Open Indianapolis Cybersecurity jobs

Summary

Senior security analyst seat leading a shift inside a cyber threat management function, serving as the escalation point for junior analysts during security event investigations and incident response and mentoring them on investigation quality. The role also coordinates shift coverage, on-call scheduling and PTO planning, maintains operational procedures and playbooks, and performs complex configuration, capacity and change work on information and network security technologies. Schedule is 8 to 4 Eastern with one to two in-office days per week.

Summary

Enterprise information security engineering seat at a health insurer, owning the security policies, technical standards, guidelines and procedures that support the company's security infrastructure while delivering network security, access control and secure transaction and messaging solutions. The work spans first-level engineering design and top-tier escalation on complex problems, leading investigations of data security events and incidents, running level 1 and 2 incident recovery and coordinating other analysts through it, root cause analysis, network and system architecture support, and setting vendor strategy across an outsourced services mix. Depth is required in at least four of the information security common body of knowledge domains, and the role is hybrid at one to two days a week in an office, with candidates outside a reasonable commuting distance of a posted location excluded by policy absent a legal accommodation.

Summary

Enterprise information security seat focused on the protection of data at rest, covering the policies, technical standards and controls that govern it. Hands-on requirements center on the Protegrity platform, Terraform-managed infrastructure as code, GitHub branching and release workflows, secure application integrations spanning AWS plus Azure or GCP, serverless integration patterns, Kubernetes, Splunk searches and ServiceNow incident and change workflows. In-office presence of one to two days per week is required, and candidates outside commuting distance of a listed office are not considered.

Summary

A security architecture seat inside the IT organisation of an insurance group, setting the security standards that govern adoption of new technology and defining design requirements for security risk on IT and enterprise projects. A large share of the work is governance rather than engineering: maintaining segregation-of-duties access controls alongside business, audit and application teams, running internal and third-party security assessments with particular emphasis on cloud service providers, writing policy, and building management dashboards that report security risk to senior leadership against SOX, PCI and HIPAA obligations. It is remote but limited to candidates in a US Eastern or Central time zone, and asks for ten or more years of IT experience with at least three as a security architect.

Summary

Tier 2 security operations analyst at a managed security services provider, owning the alerts and tickets that Tier 1 cannot resolve across multiple client environments and driving each to a resolution or to engineering with a recommended action. Day-to-day work is SIEM, EDR, email and cloud alert triage, containment through SentinelOne and account isolation in Entra ID, credential rotation guidance, evidence collection, phishing triage, scheduled threat hunts using SDL queries and CTI indicators, and detection tuning with the senior engineers and purple team to cut false positives. The seat also mentors Tier 1, writes and refines playbooks, and authors the analytical narrative for monthly client reports; it is described as high volume and hands-on with a bar of three or more years in a SOC or incident response.

Summary

Leads application security and vulnerability management across the business, acting as the primary security contact for applications, SaaS platforms and third-party software. The day to day is identifying and prioritising vulnerabilities and driving remediation, administering security tooling, and performing secure code, configuration and application reviews, extending to evaluation of AI tools and features, security awareness work, and maintaining controls and documentation. The schedule is four days on site and one remote, and candidates must live within reasonable commuting distance of the Westfield, Indiana site.

Summary

Cloud security architecture at a health insurer, responsible for making cyber defense capabilities actually work across enterprise and subsidiary AWS, Azure, GCP and OCI environments. The architect ensures security controls, logging and telemetry are enabled and validated with cloud infrastructure and application teams, sets the roadmap for cloud security posture management, threat detection, logging pipelines and incident response integration, proposes cloud threat monitoring use cases and trains SOC analysts to triage and investigate against them. The role also sits in governance review for new cloud, AI-enabled and SaaS services before approval, and supports designing cloud architectures that meet FedRAMP or comparable regulatory requirements.

Summary

Detection engineering at a health insurer: designing, developing, tuning and maintaining security detections, correlation rules and behavioral analytics, and building the CI/CD pipelines that deploy, test and validate that detection content. The seat also carries broader security engineering duties — access management and network security implementations, escalation on complex problems, and leading data security incident investigation, level 1 and 2 recoveries and root cause analysis — working alongside the security operations centre, fraud, threat intelligence and infrastructure teams. Candidates must be within commuting distance of an office for one to two in-office days a week.

Summary

Identity and access management role centered on periodic system access certifications, proving that identity, application and entitlement data used in access reviews is complete and accurate against internal controls and against SOX, SOC1, SOC2, HiTrust, PCI-DSS and statutory audits. Beyond the audit cadence it carries engineering duties: first-level design and technical escalation on complex problems, planning and test-planning implementations of access-management and network-security technologies, leading investigation and reporting of security events, and owning root cause analysis and incident-recovery coordination. Hybrid with one to two in-office days a week and a commuting-distance rule.

Summary

Leadership seat over enterprise security monitoring and incident response at a health insurer, running a 24x7 follow-the-sun Security Operations Center and the cyber security incident response team. Scope covers SIEM-based monitoring and alert triage, cloud security monitoring, identity investigations, malware analysis, digital forensics and threat intelligence, plus briefing the CISO on high-profile incidents and coordinating with legal, privacy, compliance, regulators, law enforcement and cyber insurers. Requires three in-office days per week, and candidates outside reasonable commuting distance of the office are not considered.

Summary

Operational data protection work at a health insurer, centered on data at rest encryption and cloud database security across on-premises and cloud estates. The analyst onboards databases, applications and cloud resources into enterprise data security monitoring platforms, validates security events, analyzes logs, troubleshoots encryption technologies and supports secure configuration and deployment in AWS, Azure and GCP. A substantial automation component runs alongside it, using Terraform, Ansible, scripting and CI/CD pipelines to build automated workflows, operational playbooks and infrastructure-as-code for security operations, with proof-of-concept work on new cloud database technologies.

Summary

Privileged access operations rather than security engineering: the analyst processes CyberArk Endpoint Privilege Manager elevation requests through ServiceNow, validates business justification, approvals and change-management requirements, assigns and removes temporary elevated access, and handles emergency break-glass requests. Day-to-day duties cover EPM policy administration and rollouts, agent health and endpoint compliance validation, troubleshooting elevation and policy enforcement failures, monitoring privileged activity and telemetry, investigating unauthorised privilege use, and producing audit evidence for access certifications and compliance reviews. The function runs 24x7 operational support, the role sits in-office one day per week at an Indianapolis or St. Louis location, and it works against stated Least Privilege and Zero Standing Privilege objectives.

Summary

A ten-week summer internship inside a law firm's information security department, working under the department director and an assigned mentor on projects that advance the firm's information security initiatives, including cyber security. The work is project support rather than hands-on security operations: data input, data analysis, process documentation, recordkeeping, and participation in internal and external meetings, with strict confidentiality on all client and firm matters. Eligibility is narrow - candidates must be entering their sophomore, junior or senior year in the fall of 2027, be enrolled in a two-to-four-year undergraduate program for college credit, and be available for ten consecutive weeks.

Summary

A principal-level security and compliance architecture seat over a cloud vendor's federal platform footprint: the holder acts as chief technical authority for achieving and maintaining FedRAMP Moderate and High and Department of Defense Impact Level 5 authorizations, translating NIST SP 800-53 controls and DoD cloud security requirements into architectural standards and reusable, compliant-by-default design frameworks that engineering teams build against. Day to day is architectural governance review, technical feasibility assessment for complex initiatives, proactive risk identification and mitigation strategy, evaluation of emerging cloud patterns against compliance mandates, and acting as trusted advisor to executive leadership, key customers and federal authorizing bodies. Note a seniority discrepancy: the posted title carries no grade while the description scopes the seat at principal level.

Summary

A summer 2027 internship working inside the cybersecurity operations of a regional grid operator: building small automations, improving detections, analyzing logs, and assisting with threat hunts and incident investigation using the security team's production tooling such as SIEM, EDR and NDR platforms. Interns also look for recurring problems in security operations processes and propose practical fixes, then close the summer with a presentation on their project work and recommendations. The program runs on site in Carmel, Indiana across a fixed June-to-August window, and no visa sponsorship is offered, including OPT and CPT.

Summary

A summer 2027 internship working inside the cybersecurity operations of a regional grid operator: building small automations, improving detections, analyzing logs, and assisting with threat hunts and incident investigation using the security team's production tooling such as SIEM, EDR and NDR platforms. Interns also look for recurring problems in security operations processes and propose practical fixes, then close the summer with a presentation on their project work and recommendations. The program runs on site in Carmel, Indiana across a fixed June-to-August window, and no visa sponsorship is offered, including OPT and CPT.

Summary

A security risk and compliance seat rather than a hands-on engineering one: the analyst drives, maintains and validates compliance with the bank's Information Security and Technology Risk Management policy, program and standards, both inside the organization and across third parties. Core work is performing risk and threat assessments and control testing, then working with team members to identify, escalate and correct control gaps and to support assurance activities around the confidentiality, integrity and availability of customer and business information. The role also advises on the security implications of new infrastructure, technologies, processes and partnerships and on which laws and regulations apply.

Summary

Designs, implements and maintains network security infrastructure for a global engineering manufacturer, covering firewalls, VPNs, IDS/IPS and network access control, and setting up and configuring SIEM, EDR and DLP tooling both on premise and in the cloud. Day-to-day work includes monitoring network traffic and security logs for anomalies, conducting vulnerability assessments and penetration testing, developing and enforcing network security policies and standards, and documenting incidents, findings and mitigation strategies. US citizenship is required; the entry bar is a cybersecurity, computer science or IT degree plus one year in network, cyber or IT security, or five years of that experience in lieu of a degree, and the post can be based in Indianapolis or worked remotely.

Summary

Designs, implements and maintains network security infrastructure for a global engineering manufacturer, including firewalls, VPNs, IDS/IPS and network access control, and sets up and configures security tooling such as SIEM, EDR and DLP on premise and in the cloud. The work also covers monitoring network traffic and security logs for anomalies, running vulnerability assessments and penetration testing, developing and enforcing network security policies, standards and best practices, and documenting security incidents and mitigations. US citizenship is required; the bar is a cybersecurity, computer science or IT degree plus two years in network, cyber or IT security, or six years of that experience in lieu of a degree, and the post can be based in Indianapolis or worked remotely.

Summary

A digital forensics and incident response seat on the purple team of a global engineering manufacturer, bridging offensive and defensive security work across incident response, threat hunting, forensics, adversary emulation and detection engineering. Duties span leading investigations into malware, ransomware, insider threats and advanced persistent threats; endpoint, memory, disk, cloud and container forensics with timeline reconstruction and persistence analysis; proactive hunts mapped to MITRE ATT&CK; collaborating with red team operators to validate detection coverage; and developing and tuning detections, custom analytics and dashboards in SIEM and EDR platforms with scripted automation of repetitive investigation tasks. The position is hybrid in Indianapolis, and the stated entry floor is an associate degree in cybersecurity, computer science, information technology or mathematics with two years of relevant experience.

Summary

Leads and line-manages a team of cyber security engineers at a global engineering manufacturer, setting team goals, performance expectations and development plans, running regular one-to-ones, evaluations and coaching, and owning resource planning, workload prioritisation and project assignment. The team's remit is enterprise networking, security architecture and infrastructure security, with preferred background in managing NDR/DDR, SIEM and EDR platforms, securing AWS, Azure or Google Cloud environments, incident response and threat detection, and the NIST Cybersecurity Framework, CIS Controls and ISO 27001. Candidates must be a US citizen or permanent resident, and the experience bar is five years in cybersecurity, network security or information security with a bachelor's degree, or three years with a master's or doctorate.

Summary

A hands-on security engineering seat that maintains enterprise information security policies, technical standards, guidelines and procedures while delivering network security, access control and secure transaction and messaging solutions in line with enterprise standards. The named platform expectation is the Protegrity data protection platform across architecture, deployment patterns, policy administration, integration troubleshooting and operational support, supported by Terraform infrastructure as code, change workflows in GitHub, Kubernetes, serverless integration patterns, and secure application integrations across AWS plus at least one of Azure or GCP. Splunk search and log analysis and ServiceNow incident, request and change management round out the toolset; the role is in office one to two days per week at one of several listed locations, with commuting distance enforced.

Summary

Consulting leadership seat in a firm's cybersecurity practice, owning identity and access management strategy and roadmaps for clients across identity governance, privileged access, access management, authentication, authorisation and identity data, and advising on Zero Trust and identity-centric security at programme level. The manager owns day-to-day client relationships, scope, timelines and delivery risk, sets solution direction and oversees the teams doing the technical work, contributes to proposals, statements of work and RFP responses, and picks up adjacent engagements such as risk assessments, control evaluations and cloud security reviews. This is explicitly not a day-to-day configuration or engineering role: hands-on implementation experience is treated as useful context rather than the work itself.

Summary

Client-facing cybersecurity consulting for financial services organisations: leading and supporting cyber risk assessments, IT internal audits and regulatory readiness work against frameworks such as HIPAA, GDPR and CMMC, and evaluating and testing IT controls, application controls, security configurations and integration security. The consultant advises on security architecture, identity and access management, data protection and cloud security across Azure, AWS or GCP, assesses business resiliency and incident response readiness, and aligns client programmes to NIST CSF, NIST 800-53 and CIS. Findings and recommendations are presented directly to stakeholders including C-suite and board-level leadership, and the role also covers advice on secure adoption of AI and machine learning in business processes.

Summary

Client-facing consulting for financial institutions - banks, insurers, asset and wealth managers and fintechs - on cybersecurity and technology risk, scoped explicitly as second-line risk management and advisory rather than internal audit. The work assesses cybersecurity governance, policies and standards, risk and control frameworks, risk appetite, metrics and KRIs, issue management and executive and board reporting, and advises on regulatory readiness, examinations and remediation against FFIEC, GLBA, NYDFS Part 500, SEC cybersecurity requirements, NIST CSF, NIST 800-53 and CIS Controls. Subject depth is expected across identity and access management, data protection, cloud security, third-party risk, vulnerability management, incident response and cyber resilience, with the consultant acting as an extension of client CISO and enterprise risk teams.

Summary

A twelve-month information security co-op that rotates through two to five specialties, among them vulnerability management, application security, cloud security, security operations center work, IT controls compliance, encryption and security policy. The tasks are operational: pre-production vulnerability scanning of servers, databases and network devices, triage of events raised by the incident management tooling, and running code-inspection tools against internally developed applications before release. Current enrollment in a related degree program is required, the commitment is twenty to forty hours a week on weekdays, and the program runs as Spring 2027 and Summer 2027 cohorts with one to two office days a week.

Summary

Security platform engineering for a health insurer focused on protecting data at rest: encryption, tokenization and key management across hybrid cloud and on-premises environments, with accountability for the operational stability of those platforms. The day-to-day work is troubleshooting integrations with application and infrastructure teams, automating operational processes, maintaining security controls and serving as the point of technical escalation, together with vendor strategy and direction and expected depth across five or more information security knowledge domains. It requires one to two days per week in office and excludes candidates who are not within commuting distance of an office location.

Summary

Supports an insurer's information security program through application security, vulnerability management, security metrics and reporting, and day-to-day operational security activities. The core of the work is identifying, assessing, reporting and tracking security risks and vulnerabilities across enterprise information assets while supporting security governance objectives.

Summary

Engineers and operates identity security controls across workforce, privileged, machine and cloud identities, with CyberArk Idira Endpoint Privilege Manager as the primary platform and CyberArk PAM and PSM as supporting scope. The work runs from policy design, application control and temporary elevation through just-in-time and zero standing privilege access models, identity governance processes such as certification and segregation of duties, and integration of CyberArk with ServiceNow, SailPoint, directories, CMDB and cloud platforms via supported APIs and workflow automation. Scope extends explicitly to non-human, service and agentic AI identities, and the seat carries audit, compliance and 24x7 service obligations with one office day a week.

Summary

Payment Card Industry Data Security Standard compliance work inside an information security risk management group, providing subject matter expertise on PCI DSS control interpretation, scope validation, control testing, evidence review and remediation tracking. The seat supports ISA, QSA, ROC, SAQ and AOC assessment cycles, evaluates third-party service provider PCI responsibilities through attestations, responsibility matrices and contract review, and feeds into HIPAA, HITRUST, SOC 2 and NIST audit activity. Attendance is one to two days per week in office.

Summary

Senior individual-contributor technical leader in a security integrator's Cisco Center of Excellence, defining technical strategy across Cisco enterprise networking, network security, secure access, segmentation and digital experience. The work is client-facing architecture advisory: leading technical discovery on complex opportunities, advising CISOs, CIOs and network and security leaders on modernization options and multiyear roadmaps, developing reference architectures that connect Cisco capabilities to Splunk, ThousandEyes, identity and cloud services, and building reusable workshops, demonstrations, decision frameworks and lab environments for proofs of concept. The role is positioned on the pre-sales side of a pre-sales-to-delivery handoff and works through expertise and influence rather than direct authority, with commercial account ownership and forecasting held by sales leaders, and it is fully remote anywhere in the continental United States.

Summary

Focuses on securing cyber-physical embedded systems across a defense products portfolio, working with core systems security teams to determine the technology and processes needed to meet customer requirements for system security and resiliency. The role applies secure cyber resilient engineering throughout the product lifecycle, from requirements and design through build, test, production, operations and support, creates digital models using model-based systems engineering, and helps develop the security and resilience practices, policies and procedures used across the business. It involves collaboration with government, customers, suppliers and industry experts, and runs on a three-days-in-office schedule.

Summary

Owns the information security strategy and strategic plan for a health benefits company, running the annual planning cycle, strategic refreshes, quarterly reviews and certification of security priorities, outcomes and measures of success. The role develops executive and board-level narratives on security strategy, progress, risks and required decisions, and identifies emerging trends and threats that should shift strategic direction. It works across initiative owners, portfolio leaders, finance, technology and risk teams to connect strategic commitments to investment decisions and measurable results; hybrid with three days per week in an office.

Summary

Leads the design, configuration and ongoing optimization of the ServiceNow capabilities that run a health insurer's cybersecurity risk, compliance, third-party risk and PCI DSS assessment processes, including workflows, data models, forms, control libraries, evidence collection, assessment templates, dashboards, reporting, integrations and automation. Serves as subject matter expert across intake, scoping, questionnaire workflows, control mapping, findings and issue management, risk acceptance and remediation tracking, and designs workflows for ROC, SAQ, AOC and gap assessment activities. The role also covers information security policy and standards development, risk assessment methodology, security architecture support and incident response planning, and requires one to two in-office days per week within commuting distance of a posted location.

Summary

Owns the technical architecture of a global enterprise security program at a door hardware and security products manufacturer, designing information security architectures and driving the Zero Trust roadmap along with security guardrails for enterprise AI adoption. The day-to-day blends architecture with hands-on security operations: evaluating, selecting and administering security tooling, troubleshooting firewalls, IDS/IPS and segmented network zones, coordinating third-party security service providers, and contributing to PCI, SOX, ISO and HIPAA compliance. This position is not eligible for employment visa sponsorship.

Summary

Delivers cybersecurity and operational resilience assessment and advisory engagements for consulting clients, spanning data protection and information governance, HIPAA Security and Privacy Rule assessments, third-party and vendor risk management, incident response, cyber resilience and disaster recovery, business continuity, and infrastructure and application security controls. Evaluates the design and operating effectiveness of those controls against HIPAA, NIST CSF, NIST SP 800-53 and ISO 27001, and acts as a strategic advisor to client security and risk functions. The manager level adds team leadership, engagement execution and growing client account ownership on top of delivery.

Summary

Leads cybersecurity internal audit and advisory engagements for financial services clients at a public accounting and consulting firm, planning and executing audits across security operations centers, data services and data governance, third-party risk management, cyber resilience and incident response, and infrastructure risk control frameworks including second line of defense review. Assesses the design and operating effectiveness of technical cybersecurity controls against regulatory expectations and frameworks such as NIST CSF, COBIT and ISO 27001, and prepares audit documentation, reports and deliverables independently. At manager level the role also carries team leadership, account planning and direct client relationship responsibility.

Summary

Internship on a consulting firm cybersecurity team, helping clients assess and refine information security posture, technology implementations and regulatory compliance alongside experienced security practitioners. The work is field-based at client sites of varying size and industry from the first day rather than desk-based, and willingness to travel as client or project requirements dictate is a stated requirement. Candidates are expected to know information technology fundamentals including basic network services such as TCP/IP, HTTP, SSH, SMB and DNS and where they sit on the OSI model, routing and switching, Windows and Active Directory or Linux and Unix system administration, and database administration on platforms such as Microsoft SQL, Oracle and Mongo.

Summary

Penetration testing and red team role leading offensive security engagements for consulting clients, including internal and external network penetration testing, web application and wireless testing, social engineering by phishing, telephone and onsite approaches, and red and purple team threat emulation. The work also covers evaluating IT controls, application controls, security configurations and interface and integration security, providing vulnerability remediation recommendations, and running assessments against NIST CSF, NIST 800-53 and CIS. Manager scope adds presenting findings to stakeholders up to C-suite and board level, mentoring and supervising junior consultants, and contributing to service line methodology and thought leadership.

Summary

Offensive security consulting role performing internal and external network penetration testing, web application and wireless penetration testing, social engineering through phishing, telephone and onsite approaches, and red and purple team threat emulation for clients across a range of industries. Engagements also include evaluating IT controls, application controls, security configurations and integration security, recommending practical vulnerability remediation, and conducting assessments against NIST CSF, NIST 800-53 and CIS. Senior consultant scope covers presenting findings to stakeholders up to C-suite and board level and mentoring junior consultants.

Summary

Hands-on identity and access management engineering in a consulting cybersecurity practice, designing and implementing IAM and authorization solutions across Azure, AWS and GCP as well as on-premises and hybrid environments, and building and integrating IAM platforms with enterprise applications. The emphasis is technical build and complex integration work rather than assessment, carried out alongside client stakeholders through solution design and engagement. The role also contributes to broader cybersecurity engagements including security assessments and control evaluations.

Summary

Enterprise messaging engineering role owning architecture and senior-level operational support for Exchange Online, Exchange hybrid and on-premises Exchange, SMTP relay, transport services, distribution lists, shared mailboxes and mail flow integrations. The security half of the seat covers Proofpoint and other messaging gateways plus DMARC, SPF, DKIM, EOP, anti-phishing, anti-spoofing, quarantine and policy tuning, partnering with a Managed Security Services provider to investigate email security events, tune detections and lead incident response for mail-impacting incidents. The role may be based in Indianapolis, Indiana or Johnston, Iowa, with remote placement within the United States available only for highly qualified candidates.

Summary

Security operations work for a managed IT services provider: investigating incidents including business email compromises and malware infections, reviewing daily escalations and reported phishing, and triaging MDR and EDR/AV alerts through to action. The role also configures and analyzes vulnerability assessments, makes changes to firewalls and switches, and writes knowledge-base articles and standard operating procedures. Requires one to three years in a cybersecurity position with associate-level exposure to SentinelOne, Blackpoint MDR, KnowBe4 and Timus ZTNA, and works a fixed Monday to Friday 11am to 8pm CST shift.

Summary

Data protection and privacy operations inside an information security team: monitoring and investigating alerts from DLP, endpoint and SaaS security tools, tuning detection rules to cut false positives, and gathering logs and evidence for internal reviews alongside Legal and HR. The seat also runs privacy operations, covering data subject access requests, data inventories and flow maps, records of processing activities and vendor privacy reviews, and supports control testing and audit preparation against NIST CSF, ISO 27001 and SOC 2. Three or more years in cybersecurity, privacy, data protection or risk management is required.

Summary

A governance, risk and compliance seat inside a city and county technology agency, reporting to the CISO and running the internal control review program: periodic access reviews, vendor and third-party risk assessments, physical security reviews, and encryption and antivirus reviews. The work tracks the organization against CIS Benchmarks, NIST, CJIS and PCI, manages a vendor risk management program and the risk and compliance register, tracks contractually obligated security deliverables in agency contracts, and monitors remediation of compliance and security findings. It also supports the incident manager with root cause and post-incident documentation, uses ServiceNow for ticket management, and is based on site at the City County Building.

Summary

The first dedicated engineering seat inside a grid operator's governance, risk and compliance program, building automation that streamlines controls evidence collection, controls testing and workflow orchestration across the GRC ecosystem. The work is scripting and integration rather than paperwork: Python, PowerShell and JavaScript automation, REST API integrations across GRC platforms and internal systems, automated risk intake, scoring and continuous monitoring, and third-party risk onboarding and assessment workflows. Experience expectations run high for the level, at 10+ years professional experience with 4 years in GRC engineering, plus Archer or another enterprise GRC platform and appetite for building compliance-as-code or policy-as-code capability from scratch.

Summary

Security architecture seat at a regional electricity grid and energy market operator, leading the design and ongoing enhancement of secure architectures across enterprise systems, applications and cloud environments and producing threat models, reference architectures and repeatable security patterns. Day-to-day work spans risk assessments and mitigation planning, evaluating and designing security tooling and controls, guiding teams on DevSecOps and secure AI practices, participating in penetration tests, vulnerability reviews and audits, and strengthening incident response and recovery. The role mentors team members and requires translating architecture trade-offs into executive-level risk narratives; a degree in information security or computer science is required, and demonstrated experience governing AI-assisted security workflows with accountable human oversight is called out explicitly.

Summary

Client-facing principal advisory seat at a cybersecurity solutions and services provider, acting as the AI security subject-matter expert across the sales portfolio: identifying AI-related security concerns in client environments, designing tailored security solutions, and building AI security strategy and roadmaps with CxO-level stakeholders. It is a quota-carrying pre-sales role — responsibilities include driving services and technology pipeline generation against quarterly and annual quota objectives, following standardized sales operating processes, qualifying and scoping opportunities, proposal management, and identifying cross-sell and upsell across partner relationships. Fully remote and hireable anywhere in the continental United States.

Summary

Security engineering seat implementing and maintaining the information security architecture of a hospital network, including access control and user account administration and the testing and rollout of technical security tools and controls. Hands-on scope spans VPN, RADIUS and TACACS, firewalls, encryption and authentication schemes, wireless, DNS and TCP/IP, routing and switching, intrusion detection, identity management, LDAP and Active Directory, Linux administration and shell scripting, vulnerability assessment and penetration testing. The role also monitors and reports security exposures, participates in system design reviews and third-party product evaluations, and supports access audits and HIPAA-related security documentation.

Summary

A dedicated security specialist seat owning security reviews and posture management for an Azure platform, detection engineering and incident response via KQL detections in Log Analytics and SIEM forwarding, and identity and endpoint security across Entra ID conditional access and a SentinelOne, Defender and Sophos EDR estate. Day-to-day ownership of the SOC 2 Type II program in Drata, covering evidence collection, control monitoring, customer security questionnaires and vendor risk, is paired with the security work. Infrastructure build and operation and Intune device management sit with other staff, so this role defines and verifies the security bar rather than building the platform; it is hybrid in Indianapolis and reports to the Security Lead.

Summary

A senior identity and access management security role at an IT consulting firm, owning the identity security standard that client environments inherit, including the Conditional Access baseline, tiered admin model, privileged access configuration, and phishing-resistant MFA. The work centers on enforcing MFA across client VPN and application access and blocking legacy authentication, making this a cybersecurity and identity-security position rather than software development. It is client-facing consulting work.

Summary

A cybersecurity analyst role centered on threat hunting and daily security operations at a security-hardware manufacturer, triaging spam reports, security alerts, and incidents while proactively hunting for signs of malicious activity across a global environment. The role also involves participating in offensive testing and compliance work; candidates must be U.S.-authorized without visa sponsorship, and the position is hybrid.

Summary

Senior SOC role (Tier 3 escalation) at MSSP EXOS CYBER, owning confirmed security incidents end to end across client environments through advanced detection, incident response, threat hunting, and host/memory/network forensics (Velociraptor, SentinelOne, Entra ID), while QA-ing escalations, mentoring Tier 1/2 analysts, and partnering with engineering on detection strategy against MITRE ATT&CK. Requires 5+ years (or 2+ years past Tier 2). Indianapolis, IN.

Summary

This is a security-engineering role rather than a generic title-only opening. The JD reads like a practical delivery role, so the real fit depends on whether the stated systems and ownership match what you want to build.

Summary

An information assurance / security analyst supporting cybersecurity compliance and risk management for DoD systems. Assesses and validates security controls under NIST SP 800-53 and the Risk Management Framework, supports Security Assessment and Authorization efforts, and performs continuous monitoring and vulnerability tracking. Requires an active DoD Secret clearance and DoDM 8140.03 IAT III/IAM II qualification.

Summary

A senior information assurance / security analyst leading security-control assessment and authorization for DoD systems. Develops and maintains A&A accreditation documentation, conducts vulnerability and compliance reviews under NIST SP 800-53 and the Risk Management Framework, and serves as a subject-matter expert on accreditation processes. Requires an active DoD Secret clearance, DoDM 8140.03 IAT III/IAM II, and around ten years in security.

Summary

Information assurance and security compliance lead responsible for Assessment and Authorization, Risk Management Framework, FISMA and FISCAM audits, and maintaining Authority to Operate and Authority to Connect for federal systems, including managing RMF artifacts such as SSP and POA&M in eMASS. Supervises IA personnel and coordinates with government auditors and stakeholders within DoD and DIA (JWICS) environments. This is a federal governance and compliance focused cybersecurity leadership role.

Summary

Senior technical and program lead over a DoD Cybersecurity Service Provider (CSSP) engineering team, directing security infrastructure engineering such as IDS/IPS, firewalls, endpoint security, ACAS and SIEM (ArcSight), along with vulnerability and patch management, incident response, and STIG and Zero Trust compliance across classified and unclassified enclaves. Work aligns to DoD, DISA and US Cyber Command requirements. This is a government contract role with multi-site oversight and likely clearance requirements.

Summary

Operations lead for a 24/7/365 DoD cyber operations team, directing continuous monitoring, event analysis, incident response and vulnerability management using SIEM (ArcSight) and IDS/IPS across classified and unclassified enclaves. Serves as senior subject matter expert interfacing with government stakeholders and enforcing DoD, DISA and Zero Trust compliance. This is a government contract security operations leadership role with round-the-clock coverage duties.

Summary

Datacenter and cloud infrastructure engineering seat responsible for the design, implementation and operational support of enterprise network segmentation built on Cisco Secure Workload and Broadcom VMware NSX, including developing and maintaining micro-segmentation policies, performing application dependency mapping, analysing workload communications, implementing least-privileged controls and supporting Zero Trust initiatives across cloud and datacenter environments. Broader duties cover virtualisation, cloud platforms, server infrastructure, storage, automation and disaster recovery, with the holder partnering closely with the cybersecurity, network engineering, application and infrastructure operations teams and reporting to a Manager of Information Services. Three to five years of experience is required, hypervisor and scripting experience is required, experience quoting moderately complex solutions with vendors is expected, and cloud plus healthcare experience is preferred.

Summary

Client-facing engineering role in a global consultancy's financial services unit, resolving complex infrastructure incidents with root-cause analysis, assessing client IT estates and producing maturity and improvement reports, and contributing to the design of scalable infrastructure solutions. Further duties cover release and environment readiness, deployment execution and version control, maintenance and upgrade coordination, performance and capacity analysis, and running security checks, recovery drills and compliance audits. Note a scope discrepancy: the opening is advertised as application security engineering while the stated responsibilities describe a broader infrastructure consulting remit at an infrastructure-consultant grade.

Summary

Delivery and project leadership over client cybersecurity operations engagements in a financial services unit, covering project timelines, resource discrepancies, production support, incident resolution, deployment efficiency, change implementation, and quality benchmarks across all project phases. Candidates need breadth across security domains - security operations centre, identity and access management, vulnerability management, network security with firewalls and IDS/IPS, endpoint detection and response, risk management, cloud security, data security, PKI, Zero Trust, and SASE - plus routing and switching knowledge and prior hands-on depth as an SME or consultant in GRC, network security, IDAM, or SOC. The role is heavily client-facing: acting as liaison between technical teams and clients, engaging senior stakeholders, shaping and presenting proposals, and mentoring technology track leads, with prior global systems integrator experience preferred.

Summary

An Oracle Fusion Cloud architecture role in Infosys Oracle practice focused on security and compliance: gathering performance, security, and scalability requirements, evaluating technologies, and designing secure, scalable solution architectures with integration strategies. It carries both a software-delivery and a security-architecture dimension. A client-delivery consultant staffed across several US cities including Indianapolis.

Summary

Information security work inside the Indiana Family and Social Services Administration's Privacy and Security Office, focused on safeguarding client data: developing and maintaining information security standards under State of Indiana IOT and agency policy, performing risk assessments, and running vulnerability management from discovery through assessment, prioritization and remediation. Day to day duties include firewall and access-control changes, monitoring virus and threat reporting, testing data processing systems, documenting security and emergency procedures, handling security violations with the users involved, and delivering security awareness training. The expected background is NIST 800-53 control knowledge, vulnerability tooling such as Rapid7 InsightVM and CrowdStrike, and familiarity with domain structures, user authentication and digital signatures; the posted starting salary is $61,022.

Summary

A briefly described cybersecurity technician role at C2IT Consulting covering practical security operations: running security scans and audits, performing risk assessments and information gathering, resolving security issues, managing and implementing security policies and controls, and running phishing training and remediation. The posting gives few specifics on seniority or stack; Indianapolis.