Sr Analyst, Cybersecurity

If youre passionate about being part of a dynamic organization that enables a Fortune 100 company with nearly $70 billion in annual sales to drive innovation and adopt new technologies that deliver business results, then Nationwides Technology team could be the place for you! At Nationwide, on your side goes beyond just words. Our customers are at the center of everything we do and were looking for associates who are passionate about delivering extraordinary care.

• Threat Operations organization within the Cybersecurity Operations Center, with work spanning Vulnerability Management and Threat Intelligence capabilities.

Primary Vulnerability Management responsibilities:Working with the Vulnerability Management team to advance our readiness for Frontier AI models like Mythos. Shortly after Frontier AI models went live in April of 2026, we have seen record volumes of vulnerabilities each month.

Responsibilities in the Vulnerability Management space will include:

Investigating Nationwide impact to Critical vulnerabilitiesInvestigate and manage our Critical vulnerability research during standard India hours.Researching Nationwides exposure to critical and zero-day vulnerabilities, with a key focus area of identifying exposures within application code.Examples could be working with our Application Security teams to research our risk to a Critical vulnerability in Open Source Software packages.Specific tasks could be looking for indicators of use In various sources to inspect if Nationwide is on vulnerable versions.An example could be searching for Nationwide usage of a vulnerable NPM package - by looking in Artifactory, JFrog Curation, Oligo, Prisma Cloud, and GitHub Dependabot.Continuously driving improvements to the process and looking for ways to automate how exposure research is collected and operationalized.Operating the Attack Surface Management capabilitySecondary Threat Intelligence Responsibilities:Since the Critical vulnerability work described above is expected to come in waves, and there will likely be some time when there are no Critical vulnerabilities to evaluate. These roles will be taking on Threat Intelligence and Threat Led Operations related tasks - potentially including:

Identifying and researching industry vulnerabilities to elevate to Vulnerability Management to validate our exposureCreating risk profiles on countries, companies, and threat actorsEvaluating domains referencing Nationwide for brand impersonation or malicious contentIdeal Qualifications: Primary: Breadth of cybersecurity knowledge, with specific interest in Vulnerability Management and Threat Intelligence / Threat Led Operations Familiarity with application development and application security tools used in development pipelines (examples include Artifactory, JFrog Curation, Oligo, Prisma Cloud, and GitHub Dependabot) Secondary: Experience with Python and PowerApps Knowledge of the MITRE ATT&CK Framework

Job Description SummaryIf youre enthusiastic about delivering secure technology solutions to support a company providing extraordinary care to its customers, then Nationwide Technology is the place for you.

Nationwide's industry-leading technology workforce embraces an agile work environment and a collaborative culture to deliver outstanding solutions and results.

If that sounds like something you aspire to, we want to hear from you!

As a Cyber Senior Analyst Professional, youll play a vital role with Nationwides internal business partners acting as their Trusted Security Advisor.

Working with and learning from cybersecurity professionals, your responsibilities will include identifying and developing solutions to solve complex cyber and business problems across Nationwide.

Collaborating with technology teams and business leaders you will play a crucial role in safeguarding Nationwides members and their data.

Job Description Key ResponsibilitiesWorks to enhance the cyber risk posture related to confidentiality and integrity of areas assigned, identifying, documenting, and communicating cyber risks to business leaders and technology teams.

Completes basic risk assignments on time, meeting agreed-upon milestones.

Performs and tracks basic to moderate consulting efforts that result in improved cyber posture.

Informs peers and leaders about cyber exceptions.

Collaborates on vulnerability management, detection, and prevention by aiding in team planning and delivery activities.

Ensures application teams stay informed about the latest vulnerabilities and controls to keep the enterprise safe.

Conducts Threat Detection, Alerts, and Incident Response: Collaborates to uplift cybersecurity detection and alerts awareness and assists teams with responses to cyber incidents as required.

Assists in automating containment of cyber security events.

Applies secure software and systems engineering practices throughout the delivery lifecycle to ensure our data and technology solutions are protected from threats .