Cleveland, OH

Cybersecurity Jobs in Cleveland, OH

13 jobs found

Include remote jobs

9d ago

Cybersecurity Analyst - Risk and Controls

Sherwin-Williams Cleveland, OH 🇺🇸 Remote

Cleveland, OH

9d ago

$82k - $104k/yr Full time Data Security Information Security InfoSec

Apply Now

Job Description

The ER&R Risk Analyst role at Sherwin-Williams is focused on finding, evaluating, and communicating enterprise cybersecurity risk through IT risk assessments. Working across ER&R and Enterprise Technology, you will help prioritize risk, support mitigation planning, and maintain the documentation and policy work needed to strengthen the organization’s cybersecurity posture.

Based in Cleveland, OH (remote), this position supports risk identification across internal and external environments, including privacy and data security considerations tied to business processes, applications, and vendors.

Key Responsibilities

Partner with ER&R and Enterprise Technology teams to identify and contain internal and external risks.
Develop an in-depth understanding of business processes, applications, standard programs, and reports as they relate to privacy and data security.
Lead analysis of complex business processes or issues, quickly connecting business needs with privacy and data challenges.
Conduct risk assessments for new and existing technologies, data processing activities, policy exceptions, and non-compliant third-party vendors.
Spot process improvement opportunities, define improvement requirements, perform detailed analysis, and act as a liaison between business stakeholders and development resources; support communication and training for process changes.
Collaborate with business owners to develop and monitor risk mitigation efforts, ensuring issues are tracked, reported, and resolved on a timely basis.
Communicate with data owners to understand needs and evaluate business solutions.
Work closely with key business personnel across divisions, including domestic and global teams.
Demonstrate ownership and accountability for continuous improvement.
Create informative, well-organized presentations and communicate sensitive topics tactfully.
Apply knowledge of emerging privacy and security laws and best practices to solve business problems.
Lead the development and implementation of cybersecurity policy, standards, and procedures aligned to the organization’s framework, best practices, and objectives.
Work with IT and security teams to help enforce cybersecurity policies and procedures.
Practice creative thinking beyond existing company practices and mindsets.
Facilitate effective team interaction and recognize each team member’s contributions.
Seek and participate in development opportunities beyond required training.
Complete special projects as requested.

Required Qualifications

Bachelor’s Degree (or foreign equivalent). In lieu of a degree, at least 12 years of experience in the field of Information Technology or Business, or a combination of education and experience in IT or Business.
2+ years in IT and/or Business with experience assessing and evaluating business risk.
Leadership, problem solving, critical thinking, decision-making, organizational skills, strong oral and written communication, and the ability to work independently.
Intermediate knowledge of Microsoft Office tools.
Experience working on collaborative teams and motivating others in a team-oriented environment across cultures.
Business knowledge including a working knowledge of SW structure, business processes, operations, and goals (preferred).
Ability to score, calculate, and quantify risk.
Experience with internal control frameworks for IT, information security, IT governance frameworks, and conducting and analyzing risk assessments.
Excellent writing and communication skills, including translating technical concepts into clear, concise policy and standards.
Must be legally authorized to work in the United States without company sponsorship.
Must be at least 18 years of age.

Technologies and Frameworks

Microsoft Office
CISSP, CISA, CRISC
FAIR
NIST Cyber Security Framework (CSF)
NIST Privacy Framework (PF)
AI Framework

Preferred

Experience with IT GRC or an equivalent risk or security management system.
Preferred certifications: CISSP, CISA, CRISC, FAIR, or related certifications.
Knowledge of NIST frameworks including CSF and PF, plus the AI Framework.

Compensation: USD 82,208 - 104,290 per year.

Minimum Experience: 2 years.

View full job page →

14d ago

AI Cloud Security Engineer - Manager

Deloitte Cleveland, OH

Cleveland, OH

14d ago

$135k - $265k/yr Full time Manager Ai Security Application Security

Apply Now

Job Description

Deloitte seeks an AI Cloud Security Engineer, Manager to lead the design, implementation, and security of AI-enabled products, platforms, and cloud environments. This role emphasizes AI security architecture, AI Zero Trust, and secure AI software development across cloud and hybrid deployments.

Key Responsibilities

Lead the design of secure architectures for generative AI, agentic AI, retrieval-augmented generation (RAG), model serving, and AI-enabled enterprise applications, defining security boundaries and AI Zero Trust controls across models, agents, tools, APIs, data, cloud workloads, development pipelines, and runtime environments.
Establish and implement security practices across the AI software development lifecycle, including threat modeling, security gates, model and prompt versioning, evaluation datasets, approval workflows, release criteria, and testing for prompt injection, data leakage, unsafe tool use, model abuse, and policy violations.
Design and implement secure AI workloads across AWS, Microsoft Azure, Google Cloud, and hybrid environments, covering cloud landing zones, network isolation, private connectivity, logging, encryption, key management, data protection, containers, serverless workloads, Kubernetes, and infrastructure-as-code controls.
Direct AI-assisted vulnerability and threat management capabilities to identify, analyze, prioritize, test, and remediate issues across code, applications, APIs, cloud configurations, infrastructure, dependencies, containers, and AI workloads, with human approval and validation before high-impact remediation is deployed.
Build production AI security applications and platforms using full-stack engineering, including user experiences, APIs, backend services, microservices, event-driven workflows, RAG, model integrations, observability, and automated testing.
Lead client discovery and architecture sessions through technical workshops, design reviews, program delivery, production deployment, and operational handoff; manage technical workstreams, mentor engineers, and develop reusable reference architectures, standards, playbooks, and accelerators.

Minimum Requirements

Bachelor’s degree in Information Technology, Computer Science, Artificial Intelligence, Cybersecurity, Computer Engineering, or Software Engineering; or equivalent professional experience in software engineering, AI engineering, cybersecurity, cloud security, application security, or technology consulting.
6+ years of professional experience in software engineering, AI engineering, cybersecurity, cloud security, application security, or technology consulting, including leadership of AI, software engineering, cloud security, cybersecurity, or technology transformation programs.
Hands-on experience with at least one AI platform: Anthropic Claude, Claude Code, OpenAI, Google Gemini, Amazon Bedrock, or Vertex AI.
Experience designing or implementing cloud security architecture, secure application development, DevSecOps, infrastructure security, or AI security controls.
Experience developing and deploying APIs, database-backed services, distributed systems, or cloud applications using Python, TypeScript, JavaScript, Go, or Java, including automated testing, deployment, and observability.
Ability to travel up to 50% on average based on client engagements and served industries/sectors.
Limited immigration sponsorship may be available.

Technologies and Tools

AI and model platforms: Anthropic Claude, Claude Code, OpenAI, Google Gemini, Amazon Bedrock, Vertex AI
Cloud: AWS, Microsoft Azure, Google Cloud
Programming and frameworks: Python, TypeScript, JavaScript, Go, Java, React, Next.js, Node.js, FastAPI, GraphQL
APIs and architecture: REST APIs, GraphQL, Representational State Transfer (REST) APIs, microservices, event-driven systems
Cloud and security automation: Kubernetes, Terraform, Open Policy Agent, Checkov, tfsec, Kyverno
Security testing and scanning: SAST, DAST, software composition analysis, secrets scanning
Additional concepts: RAG

Team Context

Deloitte’s Cyber and Cloud Security teams help organizations adopt emerging technologies securely and at scale.
Professionals collaborate across security architecture, cloud engineering, application security, AI, risk, and technology transformation to design resilient platforms and embed security into how technology is built and operated.
The capability operates at the intersection of AI, cybersecurity, cloud, and software delivery, building reusable platforms, accelerators, reference architectures, and implementation patterns to help clients secure AI innovation from design through production.

Preferred Qualifications

Experience securing Anthropic Claude, Claude Code, OpenAI, Google Gemini, Amazon Bedrock, or Vertex AI in production environments.
Experience designing AI Zero Trust architectures or implementing security controls for models, agents, tools, data, and AI runtime environments.
Experience conducting AI red teaming, adversarial testing, model evaluation, prompt security testing, RAG security testing, or responsible AI control testing.
Experience developing applications using React, Next.js, Node.js, FastAPI, GraphQL, REST APIs, microservices, or event-driven systems.
Experience implementing policy-as-code and infrastructure-as-code security, automated remediation, or related toolchains using Terraform, Open Policy Agent, Checkov, tfsec, Kyverno, SAST, DAST, software composition analysis, secrets scanning, or container security tools.
Experience securing Kubernetes, containers, serverless platforms, cloud-native applications, or software supply chains; or delivering AI, cybersecurity, cloud, or application security solutions for financial services or healthcare organizations.

Compensation and Location

Location: Cleveland, OH (onsite)
Salary range: USD 134,500 - 265,100 per year
You may also be eligible to participate in a discretionary annual incentive program, subject to program rules.

View full job page →

1mo ago

Security Analyst II

Professional Search Group, Inc. Cleveland, OH

Cleveland, OH

1mo ago Closed

Full time Cybersecurity Tools Data Security Endpoint Security

This position is no longer accepting applications (closed Oct 23, 2026).

Job Description

Support security investigations and first-line response across email, identity, endpoint, and network environments.

Responsibilities

Investigate security alerts spanning email security, identity, endpoint, firewall, VPN, and wireless systems
Perform first-line incident response, including initial scoping, evidence collection, and containment using established runbooks
Handle user-reported phishing via the Proofpoint reporting workflow and follow up with reporters
Escalate confirmed incidents with clear, documented findings
Contribute to detection rule and alert notification tuning so valid detections reach the right team
Assist with security configuration reviews and close identified gaps across email, identity, and endpoint controls
Maintain and extend CrowdStrike Fusion SOAR triage automation
Track hardening activities through completion and keep task status visible
Assist with firewall rule reviews, change preparation, and documentation
Support VPN operations and access-related tasks
Maintain network diagrams, inventory, and monitoring
Support configuration backups, health checks, and routine maintenance
Maintain runbooks, SOPs, and troubleshooting guides
Document incidents, investigations, and changes accurately for later reference and reporting
Use approved AI tooling to accelerate analysis, drafting, and research

Requirements

2 to 4 years of hands-on experience in security operations, IT security, or a closely related role
Working knowledge of IP addressing, subnets, routing, and VLANs, including how firewalls and VPNs operate in an enterprise network
Hands-on experience investigating security alerts and reviewing logs from email, identity, endpoint, or firewall systems
Familiarity with SIEM and EDR concepts and the phases of incident response
Ability to run first-line investigation and response with limited supervision
Strong written communication for incident documentation and reporting
Ability to use AI tools such as Claude for analysis, research, and documentation

Technologies

Proofpoint
Microsoft 365
Entra ID
Okta
CrowdStrike Falcon
NG-SIEM
EDR
Fusion SOAR
Palo Alto firewalls
GlobalProtect VPN
Arista switches
Ruckus wireless
Zabbix
syslog
Oxidized
Claude
AI assistant

Preferred (Not Required)

Direct experience with Proofpoint, Okta, Microsoft 365 security, CrowdStrike, or Palo Alto Networks
Scripting with Python or PowerShell
Exposure to SOAR or other security automation
Linux and command-line familiarity
Security certifications such as Security+, CySA+, or equivalent

Growth Path

Senior Security Analyst
Security Engineer

Location: Cleveland, OH (onsite)

Minimum Experience: 2 years

View full job page →

1mo ago

Special Agent: Cybersecurity/Technology Expertise

Federal Bureau of Investigation Cleveland, OH

Cleveland, OH

1mo ago Closed

$103k - $133k/yr Full time Agent Cyber Investigation Federal Law Enforcement

This position is no longer accepting applications (closed Sep 26, 2026).

Job Description

Leverage your cybersecurity and technology expertise to support federal investigations and public safety missions as an FBI Special Agent in Cleveland, Ohio.

Responsibilities

Plan and carry out investigations involving potential violations of federal law, cybersecurity, and public safety
Apply judgment, resourcefulness, and versatility to meet investigative demands
Build and maintain liaison relationships with federal, state, local, tribal, territorial, and international law enforcement partners
Maintain a level of physical fitness to support readiness for law enforcement duties

Requirements

Must be a U.S. citizen
Must be able to obtain a Top Secret Sensitive Compartmented Information (SCI) Clearance
Must be willing to travel as required
Must meet the FBI’s Employment Eligibility requirements
Must hold a bachelor’s degree or higher (preferably in computer science, engineering, data science, information technology, or a related field) from a U.S. accredited college or university

Salary

$103,326.00–$133,200.00 per year
Salary is commensurate with base, locality, and availability pay

Education

Bachelor’s degree or higher

Location and Job Type

Location: Cleveland, OH (onsite)
Job type: Full-time
Work location: On the road

How to Apply

Step 1: Click the “Apply” button to be directed to the FBIJobs Careers website
Step 2: Click the “Start” button to begin; sign in to continue or register with FBIJobs
Step 3: Complete the step-by-step process to submit your interest; you must complete all sections of the form and attach all required documents to successfully submit
Submit a resume noting relevant work experience and associated start and end dates; resume must not exceed two (2) pages
Attach other supporting documents as applicable:
- College transcripts, if qualifying based on education or if there is a positive education requirement
- Veterans: DD 214
- Disabled Veterans: DD 214, SF-15, and VA letter dated 1991 or later
See the site instructions for attaching documents

View full job page →

2mo ago

Lead Cybersecurity Program Analyst

Kurv Cleveland, OH

Cleveland, OH

2mo ago Closed

Full time Cybersecurity Program Cybersecurity Tools Data Security

This position is no longer accepting applications (closed Sep 12, 2026).

Job Description

Kurv is seeking a motivated Lead Cybersecurity Program Analyst to support cybersecurity program development and day-to-day security operations in a developmental capacity. This onsite role in Cleveland, OH initially emphasizes building core program foundations, including asset inventory, ownership, and risk classification aligned to NIST Identify, while strengthening and supporting Kurv’s existing PCI DSS 4.0 program.

As the program analyst, you will contribute to governance and compliance activities, help maintain documentation and evidence for audit readiness, and support operational security tasks such as vulnerability and monitoring workflows. You will also work under the guidance of senior team members, growing toward increased program ownership over time.

Responsibilities

Build and maintain an enterprise asset inventory across systems, applications, vendors, and data flows
Document system ownership, classification, and risk tiering
Support ongoing PCI scope validation and data flow documentation
Assist with mapping and alignment of existing controls to NIST CSF and PCI DSS 4.0
Maintain cybersecurity policies, standards, and supporting documentation
Track updates to the cybersecurity risk register and related governance activities
Contribute to reporting, metrics, and audit readiness efforts
Support vulnerability scanning and remediation tracking
Assist with log monitoring and alert review
Perform file integrity and change validation
Identify and escalate anomalies or control gaps
Support user access reviews and identity governance activities
Assist with cloud security monitoring and configuration tracking (AWS)
Maintain incident response documentation and support incident response exercises
Support ongoing PCI DSS compliance activities through documentation, evidence collection, and coordination
Maintain organized audit evidence repositories and supporting artifacts
Track audit requests, timelines, and deliverables
Assist with preparing standard evidence submissions for audits and reviews
Support security awareness and training tracking
Partner cross-functionally with IT, Engineering, Compliance, and Operations teams
Reinforce alignment between security controls and business processes
Work under senior guidance to learn and contribute to PCI and cybersecurity program ownership over time

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Risk Management, or a related field
Strong analytical, organizational, and documentation skills
High attention to detail and accountability
Clear written and verbal communication skills
Interest in cybersecurity governance, risk, and compliance

Technologies

NIST Cybersecurity Framework (CSF)
PCI DSS 4.0
NIST Identify
AWS
SOC 2
ISO 27001
Security+

Benefits

401(k)
Dental insurance
Health savings account
Vision insurance

Professional Development

NIST Cybersecurity Framework
PCI DSS fundamentals
Foundational cybersecurity certifications (e.g., Security+)
Governance, Risk, and Compliance (GRC) career path

View full job page →

2mo ago

Application Security Associate/Analyst

Federal Reserve Bank of Cleveland Cleveland, OH

Cleveland, OH

2mo ago Closed

$73k - $102k/yr Full time Application Security Information Security Risk Management

This position is no longer accepting applications (closed Aug 30, 2026).

Job Description

As an Application Security Associate or Analyst at the Federal Reserve Bank of Cleveland, you will lead efforts to safeguard the confidentiality, integrity, and availability of web and mobile Treasury Services applications. You will define security requirements, review secure coding, monitor for breaches, and support security testing and awareness across the software development lifecycle.

Location: Cleveland, OH (onsite). This is a full-time, regular, exempt position with a salary range of USD 73,400 to 102,300 per year. Education requirement: Master’s degree.

Responsibilities

Identify security related issues and establish security requirements across all stages of the application development lifecycle.
Review program and development documents to ensure alignment with secure coding standards, guidelines, and security requirements.
Coordinate with developers to enable secure and resilient design, prototyping, development, testing, support, and documentation of moderately complex application software.
Monitor for atypical usage of information system accounts and other abnormalities to identify potential breaches.
Support FISMA initiatives, including updating security plans to fulfill ISSO responsibilities.
Coordinate the identification of security-related issues and definition of security requirements throughout the SDLC.
Perform penetration testing to verify that web applications within Treasury Services are free from vulnerabilities.
Analyze cybersecurity trends and emerging risks, quantify potential impact, and develop actionable application security responses.
Perform other duties as assigned or requested.

Requirements

Educational pathways include: an associate degree with 2 years of related experience; a bachelor’s degree with no related experience; an associate degree with 5 years of related experience; a bachelor's degree with 3 years of related experience; or a master’s degree with 0-1 year of related experience.
Ability to analyze highly complex business requirements.
Thorough understanding of industry-based security controls related to applications, services, and systems.
Knowledge of cloud-based platforms and technologies.
Strong grasp of security controls related to access control, authentication, and auditing.
Demonstrated knowledge of information security industry trends and emerging technologies, especially as they relate to application security vulnerabilities.
Proficient in testing web applications for security vulnerabilities, including those in the OWASP Top 10, and familiar with the tools used for testing.

View full job page →

2mo ago

FBI Special Agent: Cybersecurity/IT Expertise

Federal Bureau of Investigation Cleveland, OH

Cleveland, OH

2mo ago Closed

$103k - $133k/yr Full time Agent Cybersecurity Tools Information Security

This position is no longer accepting applications (closed Aug 26, 2026).

Job Description

The FBI seeks an onsite Special Agent in Cleveland, OH who combines cybersecurity and IT expertise with investigative capabilities to protect national security.

Responsibilities

Plan and carry out investigations into potential federal law violations, cybersecurity incidents, and public safety concerns.
Apply sound judgment, resourcefulness, and versatility to meet investigative demands across diverse cases and scenarios.
Develop and maintain effective liaison relationships with federal, state, local, tribal, territorial, and international law enforcement partners.
Maintain the physical fitness level required to perform law enforcement duties as needed.

Requirements

Must be a U.S. citizen.
Must be able to obtain a Top Secret Sensitive Compartmented Information (SCI) Clearance.
Must be willing to travel as required.
Must meet the FBI Employment Eligibility requirements.
Must have a master's degree or higher from a U.S. accredited college or university.

Technologies

SIEM tools

How to apply

Resume submission: Include relevant work experience with start and end dates; the resume must not exceed two pages.
Other supporting documents:
- College transcripts, if education is qualifying or required.
- Veterans: DD 214; Disabled Veterans: DD 214, SF-15, and VA letter dated 1991 or later.