Open Indianapolis Cybersecurity jobs

Summary

Leads security architecture efforts across all cybersecurity domains for new technology implementations, major system changes and mergers/acquisitions at an insurance and financial-services company, and drives updates to security standards and policies in response to regulatory or business change. The role communicates risk to executive leadership, performs third-party and cloud security risk assessments, serves as subject-matter expert during incident response, and supports SOX, PCI and HIPAA/HITECH compliance. The position is remote-eligible from EST or CST US locations and is not eligible for visa sponsorship.

Summary

Delivers cybersecurity and risk consulting to financial-services clients, leading risk assessments and designing security programs covering identity and access management, cloud security across Azure/AWS/GCP, and data protection. Evaluates IT and application security controls against frameworks such as NIST CSF and NIST 800-53, and advises on emerging technologies including AI security. CISSP or CRISC credentials are relevant to the role.

Summary

This role supports a health insurer's data-at-rest encryption program and cloud database security, onboarding databases, applications and cloud resources into enterprise data-protection and monitoring platforms and performing security event validation, log analysis and operational troubleshooting for those technologies. A substantial automation component runs alongside the security work: Terraform, Ansible, scripting and CI/CD pipelines used to build automated workflows, operational playbooks and infrastructure-as-code, plus entry-level data science concepts applied to security operations visibility. The analyst works across AWS, Azure and GCP with infrastructure, database administration, cloud engineering, DevOps and cybersecurity teams, supports proof-of-concept evaluations of new cloud database technologies, and is required onsite one to two days per week.

Summary

Security engineering for a hospital system, implementing and maintaining the information security architecture: deploying and testing technical security tools and controls, monitoring and reporting threats, reviewing system designs and third-party products, and keeping security documentation aligned with HIPAA. Hands-on scope covers VPN, RADIUS and TACACS, firewalls, encryption and authentication schemes, DNS and routing, intrusion detection, identity management, LDAP and Active Directory, vulnerability assessment and penetration testing, plus Azure, Entra ID and Defender. Three years of IT security experience is required, CISSP or CCNA must be obtained within twelve months if not already held, and the job includes an on-call rotation and hybrid work within 60 miles of the Indianapolis site.

Summary

A cybersecurity-focused ServiceNow role leading the design, configuration, and optimization of ServiceNow capabilities that support security risk, compliance, third-party risk, and PCI assessment processes. Work includes building workflows, data models, control libraries, evidence-collection processes, dashboards, and integrations, and developing enterprise information security policies and standards. This is a hybrid position requiring one to two days per week in-office.

Summary

Cloud security architecture at a health insurer, focused on operationalizing cyber defense across AWS, Azure, GCP, and OCI: ensuring security controls, logging, and telemetry are enabled and validated, and setting the roadmap for CSPM, threat detection, logging pipelines, and incident response integration. The architect develops cloud threat monitoring use cases and trains SOC analysts to triage and remediate the resulting alerts, works complex cloud security events and misconfigurations with incident response, evaluates and onboards vendor technologies, and reviews new cloud, AI, and SaaS services in governance before approval. FedRAMP-compliant architecture design is in scope, and the role is hybrid at one to two days per week in office with a commuting-distance requirement.

Summary

An information security compliance role leading PCI DSS activities across the enterprise, including control interpretation, assessment readiness, evidence review, scope validation, and remediation tracking. The advisor supports ISA/QSA assessments (ROC, SAQ, AOC) and third-party service-provider reviews, and also touches HIPAA, HITRUST, SOC 2, and NIST audit activities. This is a hybrid position requiring one to two days per week in-office within commuting distance.

Summary

A cybersecurity analyst role focused on operational technology, protecting industrial control systems and manufacturing networks rather than traditional enterprise IT. The work involves monitoring and responding to threats across OT environments and helping modernize those systems, drawing on frameworks and standards specific to industrial settings such as ISA/IEC 62443 and the NIST cybersecurity framework. Suited to candidates with a manufacturing or industrial-controls background.

Summary

Consulting role leading the design and implementation of enterprise identity and access management strategy for client organizations across cloud and hybrid environments. The posting covers IAM and zero trust architecture, identity lifecycle and governance, privileged access management, and federation standards including OAuth2, OIDC, SAML, and SCIM, with vendor platforms such as Entra ID, SailPoint, Saviynt, CyberArk, Ping Identity, and Okta.

Summary

Consulting role designing and implementing identity and access management solutions for clients across cloud and hybrid environments. The posting emphasizes authentication and federation standards, identity governance, access reviews and credential provisioning, security assessment and control evaluation against NIST, ISO, and CIS, and integration work with platforms such as Entra ID, SailPoint, Saviynt, CyberArk, Ping Identity, and Okta.

Summary

Security engineering role focused on cyber-physical embedded systems in Rolls-Royce Defense products, working alongside the core systems security and LibertyWorks teams. The work applies secure cyber resilient engineering across the product lifecycle from requirements and design through build, test, production, and support, uses model-based systems engineering and digital modeling, and involves coordination with government customers, suppliers, and industry experts on system security and resiliency requirements. The posting specifies three days a week in the office.

Summary

A product cybersecurity role securing Rolls-Royce products, applying system security engineering to embed cyber security best practices into product design and development for government and commercial programs. It is a technical-specialist and mentoring position spanning threat mitigation, security work-scope planning, and coordination with the firm's cyber security capability team.

Summary

This is a security-engineering role focused on container and host-based network micro-segmentation (Illumio), including hands-on implementation with application teams, maintaining security tooling, and participating in day-to-day Cyber Security Operations Center monitoring and incident response. It is a security-operations and network-segmentation specialty rather than software development. The employer states it will not sponsor work visas, so applicants must already be authorized to work in the US.

Summary

A senior security-operations role at health insurer Elevance Health, leading a SOC analyst shift: serving as the escalation point during security-event investigations and incident response, mentoring junior analysts, and maintaining SOC playbooks and on-call coverage. The work also spans implementing and configuring network-security systems and coordinating security vendors. Hybrid with 1-2 in-office days per week and a stated preference for the Indianapolis office.

Summary

Despite the resilience-focused title, this is an information security senior advisor role covering network security, access control, and secure messaging alongside business continuity, crisis management, and third-party risk management (TPRM). It develops security policies, standards, and incident and crisis response plans and can serve as technical lead on mergers and acquisitions; the position is hybrid with 1-2 in-office days per week.

Summary

Behind the advisor title, this is an information security engineering role centered on network security, access management, and security detection engineering, designing, developing, tuning, and maintaining detections and secure messaging solutions in compliance with enterprise standards. It also leads investigation and reporting of security events, incident-response planning, and level 1-2 incident recoveries. Requires in-office presence one to two days per week within commuting distance.

Summary

A senior cybersecurity engineering and architecture role delivering network security, access control, and secure messaging solutions, plus security policy and standards development and incident-response planning. Also builds detection analytics and ML/behavioral models for threat hunting; hybrid with 1 to 2 in-office days per week.

Summary

An identity-security engineering role centered on privileged access management, primarily implementing and maintaining CyberArk (with SailPoint or Ping as a plus). The engineer designs and supports IAM/PAM technologies, provides 2nd- and 3rd-tier operational support, and ensures identity products meet security policies and standards. Fully remote from any EST or CST US location, requires about 5 years in cybersecurity, and prefers CISSP and SIEM/Splunk experience.

Summary

Despite the cybersecurity framing, this is a SharePoint site design and content role: reviewing, redesigning, and standardizing SharePoint sites for usability and a consistent look and feel, validating and pruning content, and applying information-architecture best practices. Cybersecurity is only the subject matter of the sites being modernized; familiarity with security concepts is merely preferred, and the actual work is SharePoint design and content strategy.

Summary

Principal cybersecurity advisor (AI security) role at Optiv, operating as a client-facing, quota-carrying pre-sales advisor within a Center of Excellence: designing AI-focused security solutions, identifying AI security concerns, driving services pipeline and cross-sell, and advising client executives on AI security strategy and roadmaps. Fully remote within the continental US.

Summary

Dedicated security owner for a legal technology company's Azure platform, running security reviews and posture management through Defender for Cloud, detection engineering and incident response using KQL in Log Analytics, Azure Monitor dashboards, SIEM forwarding and incident.io runbooks, and owning identity and endpoint security across Entra ID Conditional Access, SentinelOne, Microsoft Defender and Sophos. The role also runs the SOC 2 Type II program day to day in Drata, covering evidence collection, control monitoring, customer security questionnaires and third-party risk. It is deliberately scoped as a security specialist position: building and operating the infrastructure stays with the platform team and Intune device management sits with a separate IT hire, so the work is defining and verifying the security bar rather than shipping the platform.

Summary

A senior identity and access management security role at an IT consulting firm, owning the identity security standard that client environments inherit, including the Conditional Access baseline, tiered admin model, privileged access configuration, and phishing-resistant MFA. The work centers on enforcing MFA across client VPN and application access and blocking legacy authentication, making this a cybersecurity and identity-security position rather than software development. It is client-facing consulting work.

Summary

Application security and identity engineering role owning application security across multiple AWS-hosted, GitHub-based environments with escalating control and compliance requirements. Responsibilities include security reviews (data-flow validation, secrets handling, AI/LLM data-loss prevention), production-readiness reviews with threat modeling and SOC 2 mapping, defining identity architecture (Entra ID, AWS IAM, GitHub OIDC), and managing GitHub Advanced Security tooling and SAST/SCA standards. This is a hybrid or US-remote role requiring 5+ years in cloud security with an application security focus.

Summary

A cybersecurity analyst role centered on threat hunting and daily security operations at a security-hardware manufacturer, triaging spam reports, security alerts, and incidents while proactively hunting for signs of malicious activity across a global environment. The role also involves participating in offensive testing and compliance work; candidates must be U.S.-authorized without visa sponsorship, and the position is hybrid.

Summary

Senior SOC role (Tier 3 escalation) at MSSP EXOS CYBER, owning confirmed security incidents end to end across client environments through advanced detection, incident response, threat hunting, and host/memory/network forensics (Velociraptor, SentinelOne, Entra ID), while QA-ing escalations, mentoring Tier 1/2 analysts, and partnering with engineering on detection strategy against MITRE ATT&CK. Requires 5+ years (or 2+ years past Tier 2). Indianapolis, IN.

Summary

A cybersecurity analyst role at a pharmaceutical company, identifying, assessing, and mitigating security threats and implementing solutions to strengthen defenses. The posting's keyword detail spans firewalls, encryption, identity and access management, SIEM, vulnerability management, security automation, cloud security, and systems hardening. It reads as a hands-on security operations and engineering role; the ATS feed exposes limited detail. Indianapolis-based.

Summary

This is a security-engineering role rather than a generic title-only opening. The JD reads like a practical delivery role, so the real fit depends on whether the stated systems and ownership match what you want to build.

Summary

A senior security-leadership role owning TRIMEDX's entire information-security program end-to-end across five pillars: governance, risk and compliance; threat and vulnerability management; identity and access management; application and cloud security; and resilience and incident response. The Director owns the organizational risk register, drives ISO 27001 and SOC 2 Type II compliance, leads the security team, and sets the guardrails for safe use of AI tooling across engineering. This is an accountable program owner — not a risk-flagger — reporting security posture directly to senior leadership.

Summary

Governance, risk, and compliance (GRC) role in MISO's cybersecurity organization, identifying, assessing, and mitigating cyber risks to the power grid and building out the third-party/vendor risk-management program. Works cross-functionally with procurement, legal, and compliance while aligning to NIST frameworks (800-37, CSF, 800-53); certifications such as CRISC, CISSP, CISA, or CISM are a plus.

Summary

A network-security engineering role at insurer Group 1001 in Zionsville, designing, deploying, and maintaining secure network systems and Cisco and Palo Alto security appliances, and setting network-security policy to financial-industry standards. Hands-on security engineering rather than pure analysis.

Summary

An information assurance / security analyst supporting cybersecurity compliance and risk management for DoD systems. Assesses and validates security controls under NIST SP 800-53 and the Risk Management Framework, supports Security Assessment and Authorization efforts, and performs continuous monitoring and vulnerability tracking. Requires an active DoD Secret clearance and DoDM 8140.03 IAT III/IAM II qualification.

Summary

A senior information assurance / security analyst leading security-control assessment and authorization for DoD systems. Develops and maintains A&A accreditation documentation, conducts vulnerability and compliance reviews under NIST SP 800-53 and the Risk Management Framework, and serves as a subject-matter expert on accreditation processes. Requires an active DoD Secret clearance, DoDM 8140.03 IAT III/IAM II, and around ten years in security.

Summary

This is a security-automation and hardening engineering role (DevSecOps): building security automation workflows in Python, PowerShell, and Bash, embedding security checks into CI/CD pipelines and infrastructure-as-code, and automating compliance scanning, vulnerability detection, and configuration hardening against DISA STIGs and CIS Benchmarks. Although it involves substantial scripting, its purpose is security engineering rather than general software development. It is based on-site in Carmel, IN at an electric-grid operator.

Summary

A DevSecOps/SRE leadership role at Allegion, directing an SRE and cloud-infrastructure team — owning reliable infrastructure, CI/CD pipelines, deployment automation, and a new observability platform across the global org. Carmel, IN or Golden, CO; no visa sponsorship. For a hands-on infrastructure and reliability leader.

Summary

Information assurance and security compliance lead responsible for Assessment and Authorization, Risk Management Framework, FISMA and FISCAM audits, and maintaining Authority to Operate and Authority to Connect for federal systems, including managing RMF artifacts such as SSP and POA&M in eMASS. Supervises IA personnel and coordinates with government auditors and stakeholders within DoD and DIA (JWICS) environments. This is a federal governance and compliance focused cybersecurity leadership role.

Summary

Senior technical and program lead over a DoD Cybersecurity Service Provider (CSSP) engineering team, directing security infrastructure engineering such as IDS/IPS, firewalls, endpoint security, ACAS and SIEM (ArcSight), along with vulnerability and patch management, incident response, and STIG and Zero Trust compliance across classified and unclassified enclaves. Work aligns to DoD, DISA and US Cyber Command requirements. This is a government contract role with multi-site oversight and likely clearance requirements.

Summary

Operations lead for a 24/7/365 DoD cyber operations team, directing continuous monitoring, event analysis, incident response and vulnerability management using SIEM (ArcSight) and IDS/IPS across classified and unclassified enclaves. Serves as senior subject matter expert interfacing with government stakeholders and enforcing DoD, DISA and Zero Trust compliance. This is a government contract security operations leadership role with round-the-clock coverage duties.

Summary

A principal-level cybersecurity specialist focused on identity and access management (IAM) at Fortune 100 insurer Liberty Mutual — a senior security role rather than software development. Hybrid with two onsite days across Portsmouth NH, Boston, Plano, Indianapolis or Columbus; no visa sponsorship now or in the future.

Summary

Delivery and project leadership over client cybersecurity operations engagements in a financial services unit, covering project timelines, resource discrepancies, production support, incident resolution, deployment efficiency, change implementation, and quality benchmarks across all project phases. Candidates need breadth across security domains - security operations centre, identity and access management, vulnerability management, network security with firewalls and IDS/IPS, endpoint detection and response, risk management, cloud security, data security, PKI, Zero Trust, and SASE - plus routing and switching knowledge and prior hands-on depth as an SME or consultant in GRC, network security, IDAM, or SOC. The role is heavily client-facing: acting as liaison between technical teams and clients, engaging senior stakeholders, shaping and presenting proposals, and mentoring technology track leads, with prior global systems integrator experience preferred.

Summary

Client-facing IT infrastructure consulting within a financial services delivery unit serving banking, wealth management, and insurance engagements. Listed duties are resolving complex incidents with root cause analysis, evaluating client IT infrastructure and producing maturity and improvement assessments, contributing to scalable infrastructure solution design and technical documentation, executing deployments with version control and post-deployment testing, coordinating maintenance and upgrades, supporting capacity planning, and conducting security checks, recovery drills, and compliance audits, working across onsite, offshore, and vendor teams. Note a scope discrepancy: the title advertises a cyber threat intelligence analyst while the responsibilities describe an Infrastructure Consultant 2 with security work as one thread among many.

Summary

An Oracle Fusion Cloud architecture role in Infosys Oracle practice focused on security and compliance: gathering performance, security, and scalability requirements, evaluating technologies, and designing secure, scalable solution architectures with integration strategies. It carries both a software-delivery and a security-architecture dimension. A client-delivery consultant staffed across several US cities including Indianapolis.

Summary

Entry-level information security role at Indiana's central technology agency, monitoring networks and systems for breaches and intrusions, assisting with vulnerability and risk assessments, and supporting security policy, standards and compliance documentation. Day-to-day work also includes basic troubleshooting of security and network problems and providing technical support to end users installing and using security products. Programming and scripting appear as background knowledge expected of the candidate rather than as the output of the job.

Summary

Front-line security operations at a public hospital system: daily monitoring, first-level analysis and response on phishing email and endpoint alerts, plus resolution of cyber security tickets in ServiceNow. Tooling includes Cisco AMP, Umbrella and Firepower, Cisco email gateway protection and DLP, KnowBe4 phishing simulation and Rapid7 vulnerability scanning. The role also supports the organization's security awareness program and internal and external audit reviews, and expects a computer science degree or two-plus years of equivalent experience with SANS GIAC or similar certifications strongly preferred or earned within a year of hire.

Summary

A briefly described cybersecurity technician role at C2IT Consulting covering practical security operations: running security scans and audits, performing risk assessments and information gathering, resolving security issues, managing and implementing security policies and controls, and running phishing training and remediation. The posting gives few specifics on seniority or stack; Indianapolis.