Specialist, Cybersecurity (Digital Forensics)

Nationwide•Columbus, OH

5d•$95,500 - $143,500•Hybrid

About The Position

Nationwide is seeking a detail-oriented and technically proficient digital forensics professional to join its cybersecurity team. The role conducts digital forensic investigations, analyzes digital evidence, and supports incident response activities. It requires familiarity with forensic tools and processes, data analysis, operating systems, cloud platforms, and evidence handling. The position follows a hybrid schedule, working from the Columbus, Ohio office two days per week. The role also contributes to broader cyber operations, including responding to cyber incidents, improving detection and prevention controls, supporting vulnerability management, implementing automation, and participating in proactive cyber activities. It reports to a Manager, Risk Leader, or above. The work environment is hybrid in a normal office setting, and the role is exempt from overtime eligibility.

Requirements

Proficiency in Python or PowerShell scripting for automation and data analysis.
Experience with forensic imaging and analysis tools.
Strong understanding of file systems and Windows, Linux, and macOS operating systems.
Ability to analyze and interpret large datasets.
Experience in digital evidence collection and preservation and forensic methodologies.
Familiarity with incident response procedures and integration with forensic workflows.
Knowledge of regulatory and compliance requirements related to data security, privacy, and digital evidence.
At least three years of experience in technology.
Experience working with operating systems, networking, desktop support, application development, endpoint security, database management, or information security.
Experience configuring and using Windows and Linux/Unix operating systems.
Action-oriented, with the ability to make decisions and recommendations, build partnerships, understand business processes, and set priorities.
Solid communication skills.
Undergraduate studies in cybersecurity, management information systems, engineering, mathematics, computer science, data analytics, or comparable experience and education are strongly preferred.

Nice To Haves

Understanding of networking concepts and protocols.
Exposure to cloud platforms such as AWS, Azure, or GCP.
Certifications such as GIAC GCFA, GCIH, CEH, EnCE, MCFE, or similar.
Strong written and verbal communication skills for reporting and presenting findings.
Graduate studies in cybersecurity, computer science, or a related field.
Preferred certifications include CISSP, CCNA, CEH, GCIH, EnCE, GSTRT, GSE, CCSP, AWS Certified Cloud Practitioner, or AZ500.
Insurance or financial services industry knowledge.

Responsibilities

Lead and conduct digital forensic investigations involving data breaches, malware infections, unauthorized access, intellectual property theft, and other security incidents.
Collect, preserve, and analyze digital evidence from endpoints, servers, cloud environments, and mobile devices while maintaining chain of custody and meeting legal and regulatory requirements.
Perform forensic imaging and analysis of Windows, Linux, macOS, and mobile devices using industry-standard tools and methodologies.
Develop and execute Python or PowerShell scripts to automate evidence collection, data parsing, and artifact extraction.
Analyze logs, network traffic, and large datasets to reconstruct timelines and identify root causes.
Prepare detailed forensic reports and present findings to technical and non-technical stakeholders, including legal, HR, and management.
Support development and refinement of forensic processes and playbooks.
Respond to cyber incidents using recognized methodologies such as PICERL.
Improve cybersecurity detection and alerts to support ongoing threat prevention.
Apply secure software and systems engineering practices throughout the delivery lifecycle.
Implement automation and orchestration for enrichment and handling of cybersecurity events.
Support vulnerability management and proactively identify vulnerabilities in the environment.
Assist with planning and executing team activities to improve detection and prevention controls.
Participate in proactive cyber activities such as purple teaming, threat hunting, and red teaming, and expand awareness of the MITRE ATT&CK framework.
Identify critical log sources and system events for creating and tuning cybersecurity detections.
Maintain awareness of the cyber threat landscape and assist with evaluating, enriching, and disseminating information to protect Nationwide members and its environment.
May perform other responsibilities as assigned.

Benefits

Medical, dental, and vision coverage.
Life insurance.
Short- and long-term disability coverage.
Paid time off, with newly hired associates receiving a minimum of 18 days per full calendar year, prorated quarterly based on hire date.
Nine paid holidays.
Eight hours of Lifetime paid time off.
Eight hours of Unity Day paid time off.
401(k) with company match.
Company-paid pension plan.
Business casual attire.