... DevOps. * Deep, hands-on AWS cybersecurity engineering: Organizations/Control Tower, SCPs and tag policies, IAM Identity Center, KMS key policy design, S3 hardening, Lambda runtime lifecycle, VPC ...
... DevOps. * Deep, hands-on AWS cybersecurity engineering: Organizations/Control Tower, SCPs and tag policies, IAM Identity Center, KMS key policy design, S3 hardening, Lambda runtime lifecycle, VPC ...
... DevOps. * Deep, hands-on AWS cybersecurity engineering: Organizations/Control Tower, SCPs and tag policies, IAM Identity Center, KMS key policy design, S3 hardening, Lambda runtime lifecycle, VPC ...
Quick apply
... DevOps. * Deep, hands-on AWS cybersecurity engineering: Organizations/Control Tower, SCPs and tag policies, IAM Identity Center, KMS key policy design, S3 hardening, Lambda runtime lifecycle, VPC ...
... DevOps. * Deep, hands-on AWS cybersecurity engineering: Organizations/Control Tower, SCPs and tag policies, IAM Identity Center, KMS key policy design, S3 hardening, Lambda runtime lifecycle, VPC ...
Quick apply
... DevOps. * Deep, hands-on AWS cybersecurity engineering: Organizations/Control Tower, SCPs and tag policies, IAM Identity Center, KMS key policy design, S3 hardening, Lambda runtime lifecycle, VPC ...
... DevOps. * Deep, hands-on AWS cybersecurity engineering: Organizations/Control Tower, SCPs and tag policies, IAM Identity Center, KMS key policy design, S3 hardening, Lambda runtime lifecycle, VPC ...
Quick apply
... DevOps. * Deep, hands-on AWS cybersecurity engineering: Organizations/Control Tower, SCPs and tag policies, IAM Identity Center, KMS key policy design, S3 hardening, Lambda runtime lifecycle, VPC ...
Cybersecurity Engineer 1
Columbus, OH · On-site
The company specializes in delivering cybersecurity engineering, information assurance, systems integration, and technology modernization solutions that protect critical infrastructure and enable ...
Cybersecurity Engineer 1
Columbus, OH · On-site
The company specializes in delivering cybersecurity engineering, information assurance, systems integration, and technology modernization solutions that protect critical infrastructure and enable ...
Cybersecurity Engineer 1
Columbus, OH · On-site
The company specializes in delivering cybersecurity engineering, information assurance, systems integration, and technology modernization solutions that protect critical infrastructure and enable ...
Cybersecurity Engineer 1
Columbus, OH · On-site
The company specializes in delivering cybersecurity engineering, information assurance, systems integration, and technology modernization solutions that protect critical infrastructure and enable ...
Cybersecurity Engineer
Columbus, OH · On-site
We are seeking a Cybersecurity Engineer to join our team. We are seeking an experienced Cybersecurity Engineer to support the planning, design, development, integration, and security engineering of ...
Cybersecurity Engineer
Columbus, OH · On-site
We are seeking a Cybersecurity Engineer to join our team. We are seeking an experienced Cybersecurity Engineer to support the planning, design, development, integration, and security engineering of ...
Cyber Security Engineer
Columbus, OH · On-site
$90K - $130K/yr
Vision insurance SarelaTech is seeking a Cybersecurity Engineer to support the Defense Logistics Agency (DLA) Enterprise Cyber Security Service Provider (CSSP). The selected candidate will provide ...
Quick apply
Cyber Security Engineer
Columbus, OH · On-site
$90K - $130K/yr
Vision insurance SarelaTech is seeking a Cybersecurity Engineer to support the Defense Logistics Agency (DLA) Enterprise Cyber Security Service Provider (CSSP). The selected candidate will provide ...
ComResource is looking for a Cybersecurity Engineer. Responsibilities: * Perform cybersecurity assessments and audits for utility clients. * Conduct cybersecurity risk analysis and gap assessments.
Quick apply
ComResource is looking for a Cybersecurity Engineer. Responsibilities: * Perform cybersecurity assessments and audits for utility clients. * Conduct cybersecurity risk analysis and gap assessments.
Cyber Security Engineer
Columbus, OH · On-site
Vision insurance SarelaTech is seeking a Cybersecurity Engineer to support the Defense Logistics Agency (DLA) Enterprise Cyber Security Service Provider (CSSP). The selected candidate will provide ...
Cyber Security Engineer
Columbus, OH · On-site
Vision insurance SarelaTech is seeking a Cybersecurity Engineer to support the Defense Logistics Agency (DLA) Enterprise Cyber Security Service Provider (CSSP). The selected candidate will provide ...
OT Cybersecurity Engineer
Columbus, OH · On-site
The OT Cybersecurity Engineer will play a crucial role in providing: * Cybersecurity Web/App Vulnerability Management branch (Information System Security Engineer (ISSE) support) * Information ...
OT Cybersecurity Engineer
Columbus, OH · On-site
The OT Cybersecurity Engineer will play a crucial role in providing: * Cybersecurity Web/App Vulnerability Management branch (Information System Security Engineer (ISSE) support) * Information ...
Cybersecurity Engineer 3
Columbus, OH · On-site
The company specializes in delivering cybersecurity engineering, information assurance, systems integration, and technology modernization solutions that protect critical infrastructure and enable ...
Cybersecurity Engineer 3
Columbus, OH · On-site
The company specializes in delivering cybersecurity engineering, information assurance, systems integration, and technology modernization solutions that protect critical infrastructure and enable ...
Cybersecurity Engineer 3
Columbus, OH · On-site
The company specializes in delivering cybersecurity engineering, information assurance, systems integration, and technology modernization solutions that protect critical infrastructure and enable ...
Cybersecurity Engineer 3
Columbus, OH · On-site
The company specializes in delivering cybersecurity engineering, information assurance, systems integration, and technology modernization solutions that protect critical infrastructure and enable ...
The OT Cybersecurity Engineer will play a crucial role in providing: * Cybersecurity Web/App Vulnerability Management branch (Information System Security Engineer (ISSE) support) * Information ...
The OT Cybersecurity Engineer will play a crucial role in providing: * Cybersecurity Web/App Vulnerability Management branch (Information System Security Engineer (ISSE) support) * Information ...
Cybersecurity Engineer 2
Columbus, OH · On-site
The company specializes in delivering cybersecurity engineering, information assurance, systems integration, and technology modernization solutions that protect critical infrastructure and enable ...
Cybersecurity Engineer 2
Columbus, OH · On-site
The company specializes in delivering cybersecurity engineering, information assurance, systems integration, and technology modernization solutions that protect critical infrastructure and enable ...
OT Cybersecurity Engineer
Columbus, OH · On-site
The OT Cybersecurity Engineer will play a crucial role in providing: * Cybersecurity Web/App Vulnerability Management branch (Information System Security Engineer (ISSE) support) * Information ...
Quick apply
OT Cybersecurity Engineer
Columbus, OH · On-site
The OT Cybersecurity Engineer will play a crucial role in providing: * Cybersecurity Web/App Vulnerability Management branch (Information System Security Engineer (ISSE) support) * Information ...
Cybersecurity Engineer 2
Columbus, OH · On-site
The company specializes in delivering cybersecurity engineering, information assurance, systems integration, and technology modernization solutions that protect critical infrastructure and enable ...
Cybersecurity Engineer 2
Columbus, OH · On-site
The company specializes in delivering cybersecurity engineering, information assurance, systems integration, and technology modernization solutions that protect critical infrastructure and enable ...
Cyber Security Engineer
Columbus, OH · On-site
The Cybersecurity Engineer will work with utility clients to assess their cybersecurity needs, design and implement solutions, and provide ongoing support. They will be part of a team of experts who ...
Cyber Security Engineer
Columbus, OH · On-site
The Cybersecurity Engineer will work with utility clients to assess their cybersecurity needs, design and implement solutions, and provide ongoing support. They will be part of a team of experts who ...
Cybersecurity Engineer
Mark Center, OH · On-site
$110K - $195K/yr
As a Cybersecurity Engineer your duties will include the following, but are not limited to: * Performs top level system architecture related design, development, integration, testing, installation ...
Cybersecurity Engineer
Mark Center, OH · On-site
$110K - $195K/yr
As a Cybersecurity Engineer your duties will include the following, but are not limited to: * Performs top level system architecture related design, development, integration, testing, installation ...
Associate Cybersecurity Platform Engineer Position Summary We are seeking an early-to-mid career Cybersecurity Platform Operations Analyst to support day-to-day security request triage, light ...
Associate Cybersecurity Platform Engineer Position Summary We are seeking an early-to-mid career Cybersecurity Platform Operations Analyst to support day-to-day security request triage, light ...
Cybersecurity Developer information
What is the difference between Cybersecurity Developer vs Security Analyst?
| Aspect | Cybersecurity Developer | Security Analyst |
|---|---|---|
| Certifications | CompTIA Security+, Certified Ethical Hacker (CEH), CISSP (optional) | CompTIA Security+, GIAC Security Essentials (GSEC), CISSP (optional) |
| Work Environment | Develops security tools, software, and protocols; works in development teams | Monitors security systems, investigates incidents; works in security operations |
| Employer & Industry Usage | Tech companies, cybersecurity firms, software development | Financial institutions, government agencies, corporate security teams |
While both roles focus on cybersecurity, a Cybersecurity Developer primarily creates and implements security solutions through software development, whereas a Security Analyst monitors and responds to security threats. Both roles require similar certifications and often collaborate to ensure organizational security.

Lead Cybersecurity Engineer
Cincinnati, OH • On-site
Full-time
Posted 9 days ago
First Student rating
6.3
First Student
Based on 321 frontline employees who took The Breakroom Quiz
The best things about working at First Student
Featured by First Student, based on 321 Breakroom Quiz responses from their frontline employees
89%
of students say it’s good
88%
say they enjoy their job
87%
of parents and care-givers say it’s good
Featured by First Student, based on 321 Breakroom Quiz responses from their frontline employees
Job description
This is a hands-on practitioner role. The individual is expected to lead engineering execution, mentor junior team members, and provide technical oversight and peer review of the team's work product within cybersecurity.
Responsibilities
Identify and assess
- Perform cybersecurity assessments and technical reviews for new platforms, cloud services, identity/authN/authZ changes, and externally-facing systems.
- Lead offensive-informed technical assessments and translate findings into remediation plans.
- Perform threat modeling for cloud and SDLC initiatives.
Securely build and protect
- Engineer and lead operations of cybersecurity controls and cloud security posture management.
- Author and code-review IaC for cloud governance components, including cloud policy management.
- Provide SDLC cybersecurity engineering, including SAST and DAST program operation and secure code guidance for custom applications.
- Provide oversight for identity and endpoint tooling and support enterprise secrets management.
Monitor, hunt, and detect
- Own the technical integration of First Student systems and log sources into the managed MDR platform, and coordinate with the MDR provider on detection use cases, scenario-based workshops, and joint investigations.
- Tune telemetry and sensor platforms to reduce false positives and improve detection fidelity.
- Maintain existing and build new cybersecurity dashboards and telemetry that feed operational and leadership-facing reporting.
Respond, recover, and sustain
- Serve as a senior technical lead for cybersecurity incidents, directing investigation, evidence collection, and containment across identity, endpoint, cloud, and email in coordination with I&O and MDR partners.
- Maintain incident investigation templates, IR runbooks, and technical playbooks; drive lessons-learned and control improvements post-incident.
- Support the incident management technical workflow and tabletop exercise execution.
Govern and manage risk
- Contribute technical content to policies and standards (e.g., Vulnerability Management, cloud security, SDLC).
- Interpret control requirements and translate them into enforceable technical controls.
- Support leadership-facing reporting with technical evidence and narrative for internal reviews and external assessment cycles.
- Contribute technical evidence to cyber risk acceptance packages.
Lead and coordinate
- Provide technical oversight and peer review of the cybersecurity team's work product.
- Mentor cybersecurity analysts and junior engineers on cloud cybersecurity, investigations, and secure design; support individual growth plans in coordination with the Senior Director.
- Lead cybersecurity engineering projects end to end, including planning, effort estimation, resource coordination, and delivery.
- Liaise with cybersecurity vendors and managed service providers for issue resolution and operational escalation.
Desired qualifications
Education and certifications
- BS/BA in IT, Computer Science, Engineering, or related field, or equivalent experience.
- Industry certifications preferred: one or more of AWS Certified Security - Specialty, AWS Certified Solutions Architect - Associate/Professional, SANS/GIAC (GSEC, GCIH, GCSA, GCPN, GCIA), CISSP, CCSP, CRISC.
Knowledge and experience
- 10+ years total experience in IT, with 5+ years of hands-on, demonstrated experience in one or more of cybersecurity engineering, cloud engineering, or DevOps.
- Deep, hands-on AWS cybersecurity engineering: Organizations/Control Tower, SCPs and tag policies, IAM Identity Center, KMS key policy design, S3 hardening, Lambda runtime lifecycle, VPC segmentation and flow logging, CloudTrail/GuardDuty/Security Hub, Systems Manager, and cloud security posture management.
- Working experience with managed MDR services, including onboarding and troubleshooting log sources, tuning detections in partnership with the provider, automating response, and participating in scenario-based workshops and joint IR execution.
- EDR operations and incident response experience.
- SDLC cybersecurity experience, including hands-on operation of SAST and DAST tooling, secure design review for cloud-native stacks, and remediation guidance for development teams.
- Incident response experience on identity, cloud, and application-exposure incidents; ability to produce investigation reports suitable for leadership and legal review.
- Working fluency in IaC review; proficiency in Python or PowerShell for automation, reporting, and control validation.
- Strong understanding of NIST CSF 2.0, CIS Controls, and CIS AWS Foundations Benchmark; ability to translate framework requirements into enforceable, testable controls.
- Familiarity with ITIL and Agile delivery practices.
- Familiarity with the Microsoft 365 cybersecurity stack.
Personal attributes
- Deep technical knowledge, strong analytical and problem-solving skills, and the ability to manage complex technical projects.
- Strong written and oral communication skills; strong interpersonal skills.
- Customer-focused mindset and attention to detail.
- Operates independently and drives outcomes to closure. Comfortable defining technical requirements and holding partner teams accountable for implementation without direct execution authority.
- Comfortable holding multiple technical domains simultaneously (cloud, detection, SDLC, IR) and prioritizing across them without daily direction.
- Effective across organizational boundaries: I&O, Data, Applications, Legal, and external MDR/consulting partners.
- High-integrity, ownership-first mindset. Proactive on risk reduction.
Compensation ranges from $130,000 - $155,000 depending on experience.
Language Requirement
This role requires English proficiency. Federal, state, and local requirements, including U.S. Department of Transportation (DOT) regulations, require training, safety communications, company policies, employment documents, and other job-related communications be conducted in English.
First for a reason:
At First Student, we are a family of 60,000+ employees who take pride in safely transporting more than 5 million students and passengers to and from their destinations each day! Our family of brands include Transco, Total Transportation, Maggies Paratransit, and GVC II. Our employees are at the forefront of safety and innovation; they create and implement the most advanced training and technology the transportation industry has to offer.
In the state of Washington, all technician and driving positions, including but not limited to van drivers and any other position requiring employees to drive a company-owned vehicle, are considered safety-sensitive and are therefore subject to drug and alcohol testing, including cannabis.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. First is also committed to providing a drug-free workplace. First will consider for employment qualified applicants with criminal histories consistent with the requirements of the San Francisco Fair Chance Ordinance, Los Angeles Fair Chance Ordinance, and any other fair chance law. Philadelphia's Fair Criminal Record Screening Standards Ordinance Poster is at this link or upon request https://www.phila.gov/media/20210423160847/Fair-Chance-Hiring-law-poster.pdf.
Working at First Student
Perks for frontline workers
From First Student, via Breakroom
Competitive pay and paid training
Paid holidays, sick time, and paid time off
Medical, dental, vision, and life insurance coverage options
401(k) retirement plan with company match
Career advancement opportunities, including operational, maintenance, management, and leadership roles
Employee Assistance Program (EAP), including counseling and support services for personal and work-related issues
Community impact: Be a trusted figure for students and families
About First Student, in their own words
From First Student
At First Student, we are a team of 66,800 employees dedicated to providing safe, reliable, and efficient student transportation. As the leading student transportation provider in North America, we operate over 530+ locations across the U.S. and Canada. Our family of brands includes Transco, Total Transportation, Maggie’s Paratransit, and GVC II. Our employees are at the forefront of safety and innovation, helping create and implement the advanced training, technology, and transportation solutions our industry has to offer. Our company’s history is rooted in industry innovation, operational excellence, and a shared commitment to putting students first.
Company values
From First Student
• Focus on safety: Safety is at the heart of everything we do
• Foster teamwork: Work together, act with integrity, respect each other, and champion diversity and inclusion
• Care for our students: Ensure our vehicles are welcoming and trusted places where students feel comfortable and secure
• Surpass customer expectations: Go the extra mile to deliver an extraordinary experience for our customers and communities
• Set the highest standards: Continually seek a better way to do things with innovation, sustainable practices, financial discipline, commercial excellence, and operational excellence
What First Student employees say
Pay
Benefits
Hours and flexibility
Workplace
Get the full story on Breakroom
About First Student
Sourced by ZipRecruiter
Industry
School and employee bus transportation
Company size
10,000+ Employees
Headquarters location
Cincinnati, OH, US
Year founded
1999