What are the responsibilities and job description for the Cyber Security Engineer - Specialist position at Equifax?
As a Cyber Security Engineer - Specialist, you will lead the architectural design and implementation of next-generation cybersecurity infrastructure, specifically driving the evolution of the traditional SecOps program to an Agentic Cybersecurity Operations program. Your primary mission is to improve processes by designing, building, and scaling autonomous, agent-driven ecosystems.
You will architect the high-performance infrastructure required to safely host, orchestrate, and audit autonomous security agents, ensuring that our global enterprise moves at machine speed to defend against modern threats.
This position is based out of our Alpharetta, Georgia office. We are required to be in the office 3 days/week - Tues/Wed/Thurs.
This position does not offer immigration sponsorship (current or future) including F-1 STEM OPT extension support.
This position is not open to third-party vendors or C2C.
In person interviews are required.
What you will do
What Experience You Need
You will architect the high-performance infrastructure required to safely host, orchestrate, and audit autonomous security agents, ensuring that our global enterprise moves at machine speed to defend against modern threats.
This position is based out of our Alpharetta, Georgia office. We are required to be in the office 3 days/week - Tues/Wed/Thurs.
This position does not offer immigration sponsorship (current or future) including F-1 STEM OPT extension support.
This position is not open to third-party vendors or C2C.
In person interviews are required.
What you will do
What Experience You Need
- Agentic SecOps Program Development & Infrastructure:
- Toil Eradication Strategy: Develop and execute key infrastructure strategies to transition standard Security Operations Center (SOC) workflows to autonomous, agentic processes.
- Agentic Infrastructure Architecture: Design, deploy, and maintain the high-performance, scalable infrastructure required to run multi-agent security systems safely. Ensure robust containerization, compute allocation, and API integrations across the global footprint.
- Blast Radius & Guardrail Governance: Work with existing teams to establish strict Security Controls, IAM boundaries, and deterministic guardrails for autonomous agents executing actions within the enterprise network to prevent unintended operational impact.
- Autonomous Detection Engineering & Telemetry:
- Agent-Led Detection Pipelines: Architect automated detection engineering workflows where AI agents ingest threat intelligence, map it to modern cybersecurity frameworks, and autonomously author, test, and deploy detection rules across SIEM, XDR, and EDR platforms.
- Data & Pipeline Optimization: Ensure that security data lakes and telemetry pipelines are structured and optimized for consumption by LLMs and autonomous security agents.
- Global Collaboration & Emerging Tech Innovation:
- Cross-Functional Alignment: Collaborate closely with Global Security and IT teams to ensure infrastructure uniformity and to transition traditional engineering teams into "agent handlers" and strategic orchestrators.
- Agentic Tech Evaluation: Explore, test, and rate emerging AI/ML security technologies, autonomous framework libraries, and agent orchestration tools, recommending the best solutions for the current environment.
- Project Planning: Act as the technical lead for Agentic SecOps initiatives, assisting in project planning, milestone tracking, and measuring established and new metrics for the performance of the Agentic systems.
- Experience: 7 years of experience in Cyber Security Engineering, Security Architecture, or DevSecOps with a heavy emphasis on automation and security infrastructure.
- Education: Bachelor’s degree in Computer Science, Cybersecurity, or equivalent technical experience.
- Agentic & AI Engineering: Practical experience working with agentic orchestration frameworks or building custom LLM-powered tool-use/function-calling pipelines.
- Advanced Security Operations: Deep expertise in Detection Engineering, Threat Hunting methodologies, and Continuous Threat Exposure Management (CTEM).
- Infrastructure & Security Stack: Strong proficiency with cloud-native infrastructure (AWS, GCP, or Azure), CI/CD pipelines, SIEM/XDR platforms, and API-driven security orchestration (SOAR).
- Development Skills: Strong scripting and development capabilities in Python or Go, with an understanding of vector databases and graph databases used for mapping security telemetry.
- Willingness to learn with minimal supervision.
- You have a Github or similar with examples of related project history that you are willing to share.