Duluth, GA

Cybersecurity Jobs in Duluth, GA

2 jobs found

Include remote jobs

1d ago

Information Security Analyst

Arctiq Duluth, GA

Duluth, GA

1d ago

Contract Cloud Platforms Data Security Endpoint Security

Apply Now

Job Description

Arctiq is hiring a mid-level Information Security Analyst for hybrid support in Duluth, GA on a contract basis.

Responsibilities

Independently monitor, investigate, and respond to security events across enterprise technologies and security platforms; determine severity, business impact, and appropriate response
Conduct advanced analysis and correlation of security data to identify malicious activity, policy violations, control gaps, and other potential risks
Partner with internal teams, managed security providers, and vendors to improve detection, escalation, response, automation, and overall security operations
Identify opportunities to improve, automate, orchestrate, and scale security processes and controls as threats and business needs evolve
Lead or support moderate-to-complex security incidents and investigations, including coordination of containment, remediation, recovery, and evidence preservation
Document investigation timelines, evidence, findings, impact, actions taken, root cause, and lessons learned for leadership, Legal, HR, Compliance, or audit review
Escalate high-severity, business-critical, or time-sensitive incidents immediately and maintain clear communications through closure
Support vulnerability and exposure management by validating risk, prioritizing remediation, coordinating with system owners, and verifying closure of high-risk vulnerabilities and control gaps
Assist security assessments, remediation workflows, penetration testing, control validation, and related evidence collection
Evaluate security control effectiveness across enterprise technologies and drive documented exceptions or deficiencies toward resolution
Investigate identity, access, data, SaaS, and cloud security anomalies using enterprise platforms and security technologies
Support identity governance, privileged access, access reviews, authentication controls, and account lifecycle management
Apply least-privilege and Zero Trust principles when supporting security controls and technology decisions
Monitor and respond to events involving confidential, sensitive, or regulated information including PHI, PII, and PCI data
Collect, validate, organize, and retain security evidence supporting regulatory, contractual, audit, customer, and internal assurance activities
Support security risk assessments and third-party/vendor security reviews; translate findings into clear business-risk terms and track remediation
Maintain repeatable procedures, playbooks, investigation records, evidence packages, and control documentation for consistent, auditable operations
Support investigations and responses to user-reported security concerns, phishing, impersonation, and other human-targeted threats
Support security awareness activities (simulations, metrics, trend analysis) and follow-up actions to reduce user-related risk
Own assigned work through completion, proactively research issues, engage the right resources, and escalate blockers or risks promptly
Balance incident-response priorities with operational responsibilities and deadlines in a fast-paced environment
Provide concise, outcome-based updates on completed work, current risk, blockers, decisions needed, and next steps
Provide guidance and mentoring to team members across security operations, investigations, evidence collection, documentation, and repeatable procedures
Participate in after-hours incident response or escalation support when required by business need
Provide security support for new technologies, integrations, acquisitions, and business initiatives, including identifying security considerations and implementing appropriate controls

Requirements

Associate degree in Information Technology, Cybersecurity, Computer Science, or a related field (equivalent relevant experience may be considered)
3-5 years of relevant cybersecurity operations, SOC, incident response, security engineering support, or similar experience
Strong incident-response, investigation, and evidence-handling skills; able to independently manage moderate-complexity security events
Working knowledge of SIEM/SOC operations, EDR, email security, identity security, cloud security, and data-security monitoring
Ability to perform advanced log analysis and correlate events across endpoint, identity, email, network, SaaS, and cloud telemetry
Working knowledge of Microsoft 365, Entra ID, Windows security, networking concepts, authentication protocols, and common attacker techniques
Working knowledge of cloud and SaaS security concepts, least privilege, and Zero Trust principles
Familiarity with vulnerability management and patch/remediation workflows, including CVE/CVSS and CISA KEV, with risk-based prioritization
Working knowledge of healthcare data-security considerations including PHI/HIPAA and PCI-related requirements
Familiarity with security automation, orchestration, and scripting concepts, including PowerShell
Knowledge of AI fundamentals, including generative AI concepts, appropriate enterprise use, data protection, security risks, and responsible use of AI-enabled tools
Ability to create clear, repeatable SOPs, investigation notes, executive summaries, and audit-ready evidence
Ability to communicate technical risk clearly to technical teams, leadership, and non-technical stakeholders
Demonstrated ownership, initiative, sound judgment, and ability to prioritize competing responsibilities in a fast-paced, distributed environment

Technologies

SIEM, SOC, EDR
Email security, identity security, cloud security
Microsoft 365, Entra ID
Windows security, authentication protocols
CVE, CVSS, CISA KEV
PowerShell

Company Overview

Arctiq is a global, intelligence-driven technology services company delivering professional and managed services across Hybrid Cloud Infrastructure, Networking & Connected Experiences, Cybersecurity, Data & AI, Autonomous Operations & Intelligence, and Enterprise Service Management
Unifies infrastructure, networking, data, security, automation, and observability under a single, integrated operating model to help customers reduce operational friction and improve resilience
Helps customers modernize complex environments and make better, faster decisions as environments evolve
Builds on decades of industry expertise and a customer-centric approach

Position Overview

Information Security Analyst II role supporting operation and continuous improvement of a client information security program
Independently manages assigned security responsibilities, supports risk reduction, and collaborates across the organization to protect systems, data, and business operations
Strong ownership, sound judgment, adaptability, and communication are essential

Equal Opportunity

Arctiq provides accommodations or adjustments throughout the interview process and beyond upon request
Welcomes members of all backgrounds and perspectives to apply
Only candidates selected for an interview will be contacted

View full job page →

30d ago

Security Engineer

Neptune Technology Group Inc. Duluth, GA

Duluth, GA

30d ago Closed

Full time Cloud Platforms Data Loss Prevention Edr And Xdr

This position is no longer accepting applications (closed Sep 30, 2026).

Job Description

The Security Engineer will operate within Neptune’s Security Operations Center (SOC), supporting the design, implementation, administration, and optimization of cybersecurity capabilities. This role combines hands-on engineering with technical leadership across incident detection, investigation, response, and remediation, while improving security outcomes through automation, integrations, detection engineering, and process refinement.

Key Responsibilities

Design, configure, implement, and maintain security platforms including SIEM, EDR/XDR, SOAR, IAM, DLP, Vulnerability Management, and Cloud Security solutions
Evaluate, test, and deploy new security technologies, including Proof of Concept (POC) assessments
Create automation and orchestration workflows to improve operational efficiency
Support cloud security and Zero Trust initiatives across the enterprise
Develop and tune security detections, correlation rules, and dashboards to strengthen threat detection and reduce false positives
Conduct proactive threat hunting and analyze telemetry across endpoint, network, identity, cloud, and SIEM environments
Identify opportunities to enhance detection and response capabilities across the environment
Monitor emerging threats, vulnerabilities, and industry best practices to guide detection strategy
Provide technical leadership during investigation, containment, eradication, and recovery for complex and escalated security incidents
Investigate advanced cyber threats and complex security alerts
Collect and analyze forensic artifacts, logs, and endpoint telemetry during investigations
Participate in the on-call rotation and deliver advanced technical support during critical security incidents
Support root cause analysis and post-incident reviews
Validate vulnerability findings and coordinate remediation activities with IT Operations, Infrastructure, and Engineering teams
Implement security controls to address identified risks and track remediation progress within the vulnerability management program
Partner with SOC Analysts, IT Operations, Infrastructure, Cloud, and Engineering teams to implement and maintain security solutions
Develop response playbooks, engineering standards, and operational procedures
Provide mentorship and technical guidance to SOC Analysts
Create and maintain technical documentation for SOC operations
Collaborate with Neptune’s MSSP and third-party security partners on engineering and investigation initiatives
Support compliance initiatives aligned with NIST CSF, CIS Controls, ISO 27001, and Roper Cybersecurity requirements
Recommend improvements to strengthen Neptune’s security posture, resilience, and compliance
Assist with audit requests, evidence collection, and security documentation

Required Qualifications

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)
2–5 years of experience in cybersecurity, security operations, incident response, or a related technical role
Experience investigating security alerts, detections, and cybersecurity incidents
Experience working in a Security Operations Center (SOC) environment
Experience with SIEM and EDR platforms
Understanding of security engineering concepts, including detection engineering, automation, and security tool administration
Strong analytical, troubleshooting, and problem-solving skills
Strong written and verbal communication skills

Technologies

SIEM
EDR/XDR
SOAR
Identity and Access Management (IAM)
Data Loss Prevention (DLP)
Vulnerability Management
Cloud Security solutions
CrowdStrike Falcon
Google SecOps (Chronicle)
Microsoft Defender
Microsoft Entra ID (IAM)
Cloud Security Platforms (AWS, Azure)
MITRE ATT&CK Framework
PowerShell
Python
NIST CSF
CIS Controls
ISO 27001
Roper Cybersecurity requirements

Relevant Platforms (Expected Experience with Several)

CrowdStrike Falcon
Google SecOps (Chronicle)
Microsoft Defender
SIEM platforms
Endpoint Detection and Response (EDR) platforms
Security Orchestration, Automation, and Response (SOAR)
Identity and Access Management (IAM) / Microsoft Entra ID
Data Loss Prevention (DLP)
Cloud Security Platforms (AWS, Azure)
Vulnerability Management Platforms

Preferred Qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or related field
2–5 years of experience in Security Operations, Cybersecurity, Incident Response, Vulnerability Management, or Information Technology
Experience with SIEM platforms such as Google SecOps, Chronicle, Splunk, QRadar, Microsoft Sentinel, or similar technologies
Experience with EDR platforms such as CrowdStrike Falcon or Microsoft Defender
Familiarity with the MITRE ATT&CK Framework, threat hunting, and threat intelligence methodologies
Experience supporting vulnerability management programs and remediation activities
Knowledge of Windows, Active Directory, Microsoft Entra ID, networking fundamentals, and cloud security concepts
Experience with AWS and/or Azure environments
Familiarity with NIST Cybersecurity Framework, CIS Controls, ISO 27001, and security best practices
Experience with scripting or automation using PowerShell, Python, or similar languages

Certifications (Preferred)

Security+
CySA+
GSEC
GCIH
GCIA
GCED
CISSP (Associate or Full)
SC-200
SC-100
CrowdStrike Certifications
Google SecOps Certifications
AWS or Azure Security Certifications

Education and Experience

Minimum experience: 2 years
Years of experience focus: 2–5 years across Information Technology, Cybersecurity, Security Operations, Compliance, or Incident Response
Education: Bachelor’s Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field preferred; equivalent military, technical, or professional experience will be considered

Location and Travel

Location: Duluth, GA (onsite)
Additional location mention: Tallassee, AL
Travel requirement: Typically requires overnight travel less than 10% of the time

View full job page →

Cybersecurity Jobs in Duluth, GA

Information Security Analyst

Security Engineer

Get Cybersecurity Jobs in Duluth, GA alerts