Senior Cybersecurity Engineer

## Senior Cybersecurity Engineer Apply remote type:
On-Site locations:
Columbus, Ohiotime type:
Full time posted on:
Posted 9 Days Agojob requisition :
R-102835
*
* Job Description:

** We're looking for a hands-on Senior Cybersecurity Engineer with strong experience in web application firewalls, cloud security, security operations, and infrastructure security. This is an implementation and operations role, not a pure architecture or policy position — you'll configure, troubleshoot, and run security systems daily, moving fluidly between WAF tuning, cloud controls, SIEM investigations, endpoint incidents, and network troubleshooting. The ideal candidate is a self-starter who spots gaps, proposes practical fixes, and owns them through implementation, while partnering closely with developers, infrastructure teams, auditors, and leadership.

The Senior Cybersecurity Engineer is a fully onsite role in Columbus, Ohio. Remote work is not available. Applicants must be authorized to work in the United States for any employer.
** Responsibilities
* ** Administer and improve WAF platforms — managed/custom rules, rate limiting, bot and API protections, and DDoS controls; investigate blocked requests, attacks, and false positives
* Implement and maintain security controls across GCP, Azure, and other cloud platforms, including identity, network, storage, and logging configurations; identify and remediate misconfigurations and excessive permissions
* Support application security and Dev Sec Ops  practices across the development and deployment lifecycle, including risk review of APIs, SaaS, and AI-enabled applications
* Manage EDR (Crowd Strike) and anti-ransomware (Halcyon) protections; operate SIEM/SOAR (Google Sec Ops), building alerts, detections, dashboards, and response automation
* Lead incident investigation, containment, remediation, and recovery; maintain IR playbooks; perform threat hunting, forensics, and root cause analysis; manage threat intel via Recorded Future
* Run automated penetration testing and attack path analysis (Node Zero); validate findings and drive remediation across web apps, APIs, cloud, and internal/external infrastructure
* Administer Zscaler in support of the zero trust model; configure and troubleshoot firewalls, segmentation, VPN, and remote access; co-manage VMware and Linux server environments; monitor via Zabbix
* Maintain compliance with PCI DSS, GDPR, and related frameworks; support audit prep and evidence gathering; own the Risk Register; translate compliance requirements into technical controls; run security awareness training via Know Be4
* Administer and secure Google Workspace identity — MFA, access controls, account lifecycle, least privilege — and investigate suspicious sign-ins and identity-related alerts
**** Qualifications
* **** Hands-on experience administering a web application firewall (e.g., Cloudflare or similar enterprise platform)
* Strong understanding of web security fundamentals: HTTP/HTTPS, DNS, TLS, APIs, OWASP risks, bot activity, rate limiting, and DDoS
* Experience implementing security controls in GCP, Azure, or another public cloud, including identity, network, storage, and logging
* Experience with EDR/XDR platforms (e.g., Crowd Strike) and operating SIEM/SOAR tools for security investigations
* Experience with vulnerability management, penetration testing, threat hunting, and incident response
* Working knowledge of Linux and Windows administration, networking, firewalls, and zero trust/hybrid infrastructure
* Experience supporting PCI DSS, GDPR, or similar compliance and privacy frameworks
* Strong communicator who can work independently and partner effectively with technical and business stakeholders
**** Preferred Experience
***** Direct experience with…