128 application security jobs at 56 companies in Ohio
1mo
Save
Mark Applied
Hide
1mo
Application Security Engineer
Pennsylvania or Ohio
$126k-$173k/yrRemoteFull Time
SolventumNYSE: SOLV: Provides medical technology and health information software solutions.
7+ YOEBachelor's degree with 7+ years in application security, 3+ years administering DAST tools, experience with AWS/Azure, RESTful API testing (Postman/Swagger), Python scripting, and ability to obtain Public Trust clearance.
DAST, Python, AWS, Azure, Postman, Swagger, Qualys, Tenable, OWASP Top 10, NIST 800-53, FedRAMP, HITRUST, SOC II, GDPR
Federal Reserve System: The central bank of the United States.
0+ YOEIdentify and remediate application security issues across the SDLC; perform penetration testing; knowledge of application security controls, cloud platforms, and OWASP Top 10; varying degree/experience combinations for associate and analyst levels.
Open Web Application Security Project (OWASP) Top 10
Independence or Cleveland or Kansas City or Phoenix or Tampa or Nashville or New Haven or Hartford
HybridFull Time
CBIZNYSE: CBZ: Provides financial, tax, and business advisory services to organizations.
8+ YOECollege degree, 8+ years related experience, expert technical knowledge in application and AI security, ability to lead teams, travel and on-call availability, strong verbal and written communication.
STRIDE, PASTA, MITRE ATLAS, OWASP Top 10, CWE Top 25, SANS 25, Semgrep, CodeQL, SonarQube, Checkmarx, Veracode, Burp Suite, OWASP ZAP, Snyk, Black Duck, GitHub Actions, GitLab CI, Azure DevOps, Jenkins, Microsoft Azure, AWS, Kubernetes, CNAPP, REST, GraphQL, OAuth 2.0, OIDC, SAML, CVSS, NIST AI RMF, EU AI Act, ISO/IEC 42001, MITRE ATT&CK, SBOM, Python, Java, C#/.NET, JavaScript/TypeScript, Go
Medical Mutual: Provides health, life, and disability insurance plans to members.
3+ YOELead design and implementation of application security and DevSecOps practices; embed security in SDLC; experience with SAST/DAST/SCA/IaC/container security, OWASP/CWE, threat modeling, API auth (OAuth2/OIDC/SAML), CI/CD, cloud (AWS/Azure), containers.
Snyk, Wiz, Checkmarx, Veracode, Semgrep, SonarQube, Qualys, Burp Suite, OWASP ZAP, Invicti, OAuth2, OIDC, SAML, Microsoft Azure DevOps, GitHub Actions, Jenkins, GitLab, AWS, Microsoft Azure, Docker, Kubernetes, OWASP Top 10, CWE Top 25, STRIDE, PASTA, FEAC, TOGAF, DODAF, Zero Trust
Chicago or California or Colorado or Florida or Georgia or Illinois or Indiana or Minnesota or Missouri or Montana or New Jersey or New York or North Carolina or Ohio or Oregon or Pennsylvania or South Carolina or Texas or Utah or Vermont or Virginia or Washington or Washington or Wisconsin
$210k-$260k/yrHybridFull Time
NinjaTrader: Provides futures brokerage services and a trading software platform.
7+ YOE7+ years in application/product/security engineering; hands-on threat modeling, vulnerability management, secure design, CI/CD integration, automation using Python/Go; experience with cloud-native AWS/GCP environments.
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yrOnsiteFull Time
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
HuntingtonNASDAQ: HBAN: Provides regional commercial, consumer, and mortgage banking services.
5+ YOEBachelor's degree, 5+ years in application architecture and data engineering within banking/financial services; experience with data warehousing, cloud (AWS, Snowflake), security, Agile, strong communication and problem-solving.
Core Specialty: Provides tailored specialty insurance and reinsurance solutions.
5+ YOEBachelor's degree, 5+ years application development experience, expertise with Microsoft Azure, .NET Core/C#, modern front-end frameworks, API design/integration, CI/CD, Terraform, containerization, security and regulated environments; authorized to work in the U.S.
.NET Core, ASP.NET, C#, REST APIs, React, Angular, Next.js, Duck Creek, Microsoft Azure, Microsoft Azure App Services, Microsoft Azure Functions, Microsoft Azure Container Apps, API Management (APIM), Microsoft Azure Key Vault, Microsoft Azure Monitor, Log Analytics, Application Insights, Datadog, Microsoft Azure SQL, Microsoft Azure Blob Storage, Microsoft Azure Cosmos DB, PostgreSQL, MySQL, GitHub, GitHub Actions, Microsoft Azure DevOps, Docker, Kubernetes, Terraform, Bicep, TypeScript, JavaScript, Confluence
Allied Universal: Global provider of physical security and facility management services.
Must be 18+ (21+ for armed), high school diploma or 5 years verifiable experience, background check and drug screen required, state security licensing as applicable.
Sherwin-WilliamsNYSE: SHW: Global manufacturer and distributor of paints and protective coatings.
High school diploma/GED, experience with computer applications (Microsoft programs), must be 18+ and authorized to work in the U.S. without sponsorship; OPOTA or protection officer credentials preferred; 1 year corporate security experience preferred; experience with card access, CCTV, and alarm monitoring.
Microsoft programs, CCTV, card access, alarm monitoring
City of Columbus: Provides municipal services and public safety for Columbus, Ohio.
2+ YOETwo years experience monitoring cameras or working in public security; patrol and monitor city property, control access, screen visitors, operate radios and alarms, complete reports and use office applications.
WiproNYSE: WIT: Global technology services and consulting for digital transformation.
5+ YOE5-8 years experience in application security with SAST/SCA/DAST, Gitlab & Jenkins integration, AI/LLM scanning, Docker/Helm, cloud management, automation with Java/Python/Groovy, and penetration testing.
New York or Maryland or Tennessee or Vermont or Georgia or North Carolina or South Carolina or Massachusetts or New Jersey or New Hampshire or Kentucky or Virginia or Florida or Delaware or Connecticut or Ohio or Maine or United States or North America
$183k-$312k/yrRemoteFull Time
Cloud Software Group: Provides enterprise cloud infrastructure and data analytics software solutions.
10+ YOESenior presales/security strategist with extensive cybersecurity experience (10+ years), presales background (5+ years), familiarity with application/browser security, IAM and ZTNA, strong communication, and ability to travel.
7+ YOE7+ years in security architecture with deep application/product security experience; enterprise influence; hands-on knowledge of auth, tokens, cryptography, secrets, logging, threat modeling, API security; CI/CD security familiarity; CISSP/CCSP/CSSLP preferred; legal U.S. work authorization required.
SAST, DAST, SCA, GitHub, Jenkins, SAML, OIDC, mTLS, service mesh, API gateway, secrets scanning
The Facilities Group: Provider of facility maintenance, janitorial, and hospitality management services.
Maintain security presence, patrol sites, monitor access, respond to incidents, provide customer service, use basic computer applications, and be authorized to work in the US.
StandardAeroNYSE: SARO: Provides maintenance, repair, and overhaul services for aircraft engines.
5+ YOEBachelor's in IT/security, 5+ years IT security experience (including 3+ years network/system administration), SIEM and endpoint protection expertise, vulnerability management, incident response, MITRE ATT&CK knowledge, SDLC and application security, containerization and DevSecOps, AWS familiarity, authorized to work in the U.S.