Open Cleveland Cybersecurity jobs

Summary

A senior infrastructure engineering role supporting PNC's enterprise-scale email platform, centred on monitoring and maintaining Proofpoint systems. The work includes email flow and SMTP configuration, the sender authentication layer of SPF and DMARC, leading technical projects, documenting process and change, and responding to email-borne security events.

Summary

A security operations centre analyst role at PNC, triaging and responding to security alerts, supporting SIEM and endpoint detection and response operations, and assisting with incident response and risk mitigation. This is an overnight shift position, Saturday through Tuesday from 10pm to 8am Eastern.

Summary

A security operations centre analyst role at PNC, evaluating and responding to security alerts, supporting security incident and event management, and assisting with risk mitigation across the bank's security technologies. This is an overnight shift position, Tuesday through Friday from 10pm to 8am Eastern.

Summary

Security leadership role reporting to the CISO, owning the strategy, architecture and execution of the security engineering and operations program and leading an AI-enabled Security Operations Center covering threat detection, exposure management, posture management, incident response and digital forensics, with ownership of SOC KPIs including MTTD, MTTR and SLA adherence. The role directs the design of enterprise security systems including zero trust architecture, network segmentation and identity security, drives offensive and defensive operations such as red team engagements and blue team resilience, and owns distributed vulnerability management with risk-based prioritization frameworks and release gates. It also sets departmental strategy, roadmap and budget and builds a management bench; the position is US remote and spans multi-cloud AWS, Azure and GCP environments with CNAPP and CSPM tooling.

Summary

Application security engineering role identifying and mitigating application security risks across the software development lifecycle. The work involves evaluating vulnerabilities, guiding remediation, and working with development teams on secure coding for Java and .NET applications.

Summary

An enterprise security architecture position defining and governing security reference architectures, frameworks and design standards, and reviewing security designs for applications, infrastructure, cloud services and third-party integrations. The work includes threat modeling, security risk assessments and architectural risk reviews, and guiding solutions across identity and access management, network security, cloud security, application and API security and data protection under secure-by-design and zero-trust principles. Preferred candidates bring seven or more years in security engineering or architecture, familiarity with platforms such as Zscaler, CrowdStrike, Microsoft Sentinel, SailPoint and CyberArk, and certifications such as CISSP or CCSP; the opening does not offer visa sponsorship.

Summary

Lead engineer and primary technical owner of a Saviynt-based identity governance and administration platform, responsible for platform architecture, configuration and production readiness, joiner-mover-leaver lifecycle processes, access requests, certifications, provisioning logic and SaaS connectors and integrations. The role designs and enforces security controls including Conditional Access, Zero Trust principles and periodic access reviews, drives root-cause analysis and post-go-live stabilization, mentors junior engineers and shapes the long-term IGA roadmap. Seven or more years of IT experience with identity governance depth is required; candidates must be a US citizen or green card holder intending to naturalize, and must work full time on site within 50 miles of the employing Reserve Bank.

Summary

A cloud security engineering role at PNC, partnering with platform and business teams to strengthen security controls across Azure and AWS and to build the dashboards that report on them. The work centres on Azure Defender, Prisma Cloud and Cortex Cloud in a CNAPP context, and extends into access control, network security, disaster recovery planning, control-owner and RCSA responsibilities, and vendor management.

Summary

First dedicated application security hire, responsible for standing up and leading the application security function: owning the strategy, reference architectures and secure design patterns for web, mobile, API, microservices, serverless and AI-enabled applications, and driving the move to a mature secure SDLC with DevSecOps controls. The role automates SAST, DAST, SCA, container image scanning and secrets detection, sets vulnerability remediation SLAs, and acts as the security partner to the AI engineering team on LLM guardrails, RAG pipelines, agent tool permissions and vector database security aligned to the OWASP Top 10 for LLM applications. It is a hybrid position expecting around eight years of experience, with travel as required by the business and on-call availability.

Summary

First dedicated product security hire, owning the enterprise product security strategy, reference architectures and secure-by-design standards across web, mobile, API, microservices, serverless and AI-enabled applications. Hands-on work includes leading the transition to a secure SDLC with embedded DevSecOps gates, operationalizing SAST, DAST, SCA, container scanning and secrets detection, and hardening AI model configurations, system prompts, tool and function calling permissions, content filters and vector database access for the AI engineering team. The position is hybrid, expects roughly eight years of experience, and includes travel as required plus on-call availability.

Summary

An operational-technology security role: the engineer coordinates development, implementation and onboarding of digital solutions for industrial automation environments and supports customer adoption of cybersecurity controls, including technical support and training delivery. The listing points at ICS and SCADA systems and protocols such as Modbus and OPC, measured against IEC 62443, NIST and ISO/IEC 2700x, covering risk assessment, access control, vulnerability and patch management, network monitoring, backup and recovery, and incident response.

Summary

Senior incident responder on Eaton's cyber security incident response team, investigating, containing and remediating threats across on-premises, hybrid and multi-cloud estates as well as operational technology environments. Beyond response the role builds detection engineering, SOAR playbooks and agentic AI automation to scale the security operations center, and runs proactive threat hunting against emerging indicators of compromise. The position includes 24/7/365 on-call rotation coverage.

Summary

A threat-analysis and supervision-support seat rather than a corporate SOC role: the analyst works with the Cleveland Fed Cybersecurity Analytics Support Team, supervisory staff, and Board of Governors staff on ongoing cyber incidents at supervised financial institutions and on emerging threats to the US financial sector. Expected depth spans NIST 800-53 and the Cybersecurity Framework, ISO 27001, MITRE ATT&CK, threat-actor tracking, cloud provider security, and incident response. Access to confidential supervisory and FOMC information limits the role to Protected Individuals under US federal immigration law and requires an enhanced background check.

Summary

Product cybersecurity engineering role (level II) analyzing software and hardware for vulnerabilities, executing secure software development and maintenance, and collaborating with product development teams on secure design, spanning penetration testing, threat modeling, vulnerability scanning, and code reviews across Java/Python/Ruby/Bash and embedded and Linux platforms. Onsite in Mentor, Ohio.

Summary

Engineering management role for product and platform cybersecurity at a medical technology manufacturer, coordinating with product development and implementation teams on security specification, development and verification. The associated skills point at product and embedded security rather than corporate IT security: cryptography and encryption, embedded operating systems, Linux, routing protocols, web services and application security.

Summary

Application security role providing technical evaluation in threat modeling and vulnerability remediation, guiding development teams toward secure software. Hands-on scope includes OWASP, API security, secure design, SAST, DAST, RASP, penetration testing, and CI/CD pipeline security across AWS, Azure, and GCP. Specialist position embedded with development teams rather than a general SOC role.

Summary

An information security engineering role covering third-party/vendor risk assessments (including AI vendors and AI/MCP integrations), security automation and detection engineering, monitoring, incident investigation, and security guidance. Much of the work leans on scripting and automation (PowerShell, Bash) and secure-by-design guidance aligned to OWASP (including the LLM and Agentic Top 10) and MITRE ATLAS. A professional security certification such as CISSP is expected.

Summary

Security operations center analyst role detecting, investigating, and mitigating threats using SIEM and EDR tooling. Core work covers incident response, threat detection, security event management, and endpoint detection and response within PNC's technology organization. The posting specifies a fixed Tuesday-through-Saturday, 7am to 3:30pm EST shift.

Summary

A hands-on senior security engineer at a health insurer who implements, configures and supports enterprise security solutions across infrastructure, identity, network and endpoint domains. The distinctive angle is a strong systems-and-network engineering background — Active Directory, servers, email, networking — applied to securing and hardening enterprise platforms against established security architecture and standards. This is an implementation-focused security engineering role rather than a policy or GRC position.

Summary

An application-security and DevSecOps architect who serves as the primary technical authority for embedding security across the SDLC at a health-insurance enterprise, owning secure application architecture, DevSecOps pipeline security, and vulnerability management. This is a security-leadership design role focused on reducing risk and enabling secure software delivery rather than feature development.

Summary

A security architecture role at a bank, designing security solutions and controls across cloud and on-premises environments. Work covers security frameworks such as NIST and ISO 27001, encryption, identity, network security, and intrusion detection and prevention rather than application development.

Summary

This is a security-engineering role focused on container and host-based network micro-segmentation (Illumio), including hands-on implementation with application teams, maintaining security tooling, and participating in day-to-day Cyber Security Operations Center monitoring and incident response. It is a security-operations and network-segmentation specialty rather than software development. The employer states it will not sponsor work visas, so applicants must already be authorized to work in the US.

Summary

Product security manager role defining and governing a corporate Secure Development Lifecycle program across all product teams — from embedded systems to cloud services — at an industrial automation company. Leads a team of security engineers, establishes third-party supplier security expectations, and works DevSecOps and cloud security; a hybrid role requiring US work authorization with no visa sponsorship.

Summary

This role designs and operates enterprise data-loss-prevention controls using Symantec DLP and Microsoft Purview, handles data classification/labeling and insider-threat investigations, and supports regulatory compliance for PNC. Despite the generic 'Security Specialist' title, this is a senior data-protection/DLP engineering position based in Cleveland or Pittsburgh.

Summary

A senior security analyst role at a health system, operating deployed security products and supporting the information-security program, incident evaluation, and investigations. The work requires competence with at least two security products from a broad set (SIEM, UEBA, DLP, IAM, firewall, IDS/IPS, threat intel) plus healthcare HIPAA privacy knowledge. Requires a bachelor's degree (or equivalent experience); advanced security certifications like CISSP or CEH are preferred.

Summary

A senior principal role focused on secure software delivery at a bank — CI/CD, DevSecOps, and notably secrets management in support of an enterprise-scale remediation effort. The work mixes JavaScript and Go development with shell scripting, Linux and Windows administration, containerization on Kubernetes/OpenShift, and incident response and application support duties. For an engineer who wants platform-security and automation ownership at the top individual-contributor rungs.

Summary

A web-application-security engineering role at Parker Hannifin owning enterprise Web Application Firewall and edge security (Akamai) for high-traffic ecommerce applications and APIs, monitoring traffic, tuning WAF configurations, and integrating protections into CI/CD. It is a hands-on WAF and edge-security operations seat balancing security with availability.

Summary

A senior security architect role at a financial institution, leading the design and governance of cloud and AI security. The work covers security architecture and standards, risk assessment, access control, AI security governance, network and physical security, and disaster recovery planning. The excerpt is short and reads mostly as a skills list.

Summary

An application security role at the Federal Reserve Bank of Cleveland supporting Treasury Services applications (Pay.gov, Debit Gateway, and related systems), responsible for secure SDLC oversight, penetration testing, FISMA compliance support, and monitoring for anomalous access patterns. U.S. citizenship is required; the position is available at either an associate or analyst level depending on experience.

Summary

A Senior Identity & Access Architect role at OEConnection designing enterprise IAM across on-prem, hybrid, and cloud using Active Directory, Microsoft Entra ID, and Okta, plus MFA/passwordless, federation, and RBAC/ABAC. Based in Atlanta, Austin, or Cleveland. An enterprise identity-platform architecture role.

Summary

Security Engineer (Cryptographic Engineer for Post-Quantum Cryptography) at PNC — advances post-quantum cryptography, PKI, key management, hardware security modules, and cloud-security work tied to PCI, FIPS, and NIST guidance. Specialist role inside a bank's information-security organization.

Summary

A SOC security-analyst role at PNC investigating incidents with SIEM and EDR and mitigating risk. Note the fixed shift: Sunday through Thursday, 3:00pm to 11:30pm EST, a hands-on security-operations seat best for analysts open to evening hours.

Summary

Pittsburgh Security Engineer (Cloud Security Controls) — protect PNC's public-cloud workloads across Azure and AWS using automation, compliance tooling, and CI/CD-integrated security controls. Python/PowerShell/Bash plus SQL and Git. Senior IC who also mentors junior staff.

Summary

A hands-on security operations role at MetroHealth running the day-to-day controls of the health system's information-security program, operating SIEM, DLP, IAM, vulnerability, and endpoint tooling plus incident investigation and security-awareness content. It is an operational defender position requiring competency with at least two security products, with healthcare-specific HIPAA privacy obligations rather than policy or architecture. On-site in Cleveland; advanced certs such as CISSP, SSCP, or CEH are preferred.

Summary

A senior, hands-on cybersecurity engineer providing technical leadership across identity and access management, network and platform security, encryption, logging, and hardening, and leading risk assessments, threat modeling, vulnerability management, and penetration testing across global environments. It maps controls to ISO 27001 and NIST frameworks and embeds security into CI/CD and system design.

Summary

A security engineer at Lubrizol (Cleveland area) ensuring confidentiality, integrity, and availability through security architecture and operational controls - IAM, network and platform security, encryption, hardening, vulnerability management, threat modeling, and pen testing across global cloud and hybrid environments. It maintains alignment with ISO 27001 and NIST and embeds security into CI/CD. A fit for an experienced security engineer who works secure-by-design across enterprise systems.

Summary

Individual contributor data protection role in the information security function of a specialty chemicals company, delivering data loss prevention monitoring, response and reporting services. Responsibilities include policy creation and tuning on enterprise DLP and CASB platforms, incident analysis and investigation support, data taxonomy design, labeling and classification, usage and infringement reporting for stakeholders such as the SOC, legal and compliance, and advising on how GDPR, HIPAA and PCI DSS shape controls. Requires five or more years of related experience including three or more building and managing DLP, and the role is hybrid with four days in the office in either Wickliffe, Ohio or Deer Park, Texas.

Summary

Cybersecurity operations lead for operational technology at a manufacturer, protecting industrial control systems and MES platforms across plant environments. The work covers implementing secure baselines, driving segmentation and secure architecture across hybrid IT and OT networks, remediating vulnerabilities in legacy and modern systems including PLCs, HMIs, drives and network devices, integrating OT telemetry into enterprise monitoring and SIEM, and aligning to IEC-62443 and NIST 800-82. It includes an on-call rotation for incident escalations and asks for ten or more years of experience with OT and industrial control systems.

Summary

Lead engineering role at Cleveland-Cliffs consolidating source control and CI/CD onto GitHub across a large multi-platform engineering estate, and embedding secure SDLC practices such as SAST, DAST, dependency scanning, secret detection and code scanning into every pipeline. The work is hands-on: designing GitHub Actions pipelines, writing build and deployment automation in NodeJS and C#, administering DevOps infrastructure and container registries, and creating reusable templates so secure-by-default is the easy path for developers. The position must be worked full-time onsite and is not eligible for visa sponsorship.

Summary

A senior (Tier 3) security-operations-center analyst role at AgileBlue, a Cleveland-area cybersecurity firm delivering SOC-as-a-service and SOAR-based managed detection and response. As the top analyst tier, the position generally handles the most complex investigations and incident response. Note: the listing exposes only a title and a link to the full job description, so detailed responsibilities are not present in the posting.

Summary

A mid-level (Tier 2) security-operations-center analyst role at AgileBlue, a Cleveland-area provider of SOC-as-a-service and SOAR-driven managed detection and response. At this tier the analyst typically investigates escalated alerts and drives incident triage beyond first-line monitoring. Note: the listing provides only a title and a link to the full job description, so further specifics are not in the posting itself.

Summary

An entry-level (Tier 1) security-operations-center analyst role at AgileBlue, a Cleveland-area cybersecurity vendor offering SOC-as-a-service and SOAR-based managed detection and response. As the first tier, the analyst would monitor and triage security alerts and escalate confirmed threats. Note: this listing exposes only a title and a link to the full job description, so specifics beyond the role level are not in the posting.