Open Columbus Cybersecurity jobs

Summary

Leads the security design and risk-assessment approach for Fiserv's enterprise AI program, shaping the reference architectures, risk tiering and guardrail standards the business builds against. Relevant background spans security architecture, threat modeling with methods such as STRIDE, zero trust design, AI security policy and certifications including CISSP and CISM.

Summary

Security infrastructure role on JPMorgan Chase's HPE NonStop security engineering team, configuring and supporting NonStop security products and access controls for the firm's payment platforms. The work spans infrastructure design and troubleshooting of moderate complexity, scripting and automation, and AIOps-style anomaly detection, alert correlation and noise reduction on production systems. Five or more years of applied experience is required, with technology risk and controls compliance experience listed as a preference.

Summary

Senior cyber risk management role informing risk decisioning and supporting controls governance for Fiserv's commercial businesses. Related areas include application and infrastructure security, vulnerability management, validation activities, security documentation and cloud environments, with certifications such as CISA, CISM, CISSP or CRISC relevant.

Summary

Cyber and technology risk managers at Fiserv act as trusted advisors who translate the requirements to be secure, vigilant and resilient into terms business and technology teams can act on, in line with the company's cyber risk appetite. The role draws on information risk management, information assurance and infrastructure security, with certifications such as CISA, CISM, CISSP or CRISC relevant.

Summary

Individual contributor technical lead on the Encryption, Tokenization and Key Management team, designing, deploying and operationally maintaining cryptographic products and services including hardware security modules and security appliances across physical, virtual and containerized environments. Emphasis falls on automating product builds, operational maintenance, and customer integration and onboarding, plus proof-of-concept evaluation of new cryptographic technology and influencing vendor roadmaps. The role also supports audits and compliance evidence gathering, incident technical investigation and root cause analysis, and design decisions that account for blast radius and business resiliency during service changes or denial-of-service events.

Summary

Leads a security team at an electric utility, owning day-to-day operations, service delivery and strategic direction for enterprise access management, including the roadmap, automation opportunities and adoption of a modern access management platform. The work centers on maturing role-based access control across business units, establishing governance for service accounts, APIs, automation accounts and non-human AI agent identities, and supporting SOX and NERC CIP requirements through access governance, reporting and control execution. It is a people-management position with annual O&M and capital budget ownership, and prefers hands-on experience with IGA platforms such as Saviynt or SailPoint.

Summary

Operational technology security role developing and maintaining security standards for manufacturing equipment and industrial control systems, working with IT and business users to keep production systems secure and to support the introduction of new equipment. The work spans risk assessment, vulnerability assessment, access control, asset management systems, technical standards implementation, audits, risk metrics and industry benchmarking, plus development of policy and training material, in an environment of PLCs and industrial robots. It suits candidates with a cybersecurity or engineering background and industrial control systems experience.

Summary

Cyber governance role at Fiserv interpreting and applying cybersecurity frameworks and guidance, including NIST standards and ISO 27001. Related areas include information assurance, PCI DSS, COBIT, gap and trend analysis and compliance dashboards, with certifications such as CISA, CISM, CISSP or CRISC relevant.

Summary

Works across Fiserv's cybersecurity, technology risk management and risk engineering teams to strengthen governance processes, identify control gaps and support risk-informed decision-making. The role blends risk assessment practice with hands-on analytics and automation skills such as Python, SQL, Git and workflow automation, and touches AI and prompt engineering work.

Summary

A senior individual-contributor cybersecurity engineering role at Bread Financial providing technical leadership for security solutions with a focus on AI product security. The work centers on threat modeling, security automation, cloud security architecture, and applying the MITRE ATT&CK framework, with knowledge of AI/ML concepts expected. This is a hands-on technical leadership seat rather than a people-management track.

Summary

Senior individual contributor cyber security engineering role providing technical leadership in the design and advancement of security solutions across complex environments. The named focus is AI detection and response and AI security posture management, alongside threat detection, security controls and automation, cloud security architecture, behavioral analytics, risk management and the MITRE ATT&CK framework, with mentoring part of the remit.

Summary

A senior individual-contributor security architecture role: evaluating cybersecurity principles, processes, and controls, leading assessment of new technologies against existing frameworks, and advising senior leaders during periods of vulnerability as a function-wide subject matter expert. Calls for seven-plus years delivering enterprise-level security solutions, advanced programming ability, and practical cloud-native experience.

Summary

Technology risk and controls role covering the database product line inside JPMorgan Chase's infrastructure platforms organization, working with database engineers to find control deficiencies and drive root cause analysis and remediation. The work is governance rather than engineering: monitoring control effectiveness, issue management, preparing governance reporting for senior management, and reviewing internal standards against regulatory requirements and industry practice. It involves partnering with product owners, business control managers and regulators, and mentoring database teams on risk practices.

Summary

Enterprise cybersecurity architecture role leading the strategy and design of security architecture across on-premises, hybrid, and multi-cloud environments, spanning cloud security, encryption, DevSecOps, threat modeling, and access management. Positioned as a senior architect role (CISSP and TOGAF referenced) rather than hands-on software development.

Summary

A people-management role directing a team of six to eight cybersecurity analysts defending DoD multi-cloud and hybrid infrastructure across AWS, GCP, and Oracle. The lead drives threat intelligence integration into sensors and enterprise SIEMs, oversees alert triage using endpoint telemetry, IDS and IPS, NetFlow, VPC flow logs, and packet data, and acts as the escalation point to customers and USCYBERCOM while authoring investigation reports. The posting advertises a stable five-day, eight-hour shift schedule rather than rotating shift work, and the seat can sit in Columbus OH, Scott AFB IL, or Hill AFB UT.

Summary

Ownership of the enterprise AI governance architecture roadmap and its technical implementation on OneTrust and associated GRC platforms, with the emphasis on integration and strong governance controls. The listed skill set pairs compliance and risk work with hands-on engineering, naming REST API integrations, Python, JavaScript, Power BI, data mapping, traceability, continuous monitoring, PCI DSS, and incident response.

Summary

A network security engineering role designing, implementing, and supporting secure network solutions for a pediatric hospital's enterprise environment. The work centers on Zscaler or similar SASE/SSE platforms, Zero Trust Network Architecture, network segmentation, and secure remote access across on-premises and cloud, along with endpoint security, vulnerability management, and incident response. It requires understanding of healthcare-relevant compliance such as HIPAA, FISMA, and PCI, and includes occasional after-hours support.

Summary

A security analyst role in PNC's Forensic Investigations organization, conducting digital forensic investigations and technical evaluations across the bank, analyzing security data, and supporting incident response and risk mitigation. Suited to candidates with a background in digital forensics and information security.

Summary

An enterprise cybersecurity architecture role leading the strategy and design of security architecture across on-premises, hybrid, and multi-cloud environments at a payments/fintech company. Covers cloud security, encryption, threat modeling, DevSecOps, network security, and identity and access management, with frameworks such as TOGAF and PCI DSS referenced. CISSP and deep security-architecture experience are expected.

Summary

Blockchain security-engineering role building a production digital-asset custody and wallet-orchestration platform at a large bank. Work spans secure key management with multi-party computation, programmable transaction policy engines, multi-chain wallet support across Ethereum, Bitcoin, Solana, and Polygon, and secure RESTful APIs using OAuth 2.0 and JWT. It requires strong Java or Python microservices experience plus hands-on blockchain and applied-cryptography knowledge.

Summary

Security engineering role focused on enterprise cryptography, designing and scaling encryption and key-management solutions, hardware security modules, and data-protection technologies such as Thales CipherTrust, tokenization, format-preserving encryption, and transparent data encryption. It is hands-on across Linux and Windows with heavy scripting and automation (Bash, PowerShell, Python, Ansible) for OS hardening and HSM administration. It is in-office three days a week and explicitly offers no visa sponsorship or transfers.

Summary

A SOC cybersecurity analyst role on Leidos's DISA GSM-O II program, defending Department of Defense networks as part of a 24x7 security operations team. Work involves triaging alerts from endpoints, IDS/IPS, and NetFlow, packet and log analysis, threat-intelligence correlation, and reporting incidents to customers and USCYBERCOM across rotating shifts. An active DoD Secret clearance (with ability to obtain TS/SCI) and a DoD 8570 IAT Level II certification are required.

Summary

Principal technical architect for Privileged Access Management within Wells Fargo's Cybersecurity organization, owning strategy, architecture, and engineering standards for privileged credentials across both human and non-human identities. The work centers on CyberArk (Enterprise Password Vault, Privileged Session Manager, credential providers) plus integration with HashiCorp Vault, Microsoft Entra ID, ServiceNow, and Saviynt, with a focus on eliminating standing privilege and moving to just-in-time access. It is a senior expert-advisor role that shapes PAM strategy for executive leadership.

Summary

Engineering-management role leading a Privileged Access Management organization at the bank, responsible for credential vaulting, secrets management, session control, and least-privilege enforcement for both human and non-human identities. It drives modernization toward automated, policy-driven, API-integrated PAM aligned with Zero Trust, including DevSecOps, CI/CD secrets delivery, ephemeral credentials, and infrastructure-as-code, with CyberArk among the platforms. The role blends security engineering with software automation and team leadership.

Summary

Security-engineering role delivering enterprise-scale security solutions and secure production code at a large bank, with emphasis on threat modeling, vulnerability analysis, and security documentation. It requires C# on .NET 6 or later and SQL Server/T-SQL, familiarity with CI/CD tooling such as Git and Jenkins, and solid information- and network-security knowledge, along with validated use of enterprise-authorized AI tools like GitHub Copilot.

Summary

Security-focused software engineering role designing and operating distributed, cloud-native systems at a large bank while contributing hands-on Java and Python code and embedding security, audit, and compliance into day-to-day engineering. Responsibilities include threat modeling, remediating architectural risk and technical debt, owning production reliability, and on-call incident response. Formal security-engineering training or certification plus several years of applied experience is required.

Summary

A security engineering role combining hands-on software development with cybersecurity, designing and building secure production code and security solutions for internal platform and application teams. Responsibilities include security testing and control validation within the SDLC, coding in Java and Golang, and using enterprise-authorized AI tooling to accelerate vulnerability assessment. Requires formal security-engineering training or certification plus applied coding experience at a large financial institution.

Summary

Software architecture role defining technical target state and building production solutions for perimeter security engineering, middleware platforms, and digital channel systems at a large bank. It carries substantial security-engineering responsibility, including SME leadership on authorization and bot-protection solutions, access-control systems, and security-related system designs, alongside database architecture and mentoring. The posting requires an advanced degree plus five years of experience, or a bachelor's plus seven.

Summary

A hands-on senior security engineer at a health insurer who implements, configures and supports enterprise security solutions across infrastructure, identity, network and endpoint domains. The distinctive angle is a strong systems-and-network engineering background — Active Directory, servers, email, networking — applied to securing and hardening enterprise platforms against established security architecture and standards. This is an implementation-focused security engineering role rather than a policy or GRC position.

Summary

An application-security and DevSecOps architect who serves as the primary technical authority for embedding security across the SDLC at a health-insurance enterprise, owning secure application architecture, DevSecOps pipeline security, and vulnerability management. This is a security-leadership design role focused on reducing risk and enabling secure software delivery rather than feature development.

Summary

A cybersecurity-focused data engineering role building and documenting big-data pipelines that support security engineers, database architects, data analysts, and data scientists. The listed skills span SQL and NoSQL databases, Spark, BigQuery, Kafka, and ETL/ELT alongside cybersecurity and firewalls, blending data engineering with a security-data mission. It can be based in Columbus, Ohio or Alpharetta, Georgia among other US locations.

Summary

This is a security-engineering role focused on container and host-based network micro-segmentation (Illumio), including hands-on implementation with application teams, maintaining security tooling, and participating in day-to-day Cyber Security Operations Center monitoring and incident response. It is a security-operations and network-segmentation specialty rather than software development. The employer states it will not sponsor work visas, so applicants must already be authorized to work in the US.

Summary

An individual-contributor governance role at Bread Financial designing and continuously improving frameworks and controls specifically for AI governance. Responsibilities span model risk management, control design, issue management, and model lifecycle governance, drawing on frameworks such as NIST CSF, NIST AI RMF, ISO 27001, ISO 42001, and OWASP. The role weights executive communication, KPIs, and stakeholder management alongside the technical governance content.

Summary

This role builds AI/ML and generative AI applications aimed specifically at cybersecurity operations, covering threat detection, alert triage, vulnerability analysis, and identity analytics, and embeds secure coding and controls into the delivery pipelines. It expects hands-on software development plus integration with security tooling such as SIEM, SOAR, EDR/XDR, and IAM, along with agentic AI and LLM orchestration experience.

Summary

This is a platform-and-DevOps role rather than a generic title-only opening. The JD points to hands-on work around remote collaboration, so the fit depends on wanting that specific slice of the role.

Summary

Data security engineering role implementing and supporting authentication protocols (SAML, PingID) alongside data loss prevention and endpoint and threat-detection tooling such as CrowdStrike, Tanium, and CyberArk, plus access management and incident response. Certifications like CISSP, CISM, and CISA are referenced; multiple US locations.

Summary

This is a cybersecurity architecture and advisory role reporting to the bank's Cybersecurity Architect Senior Manager, split roughly 40% security architecture, 50% technical leadership, and 10% research and development, designing security solutions for third-party/vendor relationships and setting security direction alongside product and solution architects. It requires 2+ years of cybersecurity architecture experience plus 6+ years each of information-security and technology-delivery experience.

Summary

Security engineering role at a payments company centered on assessing, implementing and supporting network and cloud security technologies. The posting names firewalls and next-generation firewalls, cloud-based proxy solutions, IDS/IPS, DNS security and DDoS protection, with associated skills spanning cloud and application security across AWS and GCP, security assessments, infrastructure-as-code and threat detection.

Summary

A senior cybersecurity engineer at a bank focused specifically on internet proxy and web-filtering operations, integrating automation, application and monitoring systems. The role collaborates with the Cybersecurity Operations Center on security-automation use cases and leans on knowledge of SIEM, SOAR/orchestration, and remote browser isolation or enterprise browsers. It requires 3+ years in proxy/filtering tools, is office-based, does not sponsor visas, and lists a range of 57K to 113K.

Summary

A principal-level cybersecurity specialist focused on identity and access management (IAM) at Fortune 100 insurer Liberty Mutual — a senior security role rather than software development. Hybrid with two onsite days across Portsmouth NH, Boston, Plano, Indianapolis or Columbus; no visa sponsorship now or in the future.

Summary

Security engineering lead role on a multi-disciplinary research team drawing on physics, computer science, electrical engineering and mathematics, covering system security engineering, threat and risk modeling and vulnerability analysis against frameworks such as NIST SP 800-53. The work spans silicon through system level, pairing secure system architecture, defense-in-depth and zero trust design patterns with EDA and Cadence VLSI tooling and scripting in Python, Bash and PowerShell, and includes project leadership and stakeholder management. A DoD Top Secret security clearance is required.

Summary

A software-engineering role at McKesson, a Fortune 10 healthcare company, on Identity and Access Management, building the authentication and access-control systems that secure its healthcare platforms. A backend and security-leaning software role (Columbus, OH).

Summary

Hands-on application security engineer at an insurance-technology company who fixes vulnerabilities directly in the code and drives them through review and deployment rather than just filing tickets. Work spans tuning SAST, DAST, software composition analysis and container scanning, embedding security into CI/CD, threat modeling, and producing audit evidence for SOC 2, NYDFS, and PCI DSS. Remote within the United States, with a developer-enablement and security-champions emphasis.

Summary

Cybersecurity engineering role at a public transit authority in downtown Columbus, covering security design and implementation across network and cloud architectures, intrusion detection, remote access, antivirus and SIEM systems. Duties include threat monitoring, vulnerability assessments and penetration testing, incident response and risk analysis, developing and enforcing information security standards, and supporting audits and local, state, federal and industry compliance requirements. A bachelor's degree in computer science or a related field is required, and the work is based at the agency's High Street offices.