Consultant, Cybersecurity (Data Engineer)

Nationwide Mutual Insurance • Columbus, OH

14h • Hybrid

About The Position

This role will work a hybrid schedule coming into the Columbus, Ohio, Des Moines, Iowa, or Scottsdale, Arizona office 2 days (Mondays & Wednesdays) per week. Remote internal associates may also be considered. The Cyber Security Operations Center’s Innovation and Integration (CSOC-INI) team transforms emerging ideas into secure, production-ready capabilities that advance cyber defense. Across agentic solutions, modern application engineering, platform foundations, and security data engineering, we translate complex operational needs into scalable, observable outcomes. This is a high-impact opportunity to build the security data foundation that powers modern Cyber Security Operations. In this role, you’ll design and operate the pipelines, lakehouse data models, and telemetry engineering patterns that turn massive volumes of raw security data into trusted, usable intelligence for detections, analytics, and investigations. You’ll work across cyber security, detection engineering, platform, and data teams to ensure the security data lake is scalable, observable, governed, and ready to support mission-critical operational decisions.

If you’re enthusiastic about delivering secure technology solutions to support a company providing extraordinary care to its customers, then Nationwide Technology is the place for you. Nationwide's industry-leading technology workforce embraces an agile work environment and a collaborative culture to deliver outstanding solutions and results. If that sounds like something you aspire to, we want to hear from you! As a Cyber Operations professional, you'll be on the front line, protecting Nationwide's members and data! You will be immersed with incident response, cyber strategy and guidance, defense optimization and scanning and exploitation. We'll count on you to provide enterprise services in forensic investigation, attack and penetration, vulnerability scanning and response, cyber defense, security intelligence, security operations and infrastructure risk management.

Requirements

• Security Operations experience preferred
• Strong data engineering skills, with advanced Databricks and Spark experience and strong working ability in Python and SQL
• Experience building and operating batch and streaming data pipelines for high-volume telemetry, logs, events, and security datasets
• Strong knowledge of telemetry normalization (OCSF), enrichment, schema design, and data quality controls across security-relevant data sources
• Experience designing and maintaining lakehouse or data lake architectures that support analytics, detections, investigations, and long-term retention needs
• Familiarity with detection engineering requirements, including how curated data supports rules, analytics, triage, and investigation workflows
• Experience integrating enterprise data sources, APIs, files, message streams, and cloud storage in a secure and maintainable way
• Working knowledge of observability, cost management, performance tuning, and operational support for production data platforms
• Ability to collaborate with architecture, platform, security, governance, and Cyber Security Operations stakeholders
• Excellent verbal and written communication skills
• Undergraduate studies in cyber security, management information systems, engineering, math, computer science, data analytics or comparable experience and education strongly preferred.
• Graduate studies in cyber security, computer science or a related field are a plus.
• Preferred certifications include: Certified Information Systems Security Professional (CISSP), Cisco Certified Network Associate (CCNA), Certified Ethical Hacker (CEH), GIAC Certified Intrusion Handler (GCIH), Digital Forensics Investigation: EnCase Certified Examiner ( EnCE ) certification, GIAC Strategic Planning Policy and Leadership (GSTRT), GIAC Security Expert (GSE), Certified Cloud Security Professional (CCSP), AWS Certified Cloud Practitioner, AZ500.
• Typically, six years of experience in technology, with four years in cyber security.
• Experience using Windows and Linux/Unix operating systems, administration and tools.
• Successful candidates will also have experience with network configurations, protocols, scripting, web application security, network security, firewalls and network topology from both physical and logical viewpoints, scripting in PowerShell, Python, Bash and Windows Batch.
• Ability to make decisions, recommendations and manage work processes.
• Aptitude to influence, build partnerships and set priorities.
• Excellent communication skills to interact with all levels of associates, senior management and/or vendors.
• Insurance and / or financial services industry knowledge a plus.
• Other criteria, including leadership skills, competencies and experiences may take precedence.

Nice To Haves

• Security Operations experience preferred

Responsibilities

• Designs, builds, and operates the security data engineering foundation that enables telemetry ingestion, normalization, enrichment, analytics, and detections across the Cyber Security Operations Center.
• Owns secure and reliable data pipelines, lakehouse data models, telemetry quality controls, and the engineering patterns needed to support security analytics, detection content, investigations, and downstream operational workflows.
• Partners closely with cyber security professionals, detection engineers, platform and operations engineers, and data consumers to ensure the security data lake is trustworthy, observable, scalable, governed, and production-ready.
• Leads or responds to complex cyber incidents using industry recognized methodology, e.g., PICERL (Preparation, Identification, Containment, Eradication, Recovery and Lessons Learned).
• Creates uplift of cyber security detection and alerts for ongoing prevention of threats.
• Applies secure software and systems engineering practices throughout the delivery lifecycle to ensure our data and technology solutions are protected from threats and vulnerabilities.
• Uses an efficiency mindset for incident response to design and implement automation and orchestration for the enrichment and handling of cyber security events.
• Manages and supports vulnerability management via tools, processes, and proactively identifies vulnerabilities in the environment.
• Plans and conducts team activities to enrich detection and prevention controls.
• Plans and delivers proactive cyber activities (purple teaming, threat hunting, red teaming, etc.) with full understanding of the MITRE ATT&CK framework.
• Identifies critical log sources and system events used for creation and tuning of cyber security detections.
• Maintains awareness of current cyber threat landscape to perform evaluation, enrichment and dissemination for action to protect Nationwide members and environment.
• Leads and works on initiatives as part of the overall cyber operations strategy.
• May perform other responsibilities as assigned.

Benefits

• medical/dental/vision
• life insurance
• short and long term disability coverage
• paid time off with newly hired associates receiving a minimum of 18 days paid time off each full calendar year pro-rated quarterly based on hire date
• nine paid holidays
• 8 hours of Lifetime paid time off
• 8 hours of Unity Day paid time off
• 401(k) with company match
• company-paid pension plan
• business casual attire

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree