Sr. Cybersecurity Engineer

Sr. Cybersecurity Engineer

Full Time Perm

Way of Work: Hybrid

Location: Columbus, OH

Salary: $110,200.00 - $165,300.00, plus 10% annual bonus

At NiSource, our Enterprise Security department excels in engineering sophisticated defenses, architecting resilient systems, and proactively defending the vital cyber infrastructure that is crucial to our business operations. As a Sr. Cybersecurity Engineer you will play a pivotal role in ensuring the security, reliability, and robustness of our information assets against a backdrop of evolving cyber threats.

This team collaborates with application, infrastructure, and enterprise architecture teams to enforce security controls at the network level. The team is also responsible for ensuring robust firewall policies, secure application delivery, and cloud-native threat protection through modern tooling and scripting.

The Sr. Cybersecurity Engineer reports to the Manager of Cybersecurity Network and works closely with the Firewall, Cloud Security, and DevSecOps teams to implement and manage secure network architectures across on-prem, OT, and cloud environments.

This role will be responsible for designing, deploying, and maintaining network security infrastructure with a focus on next-generation firewalls, web application firewalls, and Python-based automation frameworks.

Your responsibilities may include, but are not limited to:

• Configure and manage F5 Cloud WAF policies, logging, and incident response workflows

• Design and optimize Palo Alto firewall rule sets, NAT policies, and security profiles

• Automate firewall and security operations using Python and API-based integrations

• Perform network traffic analysis, threat detection, and rule tuning for perimeter and internal firewalls

• Support security projects across IT and OT networks (including SCADA, IOT, and Purdue Model environments)

• Assist in vulnerability mitigation efforts by reviewing rule coverage and implementing compensating controls

• Document network security designs, rule justification matrices, and change management processes

• Participate in incident response activities and support forensic data collection from firewall and WAF logs

• Work with auditors and risk teams to support NIST, TSA, NERC CIP, and SOC2 compliance requirements

• Evaluate and onboard new tools and techniques to improve network visibility and automation

You must possess the below minimum qualifications to be initially considered for this position. Preferred qualifications are in addition to the minimum requirements and are considered a plus factor in identifying top candidates.

Minimum Qualifications

• Bachelor’s Degree or equivalent work experience

• 5+ years of experience with firewall administration, including Palo Alto Networks firewalls

• 2+ years of hands-on experience with F5 Cloud WAF or equivalent WAF technologies

• Proficiency in Python for scripting and security automation

• Experience in supporting security controls aligned with NIST, TSA Security Directives, or NERC CIP

Preferred Qualifications

• Experience with Arista DMF, Corelight/Zeek, and segmentation of OT networks

• Familiarity with Prisma Access, SASE architecture, and GlobalProtect VPN

• Palo Alto Networks PCNSE or F5 Certification (401/101) preferred

• Security+ or CISSP certification is a plus

• CCIE

Disclaimer

This description is not designed to be a complete list of all duties and responsibilities required of the position.

#NiSource #NowHiring #OhioMeansJobs #NIST #WomenInTech #WomenInUtilities #Hybrid #Cloud #ICybersecurity #CybersecurityEngineer #SecurityEngineer #ApplicationsManager #TechJobs #NowHiring #ColumbusOH #Ohio #VPN #NetworkSecurity

Work Authorization

Authorized to work in the United States without requiring sponsorship.

Workplace Connection
Value inclusion within your day to day responsibilities by respecting others perspectives/convictions, engaging others opinions, creating a safe environment where people, ideas, and opinions are valued within your Team/Customers and external partners.

Respect the unique lived experie