Top Cyber Security Jobs in Columbus, OH

Leads and consolidates a centralized security architecture engineering organization supporting threat modeling, architecture automation, testing, quality, SRE, and DevOps platforms. Owns engineering strategy, technical architecture, capacity allocation, operating standards, delivery quality, production resilience, hiring, staffing, performance management, and career development. Partners with product leadership to prioritize investments, establish measurable outcomes, and align engineering resources with business value and risk reduction.

Leads enterprise email security strategy, architecture, engineering, modernization, and lifecycle management. Oversees phishing protection, threat detection, encryption, DLP, cloud security, incident response, risk remediation, governance, metrics, vendor relationships, and regulatory alignment. Partners with cross-functional stakeholders, presents to executives, leads engineering teams, and applies AI-enabled workflows to improve security analysis and operational effectiveness.

Leads cybersecurity analytics and data visualization strategy, delivering governed KPIs, semantic models, executive dashboards, narratives, anomaly detection, forecasting, and natural-language insight experiences. Partners with data engineering to ensure data quality, lineage, scalability, and performance while implementing access governance, privacy, and change controls. Owns the analytics portfolio roadmap and backlog, drives adoption, establishes quality standards, and mentors analysts and visualization specialists in a regulated financial-services environment.

Leads security engineering efforts by designing secure enterprise solutions, developing and reviewing production code, conducting threat modeling and vulnerability testing, and strengthening security controls. Uses authorized AI tools to accelerate security workflows while validating outputs, protecting sensitive data, and maintaining auditability. Partners with stakeholders to address vulnerabilities and improve resiliency across the SDLC.

Oversee supplier information security issue management and third-party risk remediation. Review assessment findings, validate supplier closure evidence, guide stakeholders on action plans and risk acceptance, and manage issues through closure. The role supports critical and high-risk suppliers, improves supplier management processes, shares best practices, and communicates risk status to senior management across business groups.

Manage supplier information-security issue lifecycles, review assessment findings, validate remediation evidence, guide stakeholders on risk reduction and acceptance, and oversee critical supplier remediation. The role requires collaboration across business groups, senior-level communication, documentation review, process improvement, compliance expertise, and supplier risk oversight.

Leads an enterprise Privileged Access Management engineering organization, overseeing PAM strategy, platform modernization, credential vaulting, secrets management, session control, least-privilege enforcement, automation, and cloud-ready access solutions. Manages engineers, drives DevSecOps and Zero Trust integration, reduces privileged-access vulnerabilities, partners across security and infrastructure teams, provides technical oversight for enterprise initiatives, responds to access incidents, manages resources and budgets, and develops engineering talent.

Leads the architecture, engineering, and lifecycle management of cybersecurity platforms across hybrid cloud and on-premises environments. Develops secure software, automation, infrastructure-as-code, integrations, and CI/CD capabilities for security testing, adversarial simulation, vulnerability research, and cyber-defense validation. Establishes controls for resiliency, access, monitoring, compliance, and recovery; leads troubleshooting and incident response; and partners with cybersecurity, cloud, infrastructure, and enterprise technology teams. Applies AI and large language models to engineering and security workflows while validating security and reliability.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Lead macOS security research, including Endpoint Security API telemetry, malware reverse engineering, attack emulation, EDR bypass research, and proof-of-concept development. Collaborate with Detection Engineering, Product, and Engineering to operationalize findings, track Apple platform changes, improve detection coverage, document risks, and mentor teammates. The role also involves building ephemeral research infrastructure and representing the company through technical publications, speaking, and media engagement.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Leads Motive’s global security compliance, privacy, risk, audit, customer trust, and AI governance functions. Builds integrated controls across ISO, SOC, PCI DSS, FedRAMP, GDPR, and related frameworks; manages audits, privacy operations, international regulatory readiness, customer security reviews, policies, training, and human risk. The role also establishes AI-first automation, AI governance, and a path to FedRAMP while leading a distributed team and partnering across Legal, Engineering, Product, IT, Finance, Sales, and Customer Success.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Lead Runpod’s security organization and own the security posture of its cloud platform, infrastructure, and corporate environments. Responsibilities include security strategy, cloud and application security, SecOps, GRC, compliance certifications, secure software development, threat modeling, vulnerability management, incident response, vendor risk, security automation, and infrastructure security. Build and mentor a distributed security team while partnering with Engineering, Infrastructure, Product, GTM, and Legal to protect customer AI workloads and support scalable growth.

Build and lead product and application security efforts, partnering with Product and Engineering on secure design, development, code reviews, vulnerability discovery, and security guardrails. Develop AI-native security tooling and support incident response, vulnerability management, penetration testing, and security operations. Help establish secure development practices and scalable security systems across Headway’s platform.

Serve as an embedded security partner to business, product, data, and technology teams. Assess architectures, conduct threat reviews, develop secure-by-design patterns, guide SaaS and vendor selection, and translate security requirements into practical controls. Support identity, infrastructure, AI workflows, data strategy, M&A integrations, and automated guardrails while enabling teams through training and collaboration.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Lead cloud security architecture and threat hunting across enterprise cloud environments. Partner with engineering, product, and risk teams to embed secure-by-design controls, conduct threat models and risk assessments, review infrastructure-as-code, develop preventive and detective controls, and operationalize detections with cybersecurity teams. Analyze large datasets, improve alerting and incident-response playbooks, investigate cloud threats, and provide expertise on adversary tradecraft and emerging risks.

Lead design and build secure, resilient cloud-native distributed systems; write Java/Python production code (Spring); perform threat modeling, vulnerability remediation, incident response, and ensure audit-defensible security controls and SDLC practices. Mentor engineers and validate AI-assisted security outputs.

Provides security architecture and enablement across SaaS platforms, APIs, custom applications, data integrations, cloud environments, and AI workflows. Partners with product, engineering, data, architecture, identity, infrastructure, enterprise, and procurement teams to conduct threat reviews, develop secure-by-design patterns, assess vendors, implement guardrails, and manage risks. Translates security requirements into practical solutions, supports enterprise data strategy and M&A integration, and mentors teams as a trusted security advisor.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Leads enterprise data security and information governance by building data intake, catalog, marketplace, classification, lineage, and access-control programs. Translates privacy and security requirements into technical controls, self-service workflows, and governance documentation. Partners with Legal, InfoSec, engineering, product, and data teams to support compliant data use, AI/ML initiatives, and regulatory requirements including HIPAA, GDPR, and CCPA. Measures adoption, turnaround times, and governance maturity across a global SaaS organization.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.