Sr Analyst, Cybersecurity

If you’re passionate about being part of a dynamic organization that enables a Fortune 100 company with nearly $70 billion in annual sales to drive innovation and adopt new technologies that deliver business results, then Nationwide’s Technology team could be the place for you! At Nationwide®, “on your side” goes beyond just words. Our customers are at the center of everything we do and we’re looking for associates who are passionate about delivering extraordinary care.

-

Threat Operations organization within the Cybersecurity Operations Center, with work spanning Vulnerability Management and Threat Intelligence capabilities.

Primary Vulnerability Management responsibilities: Working with the Vulnerability Management team to advance our readiness for Frontier AI models like Mythos. Shortly after Frontier AI models went live in April of 2026, we have seen record volumes of vulnerabilities each month.

Responsibilities in the Vulnerability Management space will include:

• Investigating Nationwide impact to Critical vulnerabilities - Investigate and manage our Critical vulnerability research during standard India hours.

• Researching Nationwide’s exposure to critical and zero-day vulnerabilities, with a key focus area of identifying exposures within application code. Examples could be working with our Application Security teams to research our risk to a Critical vulnerability in Open Source Software packages. Specific tasks could be looking for indicators of use In various sources to inspect if Nationwide is on vulnerable versions. An example could be searching for Nationwide usage of a vulnerable NPM package - by looking in Artifactory, JFrog Curation, Oligo, Prisma Cloud, and GitHub Dependabot.

• Continuously driving improvements to the process and looking for ways to automate how exposure research is collected and operationalized.

• Operating the Attack Surface Management capability

Secondary Threat Intelligence

Responsibilities: Since the Critical vulnerability work described above is expected to come in waves, and there will likely be some time when there are no Critical vulnerabilities to evaluate. These roles will be taking on Threat Intelligence and Threat Led Operations related tasks - potentially including:

• Identifying and researching industry vulnerabilities to escalate to Vulnerability Management to validate our exposure

• Creating risk profiles on countries, companies, and threat actors

• Evaluating domains referencing Nationwide for brand impersonation or malicious content

Ideal Qualifications:

Primary:

• Breadth of cybersecurity knowledge, with specific interest in Vulnerability Management and Threat Intelligence / Threat Led Operations

• Familiarity with application development and application security tools used in development pipelines (examples include Artifactory, JFrog Curation, Oligo, Prisma Cloud, and GitHub Dependabot)

Secondary:

• Experience with Python and PowerApps

• Knowledge of the MITRE ATT&CK Framework

-

Job Description Summary

If you’re enthusiastic about delivering secure technology solutions to support a company providing extraordinary care to its customers, then Nationwide Technology is the place for you. Nationwide's industry-leading technology workforce embraces an agile work environment and a collaborative culture to deliver outstanding solutions and results. If that sounds like something you aspire to, we want to hear from you!

As a Cyber Senior Analyst Professional, you’ll play a vital role with Nationwide’s internal business partners acting as their “Trusted Security Advisor.” Working with and learning from cybersecurity professionals, your responsibilities will include identifying and developing solutions to solve complex cyber and business problems across Nationwide. Collaborating with technology teams and business leaders you will play a crucial role in safeguarding Nationwide’s members and their data.

Job Description

Key Responsibilities:

• Works to enhance the cyber risk posture related to confidentiality and integrity of areas assigned, identifying, documenting, and communicating cyber risks to business leaders and technology teams.

• Completes basic risk assignments on time, meeting agreed-upon milestones.

• Performs and tracks basic to moderate consulting efforts that result in improved cyber posture.

• Informs peers and leaders about cyber exceptions.

• Collaborates on vulnerability management, detection, and prevention by aiding in team planning and delivery activities. Ensures application teams stay informed about the latest vulnerabilities and controls to keep the enterprise safe.

• Conducts Threat Detection, Alerts, and Incident Response: Collaborates to uplift cybersecurity detection and alerts awareness and assists teams with responses to cyber incidents as required.

• Assists in automating containment of cyber security events.

• Applies secure software and systems engineering practices throughout the delivery lifecycle to ensure our data and technology solutions are protected from threats and vulnerabilities.

• Additional responsibilities may include collaboration across teams and adherence to company standards.

May perform other responsibilities as assigned.

Qualifications & Experience:

Education:
Undergraduate studies in cyber security, management information systems, engineering, math, computer science, data analytics or related field or comparable experience and education strongly preferred. Preferred interest and progress in obtaining Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor® (CISA), Certified Business Continuity Professional (CBCP), or other cyber certifications.

Experience:

Typically, two to three years of experience in one or more information risk management capabilities and/or information audit systems. At least one year of experience in Technology or Project Management.

Technical Skills:

• Computer Science

• Cybersecurity

• Information Technology Security

• Scripting

• Vulnerability

Soft Skills & Attributes:

• Strong communication and collaboration skills

• Analytical and problem-solving mindset

• Ability to work in agile and global environments

• Time management and prioritization

• Familiarity with the insurance and/or financial services industry is a bonus

Additional Information:

Reporting Structure:

Reports to Leader – India

Working Hours:

Aligned to India business hours with flexibility for global collaboration.

Location Flexibility:

[Hybrid/Remote/In-office] with periodic in-office collaboration.

Equal Opportunity Statement:

Nationwide is committed to diversity and inclusion. All qualified applicants will be considered without regard to race, gender, disability, religion, or other protected categories.

-