
Familiarity with microservices, REST APIs, cloud-native applications, containerized environments, and DevSecOps practices.
Experience working in Agile development environments.
Exposure to CI/CD security testing and automation.
Industry certifications such as GWAPT, GPEN, OSCP, CSSLP, CISSP, CEH.

View full job page →

3d ago

Senior Application Security Engineer - Containers

ADP Alpharetta, GA

Alpharetta, GA

3d ago

$75k - $184k/yr Full time Senior Application Security Container Security

Apply Now

Job Description

Senior Application Security Engineer - Containers role focused on building and running container security scanning services and governance before container images reach production.

Responsibilities

Own container security operations, including supply chain risk initiatives across ADP business units
Build and support security in DevOps pipelines, aligning container image scanning with a shift-left approach
Support supply chain security activities, including vulnerability management, image provenance, adversarial container security, and related governance risk/compliance (GRC) needs
Help develop solutions for Container Security Bill of Materials (CSBom) generation and Vulnerability Exchange (VEX)
Promote secure container development through training, governance, and metrics
Stay current on container cybersecurity threats and best practices to enable securing and hardening at scale
Customize policies, rules, and alerts to match established policies and settings
Serve as a technical SME and drive program excellence
Identify meaningful KPIs/KRIs to measure progress and improvement
Provide weekly scanning and monitoring reports
Create and maintain Standard Operating Procedures (SOP)
Perform other duties as required

Requirements

5+ years of experience in various IT or cybersecurity roles, including 3+ years in software engineering roles
Bachelor’s degree or equivalent
Basic knowledge and understanding of container security vulnerabilities (OWASP)
Understanding of container image formats such as Docker and OCI
Experience implementing and rolling out container scanning solutions as part of container development
Familiarity with secure coding best practices and internet technologies
Understanding of CI/CD pipelines across source control, integration, and deployment (examples: Bitbucket, Jenkins, Rally, JIRA, Artifactory, Nexus, SonarQube, git, Snyk)
Strong analytical and problem-solving skills with basic cross-functional knowledge across multiple development and security disciplines
Experience training development teams on secure container practices
Basic understanding of Test Automation tools and framework aligned to the NIST Container Security Framework
Ability to communicate security concepts to both technical and non-technical staff
Understanding of Agile methodologies, Cloud, Container, and Application Security
Ability to work effectively as part of a remote team; self-motivated with a positive attitude
Good problem-solving, communication, and presentation skills
Familiarity with microservices architecture and design patterns
Analytic skills to support data-driven decision-making around threats, vulnerabilities, and risk (qualitative and quantitative)
CEH, CISSP, CSSLP, GCIA, GPEN, or GWAPT are a plus but not required

Technologies

OWASP, Docker, OCI
Bitbucket, Jenkins, Rally, JIRA
Artifactory, Nexus, SonarQube, git, Snyk
Java, C#, .Net, JavaScript, Python
NIST Container Security Framework
Container Security Bill of Materials (CSBom)
Vulnerability Exchange (VEX)

Location

Alpharetta, GA (hybrid)

Salary

USD 74,800 - 183,900 per year

Benefits

Medical, Dental, Vision
Life Insurance
Matched Retirement Savings
Wellness Program
Short-and Long-Term Disability
Charitable Contribution Match
Holidays
Personal Days & Vacation
Paid Volunteer Time Off

View full job page →

19d ago

Cyber Security Engineer II

Agilysys Alpharetta, GA

Alpharetta, GA

19d ago

$100k - $120k/yr Full time Ai Security Cloud Platforms Cloud Security

Apply Now

Job Description

As a security engineer, you will implement and improve security technologies, controls, and processes across enterprise and cloud environments.

Responsibilities

Implement, configure, maintain, and optimize enterprise security technologies across cloud, SaaS, and corporate environments
Support endpoint protection, EDR/XDR, SIEM, cloud security monitoring, vulnerability scanning, identity security, and data protection technologies
Troubleshoot security-tool configurations, integrations, performance issues, and operational failures
Evaluate security alerts, tool outputs, and configuration discrepancies to improve security effectiveness
Implement security controls and configuration standards aligned to organizational policies and industry best practices
Assist with testing, integrating, deploying, and documenting new security technologies
Monitor control effectiveness and recommend improvements to increase coverage and reduce operational complexity
Integrate security controls into cloud infrastructure, application platforms, and enterprise technology environments
Implement and maintain security controls across public cloud, government cloud, and segmented cloud environments, as applicable
Partner with Cloud Engineering and Infrastructure teams to address security misconfigurations, excessive permissions, exposed services, and insecure configurations
Support cloud security posture management, cloud workload protection, and configuration-compliance initiatives
Assist with hardening cloud workloads, containers, virtual machines, and supporting infrastructure
Support secure baselines and security standards, including CIS benchmarks
Participate in security reviews of infrastructure changes, cloud services, and new technology implementations
Assist with validating curated container images, approved software libraries, and standardized infrastructure configurations
Perform security assessments, configuration reviews, vulnerability analyses, and security testing
Partner with Vulnerability Management, IT, Cloud Engineering, and Product Security to support vulnerability remediation and verification
Investigate discrepancies among security-assessment tools, infrastructure inventories, and patch-management platforms
Validate that security controls and remediation efforts address identified risks
Maintain awareness of emerging vulnerabilities, threat-actor techniques, and security advisories
Support security-risk assessments and document technical findings, recommendations, and mitigation activities
Use approved AI-enabled security tools and generative AI to accelerate troubleshooting, analysis, configuration reviews, and technical investigations
Apply AI-assisted analysis to identify patterns, correlate findings, and improve detection of vulnerabilities, misconfigurations, and control weaknesses
Use approved AI coding assistants to develop and improve security scripts, automation routines, detection logic, and technical documentation
Identify opportunities to streamline recurring security-engineering activities and reduce manual processes using AI
Evaluate AI-generated recommendations for accuracy, security implications, and operational suitability before implementation
Maintain human validation and oversight of AI-assisted security decisions
Assist in evaluating risks associated with AI-enabled applications, AI agents, large language models, and third-party AI services
Support controls addressing prompt injection, sensitive-data exposure, excessive permissions, insecure AI integrations, and unauthorized access
Support monitoring and investigation of security events involving AI applications, automated agents, and AI-connected services
Help enforce requirements governing approved AI usage, data handling, access controls, and secure integration
Develop and maintain scripts and automated workflows using Python, PowerShell, APIs, and security-orchestration platforms
Automate configuration validation, evidence collection, alert enrichment, reporting, and security-control verification
Integrate security platforms to improve visibility, operational consistency, and data accuracy
Troubleshoot automation failures, integration issues, and inconsistencies between connected technologies
Document automation workflows, implementation requirements, and operating procedures
Provide technical security-engineering assistance during incidents escalated by Security Operations
Support incident investigations using log analysis, troubleshooting, control validation, and security-tool configuration changes
Assist with containment measures, detection enhancements, and remediation activities
Partner with Security Operations to improve alert quality, detection capabilities, and response effectiveness
Participate in post-incident reviews and implement corrective actions addressing security-control gaps
Participate in the incident on-call rotation
Conduct periodic security assessments, control reviews, and technical validation activities
Support security and compliance initiatives involving NIST, CIS, SOC 2, PCI DSS, and FedRAMP, as applicable
Develop and maintain security-engineering procedures, technical standards, configuration documentation, and operational runbooks
Gather technical evidence for internal audits, external assessments, and compliance activities
Document technical risks, security findings, remediation efforts, and control improvements
Contribute practical engineering input to security policies and technical standards
Work closely with Security Operations, Product Security, Cloud Engineering, IT, Infrastructure, and Development teams
Provide technical guidance on security technologies, configurations, and best practices
Serve as a technical point of contact for assigned security platforms, technologies, or engineering initiatives

Requirements

Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Systems, or a related technical discipline, or equivalent practical experience
Four or more years of professional experience in cybersecurity, security engineering, security operations, or a related technical security discipline
Demonstrated experience working with enterprise security technologies and investigating technical security issues
Experience collaborating with infrastructure, IT, security, or engineering teams

Technologies

Cloud, SaaS, enterprise security technologies
Endpoint protection, EDR/XDR, SIEM, cloud security monitoring, vulnerability scanning, identity security, data protection technologies
Public cloud, government cloud, segmented cloud environments
Cloud security posture management, cloud workload protection
CIS benchmarks, containers, virtual machines, patch-management platforms
AI-enabled security tools, generative AI, AI coding assistants
Python, PowerShell, APIs, security-orchestration platforms, security platforms
Log analysis
NIST, SOC 2, PCI DSS, FedRAMP
Prompt injection, large language models, AI agents, Bash

Preferred

Experience in a SaaS, cloud-native, or enterprise technology organization
Experience with public-cloud security technologies, container security, or automated infrastructure security controls
Experience developing security automation or integrating security technologies through APIs
Exposure to AI-assisted security tools or security assessments involving AI-enabled technologies
Familiarity with NIST, CIS, SOC 2, PCI DSS, or FedRAMP
Relevant certifications such as CompTIA Security+, CEH, GIAC GSEC, AWS Certified Security – Specialty, or equivalent credentials

View full job page →

21d ago

Security Engineer II

Barracuda Networks Inc. Alpharetta, GA

Alpharetta, GA

21d ago

$102k - $135k/yr Full time Cloud Identity Cloud Platforms Cloud Security Posture

Apply Now

Job Description

Hands-on role focused on operationalizing and improving security controls across cloud, identity, endpoints, and automation.

Responsibilities

Configure, deploy, and tune security technologies across Barracuda’s cloud and enterprise environment to improve strength, coverage, timeliness, and auditability of security controls.
Build and operate cloud, SaaS, and network security posture management capabilities (CSPM, SSPM, NSPM) using platforms such as Wiz, CrowdStrike, or AlgoSec.
Onboard SaaS platforms into security posture management through API integrations and service-account configurations, coordinating with application owners to expand control coverage.
Engineer and harden identity and access management controls in a cloud identity platform such as Microsoft Entra ID, including Conditional Access, Privileged Identity Management (PIM), MFA, and provisioning of cloud administrator accounts.
Administer privileged access management (PAM) using a solution such as CyberArk, including account onboarding, safe creation and assignment, access monitoring, and integrations with security tools.
Automate recurring security reviews and configuration drift detection (for example, changes to Conditional Access and Named Location) using scripting and job-scheduling tools such as Python, PowerShell, SQL, and Git-based comparisons.
Develop automated security reporting and dashboards using Python, SQL, and Power BI to track control status, coverage, and timeliness for stakeholders and auditors.
Manage endpoint security and device compliance through mobile device management tooling such as Microsoft Intune, including scheduled and on-demand policy updates.
Support the break-glass and emergency-access program to ensure critical controls are resilient, monitored, and audit-ready.

Requirements

Bachelor’s degree in Computer Science or a related field and 2 years of relevant security experience, or an equivalent combination of education and experience.
Hands-on experience configuring and deploying security technologies across cloud environments such as Microsoft Azure or AWS.
Working knowledge of identity and access management concepts and tooling, including Microsoft Entra ID, Conditional Access, PIM, MFA, and PAM solutions such as CyberArk.
Experience with cloud and SaaS security posture tooling across CSPM, SSPM, and NSPM (for example Wiz, CrowdStrike, AlgoSec).
Proficiency in scripting and automation with Python, PowerShell, and SQL, using Git source control and job scheduling to build repeatable, auditable processes.
Ability to build security reporting and metrics using Power BI to improve timeliness and visibility of control status.
Familiarity with endpoint management and compliance tooling such as Microsoft Intune, plus experience working with log and event data for security monitoring.
Strong documentation and communication skills with a collaborative approach across engineering, IT, and security teams.
Exposure to security compliance frameworks such as SOC 2, ISO 27001, and NIST CSF; relevant certifications are a plus.

Technologies

Microsoft Azure, AWS
Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM), MFA
CyberArk
Wiz, CrowdStrike, AlgoSec
CSPM, SSPM, NSPM
API integrations, service-account configurations
Python, PowerShell, SQL, Git, Named Location changes
Power BI
Microsoft Intune

Compensation

USD 102,000 - 135,000 per year
Compensation depends on factors including experience, qualifications, and work location.
May be eligible for bonuses and equity; final compensation determined by the selected candidate’s qualifications.
Compensation and benefits are subject to change and may vary by location and level.

Benefits

Equity in the form of non-qualifying options
High-quality health benefits
Retirement Plan with employer match
Career-growth opportunities
Flexible Time Off and Paid Time Off
Volunteer opportunities

What You’ll Get From Us

A team culture where you can voice your opinion and make an impact
Internal mobility, including cross training and opportunities to reach your next career step within Barracuda

Location: Alpharetta, GA (hybrid)

REQ ID: 27-0492

View full job page →

21d ago

Penetration Tester

Abricto Security, LLC Alpharetta, GA

Alpharetta, GA

21d ago

Full time Application Security Information Security InfoSec

Apply Now

Job Description

Abricto Security, LLC supports clients with offensive security assessments that translate technical findings into practical next steps. This onsite role in Alpharetta, GA focuses on delivering high-quality penetration testing across client environments, from initial discovery through clear, remediation-ready documentation.

Responsibilities

Perform penetration tests and security assessments for networks, web applications, cloud environments, and infrastructure
Identify, validate, and document security vulnerabilities along with the associated risks
Produce detailed technical reports that include actionable remediation recommendations
Join client kick-off meetings and deliver findings presentations
Provide guidance related to security architecture, design, and infrastructure risks
Manage multiple client engagements and deadlines while maintaining consistent quality
Research emerging threats and evolving testing methodologies
Collaborate with team members to help maintain quality and consistency across engagements

Requirements

Bachelor’s degree in a related field, or equivalent experience
Experience conducting penetration testing or related security assessments
Strong working knowledge of networking, operating systems, and web application security
Excellent written and verbal communication skills for reports and client presentations
Relevant certifications such as OSCP, OSCE, CISSP, or similar

Preferred Qualifications

Participation in cybersecurity communities or research
Published technical content or research
Conference speaking experience
Prior leadership or mentoring experience

The Penetration Tester role is built for professionals who can evaluate real-world security exposure, communicate clearly, and support clients with guidance that helps reduce risk across applications, networks, cloud, and infrastructure.

View full job page →

4mo ago

CyberSecurity / Network Engineer

Compass Technology Group Alpharetta, GA

Alpharetta, GA

4mo ago Closed

$80k - $90k/yr Full time Azure Cisco Cloud

This position is no longer accepting applications (closed Jul 18, 2026).

Job Description

Compass Technology Group invites you to join as a CyberSecurity / Network Engineer in Alpharetta, GA. This onsite, full‑time role focuses on safeguarding internal IT infrastructure and device security while delivering cloud and on‑prem solutions. You will bridge internal and external IT efforts, including communicating with customers on select projects, and help implement NIST 800-171 controls in a small business environment. The position offers a competitive USD 80,000 to 90,000 annual salary, plus a comprehensive benefits package and opportunities for professional growth.

Benefits

401(k)
Employee-Owned Stock Program (ESOP)
Health Insurance
Dental Insurance
Vision Insurance
Short-term / Long-term Disability
Life Insurance
Unlimited PTO
Overtime Pay

Responsibilities

Oversee internal IT infrastructure and endpoint security to protect organizational assets.
Collaborate with IT Technicians, System Administrators, and other teams to deliver cloud and on‑prem infrastructure solutions.
Coordinate internal and external IT efforts, including select customer communications on projects.
Lead the implementation of NIST 800‑171 controls within a small business environment.
Document system designs, configuration changes, IT SOPs, and administrative policies and procedures.
Create clear end‑user guides and deployment playbooks for systems and deployments.
Develop and revise internal security policies and present rationale to leadership.
Produce technical documentation for systems and applications designed for customers.
Support research, troubleshooting, and ongoing IT improvements across the environment.
Identify cost‑effective approaches to meet IT requirements and performance goals.
Manage daily IT tasks and ensure timely completion.
Configure and maintain backup, storage, and recovery procedures.
Configure security settings across Azure, O365, Nessus Tenable, Veeam, and Microsoft Sentinel.
Perform server and device health checks with proactive remediation.
Troubleshoot and configure Certificate Authority for the organization’s network.
Implement security controls in alignment with NIST 800‑171 requirements.
Deploy and configure new technologies to meet business needs.
Monitor systems daily and maintain monitoring protocols.
Verify the integrity and availability of hardware, network, and server resources.
Analyze system logs to identify potential issues early.
Review Microsoft Sentinel incidents and respond by severity.
Propose custom infrastructure solutions to resolve issues effectively.
Potential on‑call and off‑hours work as needed.
Research, troubleshoot, and propose IT solutions; provide end‑user training when required.
Respond to system alerts and ensure end users can complete tasks.
Support incident response and investigation activities for security incidents and breaches.
Maintain detailed incident records for audit and compliance purposes.
Configure and maintain security tools such as firewalls, IDS/IPS, and antivirus solutions.
Apply security patches and updates to keep systems secure.
Contribute to system hardening efforts with best practices and secure configurations.
Assist with enforcing security policies, standards, and procedures.
Maintain security documentation, including system security plans, risk assessments, and compliance reports.
Assist with internal and external security audit preparation by providing required evidence and documentation.
Provide technical security support and address security inquiries from end users.

Requirements

Certifications: CySA+, Security +, and CCNA.
OS Administration experience: Windows 10, Windows Server, Linux (Ubuntu, Debian), MacOS; minimum 2 years.
Network Administration / Network Engineering experience: minimum 2 years.
Cisco ASA configuration and maintenance experience: 2 years (preferred).
Azure and O365 Administration: minimum 2 years.
Microsoft Sentinel / SIEM experience: 2 years (preferred).
Hyper‑V Management experience.
Intune MDM and Endpoint Management experience.
Backup and Recovery experience: 2 years (preferred).
Scripting experience: Python, PowerShell.
HT Condor/OpenTDA configuration and Mac Mini cluster design experience (preferred).
Familiarity with regulatory compliance including CMMC 2.0 and NIST 800‑171.
Resourceful and proactive problem‑solver with a collaborative mindset.
Experience with employee onboarding processes.
Strong interest in cybersecurity and ongoing professional development.
Adaptability to new technologies and evolving security threats.
Office environment on site.
Work hours: 9 am to 5 pm, Monday through Friday; weekend work and overtime may be required.

Technologies

Windows Server, Hyper‑V
Office 365, Microsoft Entra ID SSO
Azure, Microsoft Sentinel
Nessus, Tenable Vulnerability Management
AnyConnect, Umbrella, site‑to‑site VPN
Meraki, Cisco FMC
Windows, MacOS, Linux
Intune, Conditional Access Policy
Azure Blob Storage, Microsoft Defender
Python, PowerShell

Integrity and Compliance

This role involves handling sensitive information and making critical decisions. We expect the highest standards of honesty, responsibility, and ethical behavior, with integrity foundational to our culture and operations.

Job Details

Job Type: Full-time
Salary: USD 80,000.00 – 90,000.00 per year
Location: Alpharetta, GA 30005 (onsite)
Relocation: Required to relocate before starting
Work Location: In person
Education: Bachelor's degree
Experience: Minimum 2 years

View full job page →

Cybersecurity Jobs in Alpharetta, GA

Application Security Analyst

Senior Application Security Engineer - Containers

Cyber Security Engineer II

Security Engineer II

Penetration Tester

CyberSecurity / Network Engineer

Get Cybersecurity Jobs in Alpharetta, GA alerts