Information Security Engineer Jobs in Ohio
Information Security Engineer jobs in Ohio are in strong and consistent demand, concentrated in financial services, healthcare, government contracting, and large enterprise technology, with openings at every level from junior analyst-track roles through senior and principal engineers. Columbus, Cleveland, and Cincinnati account for the bulk of hiring, where established employers like Nationwide Insurance, KeyBank, and Procter & Gamble maintain dedicated cybersecurity teams. Network security, cloud security architecture, and identity and access management are the sub-areas driving the most active searches across Ohio right now. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 33+ Information Security Engineer jobs
Pay Rate:
The annual base salary range for this position TBD. Please note that the salary information is a general guideline only. At Sawdey Solution Services, we recognize that attracting the best talent is key to our strategy and success as a company. We will consider several factors when extending an offer to an applicant. These factors include (but are not limited to) the position, associated responsibilities, work experience, education, related training, and related skills.
Position Location: Wright-Patterson Air Force Base
Telework/Work-from-Home Authorized:
Yes – When Authorized/Hybrid
About the Role: The Cybersecurity/Information System Security Officer (ISSO) will provide Cross Domain Solutions (CDS) Network Architect Certification and Accreditation (C&A) support and oversee day-to-day cybersecurity operations and Risk Management Framework (RMF) activities for assigned information systems, including classified and cross-domain environments at the Secret level and below. Responsibilities include ensuring compliance with DoDI 8510.01, Risk Management Framework for DoD Information Technology, AFI 17-101, Risk Management Framework for Air Force Information Technology, and applicable Air Force Research Laboratory (AFRL) RMF guidance and policies.
The ISSO will support the implementation, documentation, assessment, and testing of applicable Information Assurance (IA) security controls; develop and maintain required security artifacts, including network topology diagrams, hardware and software inventories, ports and protocols lists, and Plans of Action and Milestones (POA&Ms); conduct and support vulnerability assessments and Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) compliance reviews; track and coordinate remediation activities; and support Interim Authorization to Test (IATT) and Authorization to Operate (ATO) processes in coordination with the Information System Security Manager (ISSM), Authorizing Official (AO), and other system stakeholders.
Additional Responsibilities Include, but are not Limited To:
- Serve as the assigned Information System Security Officer (ISSO) for one or more information systems, networks, laboratories, flight-test environments, or Cross Domain Solutions (CDS), including classified and Secret-and-below environments and, when assigned, SCI environments.
- Support the implementation, documentation, assessment, and testing of applicable security controls in accordance with the Risk Management Framework (RMF).
- Develop, update, and maintain RMF documentation and security artifacts in eMASS, Xacta, EBS, or other customer-designated systems, including:
- System Security Plans (SSPs) and Security Assessment Reports (SARs).
- Plans of Action and Milestones (POA&Ms) and security control implementation statements.
- Network architecture and topology diagrams.
- Hardware and software inventories.
- Ports, protocols, and services documentation.
- Supporting security assessment evidence and compliance records.
- Conduct and coordinate vulnerability scans, Assured Compliance Assessment Solution (ACAS) reviews, and Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) assessments. Analyze findings, assess potential impacts, and recommend corrective actions to mitigate identified risks.
- Track remediation activities, security control deficiencies, and POA&M milestones, escalating unresolved risks and overdue actions to the Information System Security Manager (ISSM).
- Support Interim Authorization to Test (IATT), Authorization to Operate (ATO), reauthorization, continuous monitoring, and customer inspections, ensuring required security documentation and supporting evidence are complete and current.
- Collaborate with system owners, program managers, engineers, network architects, and cybersecurity personnel to maintain system security compliance and address RMF requirements throughout the system lifecycle.
- Support security assessments of cross-domain technologies, including guards, diodes, and associated network interfaces, to ensure secure information exchange between systems operating at different classification levels.
- Work closely with the RYZT Combat ID, Blue Guardian, Test, and RYSIL teams to develop and implement cross-domain security solutions that:
- Enable the secure integration of Top Secret, Secret, and unclassified data into consolidated products supporting flight tests and demonstrations.
- Facilitate multi-sensor data fusion, integration, and testing through a common data bus within systems integration laboratories and aircraft-mounted sensor pods.
- Support the development of data repositories for storing, accessing, and developing multi-level sensor models and associated data.
- Identify network architecture and infrastructure requirements supporting the RY digital strategy, including connectivity to other RY networks and associated hardware, such as guards and diodes.
- Support the preparation of RMF documentation required to obtain IATTs and ATOs for laboratory, flight, and field testing.
- Assist with proposal development, as required.
- Perform other duties as assigned.
Experience Requirements:
- Technical knowledge of cross domain solutions and work hand in hand with their engineers to develop one.
- Familiar with DoD and AF guidance on Security in general and Cybersecurity in particular.
- Awareness of DISA STIGs, ACAS vulnerability scanner, and AF Ports, Protocols, and Services process.
- Familiar with the Risk Management Framework process (NIPR/SIPR eMASS, AFRL process).
- Possibly XACTA as well if will be involved in RMF for TS/SCI.
- Technical understanding to be able to discuss computer/network issues.
- Familiar with AF TEMPEST policies and process.
Certificate, License, and Registration Requirements: Current DoD 8570 IAT Level II or III certification.
- Security + CE
- SSCP
- GSEC
- CISSP
- CISA
- CASP
Other Required Skills & Abilities:
- Experience performing ISSO, cybersecurity, information assurance, or RMF support duties.
- Working knowledge of DoDI 8510.01, AFI 17-101, applicable AFRL guidance, and customer-specific RMF procedures.
- Experience with eMASS, Xacta, or comparable RMF workflow tools.
- Experience with DISA STIGs, ACAS or comparable vulnerability scanning, and POA&M management.
- Ability to prepare and maintain RMF artifacts and explain security findings to technical and nontechnical stakeholders.
- Must be able to effectively communicate with customer and fulfill all duties and responsibilities as listed in the contract.
- Must be proficient in Microsoft Office suite including, but not limited to: Word, PowerPoint, Excel, and Outlook.
Security Clearance Requirements: Top Secret/SCI Clearance
US Citizenship Requirements:
This position supports a U.S. Government Contract whose terms require Sawdey Solution Services to staff it only with U.S. Citizens.
Pay Rate:
The annual base salary range for this position TBD. Please note that the salary information is a general guideline only. At Sawdey Solution Services, we recognize that attracting the best talent is key to our strategy and success as a company. We will consider several factors when extending an offer to an applicant. These factors include (but are not limited to) the position, associated responsibilities, work experience, education, related training, and related skills.
Position Location: Wright-Patterson Air Force Base
Telework/Work-from-Home Authorized:
Yes – When Authorized/Hybrid
About the Role: The Cybersecurity/Information System Security Officer (ISSO) will provide Cross Domain Solutions (CDS) Network Architect Certification and Accreditation (C&A) support and oversee day-to-day cybersecurity operations and Risk Management Framework (RMF) activities for assigned information systems, including classified and cross-domain environments at the Secret level and below. Responsibilities include ensuring compliance with DoDI 8510.01, Risk Management Framework for DoD Information Technology, AFI 17-101, Risk Management Framework for Air Force Information Technology, and applicable Air Force Research Laboratory (AFRL) RMF guidance and policies.
The ISSO will support the implementation, documentation, assessment, and testing of applicable Information Assurance (IA) security controls; develop and maintain required security artifacts, including network topology diagrams, hardware and software inventories, ports and protocols lists, and Plans of Action and Milestones (POA&Ms); conduct and support vulnerability assessments and Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) compliance reviews; track and coordinate remediation activities; and support Interim Authorization to Test (IATT) and Authorization to Operate (ATO) processes in coordination with the Information System Security Manager (ISSM), Authorizing Official (AO), and other system stakeholders.
Additional Responsibilities Include, but are not Limited To:
- Serve as the assigned Information System Security Officer (ISSO) for one or more information systems, networks, laboratories, flight-test environments, or Cross Domain Solutions (CDS), including classified and Secret-and-below environments and, when assigned, SCI environments.
- Support the implementation, documentation, assessment, and testing of applicable security controls in accordance with the Risk Management Framework (RMF).
- Develop, update, and maintain RMF documentation and security artifacts in eMASS, Xacta, EBS, or other customer-designated systems, including:
- System Security Plans (SSPs) and Security Assessment Reports (SARs).
- Plans of Action and Milestones (POA&Ms) and security control implementation statements.
- Network architecture and topology diagrams.
- Hardware and software inventories.
- Ports, protocols, and services documentation.
- Supporting security assessment evidence and compliance records.
- Conduct and coordinate vulnerability scans, Assured Compliance Assessment Solution (ACAS) reviews, and Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) assessments. Analyze findings, assess potential impacts, and recommend corrective actions to mitigate identified risks.
- Track remediation activities, security control deficiencies, and POA&M milestones, escalating unresolved risks and overdue actions to the Information System Security Manager (ISSM).
- Support Interim Authorization to Test (IATT), Authorization to Operate (ATO), reauthorization, continuous monitoring, and customer inspections, ensuring required security documentation and supporting evidence are complete and current.
- Collaborate with system owners, program managers, engineers, network architects, and cybersecurity personnel to maintain system security compliance and address RMF requirements throughout the system lifecycle.
- Support security assessments of cross-domain technologies, including guards, diodes, and associated network interfaces, to ensure secure information exchange between systems operating at different classification levels.
- Work closely with the RYZT Combat ID, Blue Guardian, Test, and RYSIL teams to develop and implement cross-domain security solutions that:
- Enable the secure integration of Top Secret, Secret, and unclassified data into consolidated products supporting flight tests and demonstrations.
- Facilitate multi-sensor data fusion, integration, and testing through a common data bus within systems integration laboratories and aircraft-mounted sensor pods.
- Support the development of data repositories for storing, accessing, and developing multi-level sensor models and associated data.
- Identify network architecture and infrastructure requirements supporting the RY digital strategy, including connectivity to other RY networks and associated hardware, such as guards and diodes.
- Support the preparation of RMF documentation required to obtain IATTs and ATOs for laboratory, flight, and field testing.
- Assist with proposal development, as required.
- Perform other duties as assigned.
Experience Requirements:
- Technical knowledge of cross domain solutions and work hand in hand with their engineers to develop one.
- Familiar with DoD and AF guidance on Security in general and Cybersecurity in particular.
- Awareness of DISA STIGs, ACAS vulnerability scanner, and AF Ports, Protocols, and Services process.
- Familiar with the Risk Management Framework process (NIPR/SIPR eMASS, AFRL process).
- Possibly XACTA as well if will be involved in RMF for TS/SCI.
- Technical understanding to be able to discuss computer/network issues.
- Familiar with AF TEMPEST policies and process.
Certificate, License, and Registration Requirements: Current DoD 8570 IAT Level II or III certification.
- Security + CE
- SSCP
- GSEC
- CISSP
- CISA
- CASP
Other Required Skills & Abilities:
- Experience performing ISSO, cybersecurity, information assurance, or RMF support duties.
- Working knowledge of DoDI 8510.01, AFI 17-101, applicable AFRL guidance, and customer-specific RMF procedures.
- Experience with eMASS, Xacta, or comparable RMF workflow tools.
- Experience with DISA STIGs, ACAS or comparable vulnerability scanning, and POA&M management.
- Ability to prepare and maintain RMF artifacts and explain security findings to technical and nontechnical stakeholders.
- Must be able to effectively communicate with customer and fulfill all duties and responsibilities as listed in the contract.
- Must be proficient in Microsoft Office suite including, but not limited to: Word, PowerPoint, Excel, and Outlook.
Security Clearance Requirements: Top Secret/SCI Clearance
US Citizenship Requirements:
This position supports a U.S. Government Contract whose terms require Sawdey Solution Services to staff it only with U.S. Citizens.
See All 33 Information Security Engineer Jobs in Ohio
Find roles in Ohio that match your experience and apply in just a few clicks.
Find JobsInformation Security Engineer Jobs by City in Ohio
Where Ohio roles are concentrated, by current openings.
Information Security Engineer Job Market in Ohio
A snapshot from current Ohio openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Technology & Software
What Ohio Employers Look For
The qualifications that appear most often in information security engineer jobs across Ohio.
- Relevant certification such as CISSP, CEH, or CompTIA Security+ recognized by Ohio employers
- Bachelor's degree in computer science, cybersecurity, information technology, or a related field
- Hands-on experience with SIEM platforms, firewalls, intrusion detection, and endpoint protection tools
- Demonstrated knowledge of NIST, ISO 27001, or CIS Controls frameworks for risk and compliance
- Experience conducting vulnerability assessments, penetration testing, or incident response investigations
- Strong written and verbal communication skills for reporting findings to technical and non-technical stakeholders
Information Security Engineer Jobs in Ohio: Frequently Asked Questions
How do you become a information security engineer in Ohio?
Ohio does not require a state-issued license to work as an information security engineer, so the path runs through education and industry credentials. Most Ohio employers expect a bachelor's degree in cybersecurity, computer science, or information technology, combined with certifications such as CompTIA Security+, CISSP, or CEH. Gaining hands-on experience through internships, lab environments, or adjacent IT roles strengthens any application considerably before targeting engineering-level positions.
How much do information security engineers make in Ohio?
Information security engineers in Ohio earn a median of about $110,480 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $68,070 for the lowest 10% to over $171,450 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire information security engineers in Ohio?
Employers hiring information security engineers in Ohio right now include MTSI, Express, and IPT Associates, based on current listings on Migrate Mate as of November 2026. Ohio's large concentration of financial institutions, health systems, and government contractors creates steady year-round demand for cybersecurity talent across the state.
Which Ohio cities have the most information security engineer jobs?
Wright-Patterson AFB, Dayton, and Columbus have the most information security engineer openings in Ohio. Columbus leads because of its dense cluster of insurance headquarters, regional bank operations, and state government agencies, while Cleveland and Cincinnati add significant volume through healthcare systems, manufacturing conglomerates, and financial services firms anchored in each metro.
Are there remote information security engineer jobs in Ohio?
Yes, and more than most fields. About 40% of information security engineer openings tied to Ohio are remote or hybrid as of November 2026, reflecting how much of the work, including threat monitoring, policy development, and cloud security engineering, can be performed without being on-site. Roles requiring hands-on lab work, physical network access, or classified environment clearances are more likely to require in-person presence.
How can I get hired as a information security engineer in Ohio with little or no experience?
The most realistic entry path is a help desk or IT support role that exposes you to the security tools and incident workflows Ohio employers rely on daily. Large Ohio health systems like OhioHealth and Cleveland Clinic, along with state agencies such as the Ohio Department of Administrative Services, run IT associate and rotational programs that place candidates into security-adjacent work early. Earning CompTIA Security+ before applying signals seriousness to hiring managers and moves a resume past automated screening at most mid-size and enterprise employers in the state.
Where can I find and apply to information security engineer jobs in Ohio?
You can find and apply to information security engineer jobs in Ohio on Migrate Mate, which lists current Ohio openings across industries and experience levels. Find roles that fit your background and apply directly through each listing.
See All 33 Information Security Engineer Jobs in Ohio
Find roles in Ohio that match your experience and apply in just a few clicks.
Find Jobs