Top Cyber Security Jobs in Cincinnati, OH

Lead product security architecture and offensive testing, including threat modeling, architecture reviews, penetration testing across web applications, APIs, mobile clients, and cloud infrastructure, secure design definition, code reviews, and remediation validation. Partner with engineering teams on authentication, authorization, data protection, trust boundaries, and cloud-native security while communicating risks and leading cross-functional security initiatives.

Lead design, assessment, and operationalization of secure Google Cloud environments. Advise on GCP security strategy, posture assessments, SIEM/Chronicle integration, CNAPP/CSPM tooling, Security Command Center implementation, Vertex AI security, remediation roadmaps, and delivery of architecture, runbooks, and executive advisory. Mentor consultants and develop repeatable security methodologies.

Lead and deliver Google Cloud security architecture, posture assessments, and operationalization. Advise on GCP security strategy, implement Security Command Center and cloud-native security tooling, integrate findings into SIEM/SecOps, guide AI workload security, produce executive reports and remediation roadmaps, and mentor consultants while driving repeatable methodologies and delivery quality.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Build security tooling and customer-facing transparency systems; oversee SBOM, vulnerability management, vulnerability disclosure, and bug bounty programs. Assess vulnerability severity and exploitability, publish security advisories and CVE records, coordinate disclosures, answer customer security inquiries, and collaborate with Engineering, Product, customers, partners, and security researchers. Apply AI to security workflows and use software engineering and automation practices to improve security processes.

Lead Prelim’s security program across secure SDLC, application and cloud security, IAM, incident response, endpoint management, vendor risk, security reviews, and SOC 2 Type II compliance. Partner with DevOps and engineering, coordinate penetration testing, develop policies and risk roadmaps, manage audits and customer questionnaires, and improve detection and access controls. The role is the company’s first dedicated security hire and requires strong judgment, communication, and hands-on technical skills.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.

Leads security analysis, compliance oversight, risk management, vulnerability assessments, remediation planning, audits, and Authority to Operate activities for a federal CMS program. Reviews architectures and technical designs, integrates security into Agile development, maintains security documentation and metrics, monitors regulatory updates, and advises engineering, operations, and program stakeholders. Develops security policies, supports FISMA and CMS assessments, and delivers security awareness training.

Design and implement automated cloud security controls across multi-cloud environments. Integrate security into CI/CD pipelines, harden infrastructure and IaC, manage IAM and secrets, advance container and workload security, protect AI/ML systems and data, and support monitoring, detection, and incident response for cloud applications.

Conduct ISO 27001 and information security management system audits for assigned clients, managing engagements from contracting and scheduling through planning, assessment, reporting, invoicing, and follow-up. Lead audit teams when needed, mentor junior auditors, maintain client records, coordinate travel, and ensure audits meet BSI, regulatory, scheme, cost, timing, and customer satisfaction requirements.

Owns company-wide security across product, infrastructure, corporate systems, and IT. Responsibilities include fixing authentication and authorization issues, managing keys and secrets, hardening internal tools, improving permissions, contributing to backend engineering, and leading security reviews, incident response, and security tooling. This hands-on role requires broad security expertise, strong software engineering ability, and comfort working in an ambiguous early-stage startup environment.

Owns Microsoft’s Security Compete Program, developing competitive strategy, battlecards, positioning, and objection-handling guidance for AI security offerings. Provides deal coaching, analyzes competitive wins and losses, tracks performance metrics, gathers field intelligence, and delivers executive reporting. Partners across sales, marketing, engineering, product, and regional teams to improve go-to-market execution, strengthen competitive differentiation, accelerate strategic deals, and influence product and field-readiness decisions.

Lead end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develop offensive tooling, implants, and tradecraft; direct AI-driven autonomous agents; discover and exploit vulnerabilities; brief executive customers; provide defensive guidance; collaborate with threat intelligence and blue teams; establish operational standards; and mentor security operators.

Manage security operations and lead a security engineering team defending endpoints, SaaS, infrastructure, and corporate systems. Serve as senior Incident Commander, oversee detection and response using CrowdStrike, conduct cybersecurity risk assessments, and improve vulnerability, patch, access, and configuration management. Build detection coverage across endpoint, identity, SaaS, and cloud signals while partnering with AppSec and technical leaders. Lead the company’s AI security strategy and develop specialized security capabilities.

Conduct third-party security assessments, evaluate vendor controls, document risk findings, and automate governance workflows using Python and coding tools. Configure integrations across ticketing, GRC, and vendor-management platforms; develop risk dashboards and reporting; and partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy. The role also supports security governance process improvements and applies frameworks including NIST, ISO 27001, SOC 2, and PCI DSS.

Build and operate automated security infrastructure across AWS and Kubernetes, including cryptographic-material lifecycles, security telemetry, compliance automation, policy-as-code, threat modeling, and CI/CD security controls. Develop agentic AI workflows using tools such as Claude Code and MCP integrations. Support incident response, review security architecture, automate evidence collection, and partner with engineering, audit, risk, vendors, and clients to improve security posture at scale.

Build and operate reliable security infrastructure across hundreds of AWS environments. Responsibilities include security telemetry and log analytics, OpenSearch, GitOps deployments, Kubernetes and EKS security, cross-account cloud infrastructure, Python automation, AI-assisted engineering workflows, compliance evidence collection, incident support, and on-call operations. The role partners with Security Operations, Risk, and SRE teams to automate manual processes and improve platform resilience.

Leads OT network security engineering across manufacturing sites, translating enterprise architecture into segmentation, firewall, DMZ, access-control, and remote-access implementations. Coordinates production-sensitive cutovers with plant, IT, and safety teams while protecting manufacturing operations. Develops site-specific designs, compensating controls, implementation playbooks, and network documentation. Requires deep ICS expertise, knowledge of industrial protocols and security standards, and 10+ years of OT or industrial network security experience.

Design, build, deploy, and operate enterprise security controls as software products. Develop production code, APIs, backend services, and scalable cloud-based distributed systems while integrating security capabilities into development platforms. Apply test-driven development, continuous integration and deployment, and agile practices. Collaborate with product and engineering teams, evaluate emerging technologies, and improve security, reliability, adoption, and developer experience.

Build, integrate, and operate cloud-native security controls across infrastructure, data platforms, applications, CI/CD pipelines, and enterprise services. Develop CSPM and DLP capabilities, detection logic, automation, and incident-response mechanisms. Integrate controls with SIEM platforms, apply infrastructure-as-code and automated testing practices, and support reliable production operations. Collaborate with platform, application, and product teams to improve cloud security effectiveness and developer adoption.

Lead cybersecurity governance, risk assessments, compliance, and Authorization to Operate efforts for applications, products, and cloud environments. Identify vulnerabilities, manage POA&Ms, assess security controls, support continuous monitoring, coordinate audits, and ensure compliance with federal cybersecurity mandates and RMF requirements. Collaborate with stakeholders and security engineering teams across IAM, SaaS, enterprise IT, and cloud platforms, while leading multidisciplinary efforts in federal environments.

Leads governance, risk, and compliance engagements for clients, including vCISO accounts. Develops security roadmaps, conducts maturity and risk assessments, governs incident response and policies, supports audit readiness, advises on budgets, delivers executive communications, and mentors security advisory staff.

Executes and helps define the information security strategy by leading risk assessments, audits, control testing, policy development, business continuity planning, vendor risk reviews, incident response, and remediation tracking. The role aligns security programs with CIS, NIST, ISO 27001, and SOC 2 frameworks, maintains risk and compliance reporting, and mentors junior security staff while partnering with global business and IT leaders.

Lead enterprise AI security architecture, strategy, governance, and secure-by-design implementation across cloud, hybrid infrastructure, software, and AI/ML environments. Design security patterns for LLM hosting, agentic systems, vector databases, and inference endpoints; translate regulatory requirements into technical standards; review complex architectures; implement AI security guardrails and policy enforcement; advise engineering and product teams; and mentor teams while influencing senior stakeholders.

Lead and develop the Security team while owning the company-wide security and compliance program. Responsibilities include managing SOC 2, PCI DSS, GDPR/CCPA, audits, policies, vendor risk, security awareness, and customer security communications. The role also provides technical direction for security tooling, cloud security, identity and access management, application security, vulnerability management, architecture reviews, and threat modeling.