[Remote] Specialist, Cybersecurity (Full Stack)

Note: The job is a remote job and is open to candidates in USA. Nationwide is an insurance and financial services company whose Technology team develops secure solutions that support its business and customers. The Specialist, Cybersecurity (Full Stack) designs, builds, and operates secure user-facing applications and supporting services for Cyber Security Operations, integrating frontend workflows, backend services, enterprise APIs, and AI-enabled capabilities. The role also supports cyber defense through automation, observability, secure delivery practices, incident response, vulnerability management, and threat detection.

Responsibilities

• Designs, builds, and operates modern user-facing applications and supporting services that enable secure, scalable, and maintainable digital experiences for Cyber Security Operations and adjacent enterprise workflows
• Owns frontend implementation, backend service integration, application workflow design, and the engineering patterns needed to deliver production-ready experiences across Angular, Java/Spring Boot, Python, and approved Nationwide AWS golden path technologies
• Partners closely with cyber security professionals, platform and operations engineers, solution architects, and data or AI engineering teams to ensure applications are usable, secure, observable, well governed, and aligned to enterprise delivery standards
• Build and maintain production-grade frontend applications and supporting services using Angular, Java/Spring Boot, and Python where appropriate for the use case
• Design intuitive UI workflows that connect reliably to APIs, enterprise systems, and downstream service integrations
• Implement reusable frontend patterns, shared components, and application structures that align to Nationwide golden path technology and engineering standards
• Build and maintain backend services that support UI data needs, orchestration logic, integration requirements, and secure access to approved enterprise capabilities
• Use AI-assisted development techniques responsibly to improve engineering throughput, code quality, documentation, test coverage, and delivery speed
• Partner with AI, platform, and security teams to integrate applications with agentic workflows, LLM-backed capabilities, and human-in-the-loop experiences when appropriate
• Instrument applications and services with the right logs, metrics, traces, and health telemetry to support monitoring and production troubleshooting
• Support secure authentication, authorization, secrets handling, and policy-aligned delivery practices across the application lifecycle
• Troubleshoot application defects, integration issues, and production incidents quickly, and continuously improve engineering quality, maintainability, and developer experience over time
• Responds to cyber incidents using industry recognized methodology, e.g., PICERL (Preparation, Identification, Containment, Eradication, Recovery and Lessons Learned)
• Creates uplift of cyber security detection and alerts for ongoing prevention of threats
• Applies secure software and systems engineering practices throughout the delivery lifecycle to ensure our data and technology solutions are protected from threats and vulnerabilities
• Implements automation and orchestration for the enrichment and handling of cyber security events
• Supports vulnerability management via tools and processes and proactively identify vulnerabilities in the environment
• Assists in the planning and execution of team activities to enrich detection and prevention controls
• Participates in proactive cyber activity (purple teaming, threat hunting, red teaming, etc.) and expands awareness across all aspects of the MITRE ATT&CK framework
• Identifies critical log sources and system events used for creation and tuning of cyber security detections
• Maintains awareness of the cyber threat landscape to assist with the evaluation, enrichment and dissemination for action to protect Nationwide members and environment
• May perform other responsibilities as assigned

Skills

• Strong full stack engineering skills with deep experience in Angular for frontend development and strong working ability in Java, Spring Boot, and Python
• Experience building and maintaining production web applications and APIs using enterprise development standards and reusable platform patterns
• Strong knowledge of frontend architecture, component design, state management, API integration, and secure application development practices
• Experience building backend services and integration layers that support UI workflows, orchestration, data access, and enterprise system connectivity
• Familiarity with AI-assisted software development practices, including effective use of coding assistants, prompt-guided development, code review acceleration, and test generation
• Experience working within AWS-aligned enterprise delivery patterns, golden path templates, and approved CI/CD, deployment, and operational controls
• Working knowledge of observability, release practices, production support, and operational readiness for user-facing applications and services
• Ability to collaborate with architecture, security, platform, and Cyber Security Operations stakeholders
• Excellent verbal and written communication skills
• Security Operations experience preferred
• This role will work a hybrid schedule coming into the Columbus, Ohio, Des Moines, Iowa, or Scottsdale, Arizona office 2 days (Mondays & Wednesdays) per week. Remote internal associates may also be considered.
• Undergraduate studies in cyber security, management information systems, engineering, math, computer science, data analytics or comparable experience and education strongly preferred
• At least three years of experience in technology
• Experience in working with operating systems, networking, desktop support, application development, end point security, database management or information security
• Successful candidates will have experience configuring and using Windows and Linux/Unix operating systems
• Action oriented and ability to make decisions and recommendations
• Aptitude to build partnerships, understand business processes, and set priorities
• Solid communication skills
• Preference for experience integrating applications with agentic solutions, LLM-backed services, retrieval components, or workflow automation capabilities
• Graduate studies in cyber security, computer science or a related field are a plus
• Preferred certifications include: Certified Information Systems Security Professional (CISSP), Cisco Certified Network Associate (CCNA), Certified Ethical Hacker (CEH), GIAC Certified Intrusion Handler (GCIH), Digital Forensics Investigation: EnCase Certified Examiner (EnCE) certification, GIAC Strategic Planning Policy and Leadership (GSTRT), GIAC Security Expert (GSE), Certified Cloud Security Professional (CCSP), AWS Certified Cloud Practitioner, AZ500
• Insurance and/or financial services industry knowledge a plus

Benefits

• Medical/dental/vision
• Life insurance
• Short and long term disability coverage
• Paid time off with newly hired associates receiving a minimum of 18 days paid time off each full calendar year pro-rated quarterly based on hire date
• Nine paid holidays
• 8 hours of Lifetime paid time off
• 8 hours of Unity Day paid time off
• 401(k) with company match
• Company-paid pension plan
• Business casual attire

Company Overview

Company H1B Sponsorship