Top Cyber Security Jobs in Columbus, OH

Own Fetch’s information security function, including vulnerability management, application security, incident response, forensics, security architecture, GRC, compliance, third-party risk, AI governance, and security awareness. Serve as incident commander and senior technical authority, mature the security program, lead audits and executive reporting, manage security risks, and hire and develop the Security Engineering team.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

Implement and maintain Microsoft identity solutions (MIM/Microsoft FIM, ADFS, Azure AD), build custom MIM customizations and PowerShell automation, integrate SSO/federation, troubleshoot identity services, collaborate across OS/DBA/app teams, and support migration to cloud-based identity solutions.

Protect the firm from cyber threats by leading threat program initiatives, implementing security capabilities, developing incident response/escalation procedures, performing vulnerability remediation (especially web apps), and applying risk assessment, intrusion detection/prevention, and counter-threat operations.

Lead security architecture for products and platforms: develop standards, reference architectures, and design patterns; translate requirements into secure architecture blueprints; evaluate threats and emerging tools; provide governance and review guidance; integrate secure design and DevSecOps practices to meet regulatory and business needs.

Design, develop, and deploy cloud threat detection for AWS and GCP; integrate and normalize cloud telemetry into the enterprise SIEM; create and tune detections, dashboards, and alerting; map detections to MITRE ATT&CK; run adversary emulation and purple team exercises; produce SOPs, runbooks, and investigator playbooks; train SOC analysts; provide escalation and on-call support for cloud security incidents.

Lead and execute security governance, risk, and compliance activities including SOC 2 and regulatory compliance audits, internal control testing, GRC platform administration, enterprise risk register maintenance, remediation tracking, and cross-functional policy and questionnaire support. Produce audit reports, dashboards, and risk reporting to leadership.

On-site security consultant to monitor networks and systems, respond to alerts/incidents, perform event correlation and forensics, fine-tune SIEM rules, support users and IT groups, and contribute to process improvements in a 24/7 operations environment.

Investigate and remediate embedded firmware vulnerabilities, analyze firmware packages and exposed interfaces, support secure boot/firmware signing and update validation, conduct threat modeling and risk assessments, manage vulnerability response workflows, maintain SBOMs and supplier security documentation, ensure compliance with cybersecurity standards, and collaborate with firmware, QA, and compliance teams on security testing and release readiness.

Implements, supports, and optimizes SIEM, SOAR, security telemetry, and data pipelines. Responsibilities include log onboarding, parsing, normalization, detection rule development and tuning, data quality validation, troubleshooting, automation, architecture review support, documentation, and continuous improvement. The engineer works in a client-facing consulting environment under senior guidance and supports multiple security operations platforms and environments.

Perform and lead nuclear power plant cyber security implementation and assessment activities: develop DA/CDA lists, CDA assessments, walkdowns, testing, CSAT presentations, specifications, design criteria, equipment selection, and digital device configuration. Work on project teams, ensure NRC regulations and industry codes/standards compliance, and provide cyber documentation for critical digital assets. Requires prior plant CSS qualification and ability to obtain/maintain unescorted plant access.

Provide SAP security and controls expertise for risk transformation engagements, including segregation-of-duties assessments, security role design, GRC automation, IT audits, and SAP automated control implementation and testing. Serve clients throughout implementation and operations, communicate status, and support deliverable management.

The Product Security Engineer partners with Engineering and Product teams to embed security throughout the development lifecycle. Responsibilities include threat modeling, architecture and security reviews, vulnerability validation, remediation planning, security-tool ownership, automation, secure coding guidance, incident response, and assessing risks in cloud and AI-enabled products. The role requires strong application security, identity, authentication, authorization, coding, communication, and cross-functional collaboration skills.

Serves as the endpoint security subject-matter expert for support, Sales Engineering, and Customer Success. Diagnoses complex Windows and macOS endpoint issues, analyzes telemetry and logs, troubleshoots integrations with EDR, DLP, and MDM products, and provides prioritized customer recommendations. Partners with Engineering and QA on defect investigation and validation, maintains lab capabilities, and creates runbooks and documentation. The role also enables field teams to explain endpoint findings and improve customer outcomes.

Own Tribe’s corporate security, compliance, AI governance, and client-facing security programs. Lead SOC 2 and future certification efforts, enterprise security reviews, risk management, security controls, incident response, vendor risk, and Trust Center operations. Establish governance for AI agents, assistants, model providers, and subprocessors while partnering with engineering on architecture reviews, threat modeling, secure SDLC, data flows, and production readiness. Translate customer requirements into scalable security controls and operating processes.

Serve as the senior network-security subject-matter expert for support, sales engineering, and customer success. Review firewall rules, segmentation, controls, and product findings; troubleshoot integrations across enterprise network-security platforms; diagnose issues using packet captures, flow data, logs, and protocol behavior; and provide actionable root-cause guidance. Partner with Engineering and QA on defects and fixes, maintain network test capabilities, and author runbooks and documentation. Coach sales engineers and help harden the product through escalations and feedback.

Build and maintain cloud security improvements across AWS/GCP, Kubernetes, and CI/CD environments. Design detection and response capabilities using SIEM, EDR/MDR, cloud-native detections, and CNAPP tools. Investigate and respond to security incidents end to end, develop detection logic and playbooks, and create security tooling and automations using Python, Terraform, and infrastructure-as-code. The role also supports endpoint security and secure DevOps practices.

Own and mature Neumo’s Governance, Risk, and Compliance program, including SOC 1, SOC 2, and PCI DSS audits, risk registers, data governance, control automation, vendor assessments, and exception processes. Manage 1–2 direct reports, coordinate remediation, leverage AI/LLM tools, participate in incident management, and communicate compliance posture and risk trends to executives and the board.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Own technical pre-sales for enterprise AI security: lead discovery, design demos, execute end-to-end POCs, partner with AEs, surface product feedback, and advise customers on complex technical decisions.

Lead product marketing for Keeper's cybersecurity products: define messaging, positioning and use cases; execute cross-functional launches; create content and SEO-optimized assets; coordinate webinars and partner co-marketing; gather customer feedback and conduct market and competitor research to drive awareness and pipeline.

Lead security initiatives by establishing secure development practices, conducting security reviews, as well as managing threat modeling and security assessments.

The fellowship provides military spouses and separating service members with cybersecurity training and hands-on experience through projects and vendor training, aimed at enhancing their security skills.