Open Cincinnati Cybersecurity jobs

Summary

Training and enablement role inside U.S. Bank's Attack Surface Management organization, operating the bank's Cyber Range and owning the curriculum that develops its cyber defense staff. The work includes designing hands-on lab modules on Microsoft Sentinel, detection engineering, AI and LLM security and introductory penetration testing, running cohort-based training programs end to end, and quantifying knowledge gain with pre- and post-course assessments reported to leadership. It partners closely with the global security operations center, threat hunt and incident response teams, and includes maintaining training records sufficient for regulatory and compliance requirements.

Summary

Software engineering at Northrop Grumman Xetron in Cincinnati, part of the Mission Systems sector, developing products for military and intelligence customers that may involve kernel development, reverse engineering or vulnerability research of network and communication systems. Solid development and scripting skills are required, with knowledge of computer networking, embedded programming, modern development environments and software configuration management tools treated as a plus. An active Top Secret clearance is required at start and travel runs about ten percent.

Summary

Software engineering at Northrop Grumman Xetron in Cincinnati, building products that address national security threats for military and intelligence customers. The work may involve kernel development, reverse engineering and vulnerability research of network and communication systems, with essential functions in kernel mode Windows and Linux programming, network programming and analysis of common internet protocols. An active Top Secret clearance is required at start, the opening is for cleared candidates only, and travel runs about ten percent.

Summary

This role supports a health insurer's data-at-rest encryption program and cloud database security, onboarding databases, applications and cloud resources into enterprise data-protection and monitoring platforms and performing security event validation, log analysis and operational troubleshooting for those technologies. A substantial automation component runs alongside the security work: Terraform, Ansible, scripting and CI/CD pipelines used to build automated workflows, operational playbooks and infrastructure-as-code, plus entry-level data science concepts applied to security operations visibility. The analyst works across AWS, Azure and GCP with infrastructure, database administration, cloud engineering, DevOps and cybersecurity teams, supports proof-of-concept evaluations of new cloud database technologies, and is required onsite one to two days per week.

Summary

Hands-on security engineering role operating and tuning web application firewall and edge protection platforms across a global payments environment, covering WAF policies, bot mitigation, API protection, rate limiting and traffic inspection on Akamai and Cloudflare. Roughly 80 percent of the time goes to implementation, configuration, tuning and troubleshooting, with the remainder supporting incident mitigation, and the role carries a rotating on-call schedule of weekday 10am to 10pm shifts and full weekend rotations. It is hybrid three days a week in Cincinnati and is not eligible for visa sponsorship, so candidates must be US citizens or green card holders.

Summary

Senior threat hunting and incident response inside a bank's security program — leading technical analysis of emerging threats, building and testing detection rules with engineering teams, mapping findings to MITRE ATT&CK, and automating hunts, with Jupyter notebooks and AI tooling featuring prominently. Also covers forensic and eDiscovery investigation support and training security operations staff.

Summary

Software engineering at Northrop Grumman Xetron in Cincinnati, part of the Mission Systems sector, developing capabilities against national security threats for military and intelligence customers. Essential functions include kernel mode programming on Windows and Linux in C, C plus plus and assembly, reverse engineering across x86, x64, MIPS, PPC or ARM, vulnerability analysis, and network programming against protocols such as TCP/IP, UDP, HTTP and SSL. A Top Secret clearance is required at start, the opening is open to cleared or clearable mid-level candidates, and travel runs about ten percent.

Summary

Leadership role over an offensive security team delivering web application penetration testing, defense-in-depth assessments that extend beyond the web layer, and red team engagements. The scope also covers security tooling such as Nessus and AttackForge, purple team and continuous validation work, vulnerability management and security governance, KPI reporting, incident response coordination, and vendor, contract and budget accountability, plus people leadership and talent development.

Summary

Senior network security specialist leading a payments company's Secure Web Gateway, Proxy, SASE, and Zero Trust transformation, owning the architecture and engineering of Zscaler (ZIA/ZPA) and Palo Alto platforms (Panorama, NGFW, Prisma Access, Threat Prevention) across a global enterprise, plus IPS/IDS and firewall-adjacent controls. A hands-on technical leadership role with a rotating on-call schedule; requires US citizen or green card holder (no visa sponsorship); hybrid three days per week.

Summary

Lead cyber threat intelligence analyst at a bank, conducting hands-on analysis of threat actors, campaigns, malware, phishing, and financial-sector threats and producing tactical, operational, and strategic intelligence products for security teams and leadership. Maps activity to MITRE ATT&CK and supports threat hunting, detection engineering, incident response, and vulnerability management as a senior individual contributor. Requires working from a US Bank location three or more days per week; no visa sponsorship.

Summary

This is a security-engineering role focused on container and host-based network micro-segmentation (Illumio), including hands-on implementation with application teams, maintaining security tooling, and participating in day-to-day Cyber Security Operations Center monitoring and incident response. It is a security-operations and network-segmentation specialty rather than software development. The employer states it will not sponsor work visas, so applicants must already be authorized to work in the US.

Summary

Product/application security engineer securing the software a payments company builds, explaining detected vulnerabilities to engineering teams, recommending remediation, and writing coded reference implementations for security patterns such as authentication and encryption. Uses SAST/DAST/SCA tooling and threat modeling aligned to PCI, SOC, and GDPR. Hybrid three days per week; requires US citizen or green card holder (no visa sponsorship).

Summary

A senior offensive-security role leading threat-emulation and adversarial-simulation exercises across enterprise networks, applications, cloud, and physical-security domains. Develops custom tools, payloads, and exploits, leads purple-team engagements, and mentors junior operators; expertise with C2 frameworks (Cobalt Strike, Metasploit, Mythic, Sliver) and EDR/XDR evasion expected.

Summary

Security engineering role on the information security team of a clinical contract research organization, designing, deploying and maintaining enterprise security controls across on-premises, cloud and edge environments. The work includes owning platforms such as SIEM, endpoint detection and response and privileged access management, network segmentation and Azure network security, automating security operations through scripting, and serving as the technical escalation point for complex incidents including off-hours coverage for global support. It asks for around four years in IT or information security with at least two in a security engineering role.

Summary

Leading offensive security operations against a major bank's AI/ML systems — adversarial testing of LLMs and model pipelines (prompt injection, data poisoning, model inversion, jailbreaks) alongside traditional red teaming, plus building custom tooling and mentoring red team engineers. A senior technical-authority role requiring 8+ years of relevant experience.

Summary

A fall-2027 IT and cybersecurity co-op at Kinetic Vision blending IT operations with security tasks: three-tier helpdesk support, patch management, Active Directory and cloud-account administration, plus vulnerability assessments, network access control testing, web-security controls, and disaster-recovery testing. A broad systems-and-security learning role for currently enrolled students in good standing.

Summary

A summer-2027 IT and cybersecurity co-op at Kinetic Vision that is mostly hands-on IT operations with a security slant: three-tier helpdesk support, patching via remote administration, Active Directory and cloud-account management, plus vulnerability assessments, network access control, web-security testing, and disaster-recovery planning. A broad systems-administration learning role rather than a pure security-analyst seat. Open only to currently enrolled students in good standing.

Summary

Hands-on penetration testing of Honeywell's own Industrial Automation products — application, network, firmware, and hardware security assessment, with ICS pentesting exposure valued — plus mentoring junior testers and helping automate the testing toolchain. Wants 7+ years of pentest experience (or 5+ plus 2 years of application development), and notes occasional lifting of up to 25 pounds.

Summary

This is a corporate-communications role, not security engineering: a Senior Communications Manager at Procter & Gamble leading executive and crisis communications for Information Security and Technology, including incident-response communications and security-awareness storytelling. It suits a communications professional with security and tech fluency, based at the Cincinnati general offices.

Summary

A security-architecture role at Western & Southern Financial Group in Cincinnati, executing the enterprise security vision and guiding teams to deploy security capabilities aligned to business, technology, and threat drivers. You build and maintain security architecture artifacts such as models and diagrams and lead security consultations for enterprise initiatives. For an experienced security architect in financial services.

Summary

An executive deputy CISO role (Assistant Vice President) at Western & Southern Financial Group leading the Information Security Risk Management and Identity & Access Management teams: directing enterprise security risk governance and reporting, developing and overseeing the IAM strategy (directory services, SAML/SSO/ADFS, MFA, identity management), running security awareness, overseeing vendor due diligence, and owning policy enforcement, budget and staff. It is a senior leadership position; Cincinnati.

Summary

An individual-contributor cybersecurity governance analyst (level III) role at Western & Southern Financial Group: performing risk assessments, security assessments and policy reviews of systems and third-party vendors, conducting vendor security due diligence, supporting IT-audit remediation, ensuring SDLC security tollgates are met, and helping maintain the information-security policy lifecycle. It is a security consulting and compliance role rather than hands-on engineering; Cincinnati.

Summary

A senior cybersecurity governance specialist role at Western & Southern Financial Group leading the team in security strategy and assurance: developing how the firm runs risk assessments, security assessments and policy reviews of internal systems and third-party vendors, managing the vulnerability management program, leading security-awareness efforts, driving IT-audit remediation, and embedding security into the PMLC/SDLC. It is a governance leadership role, including planning penetration testing; Cincinnati.