Column level security is a broad statement, but it's generally meant how do I allow or not allow users to query or view that data. It could also mean how do I protect that data, such as encrypting it or masking it.
For allowing or not allowing, those are permissions. SQL Server have a host of permissions which can be given to user made roles so that it's easily reusable, you'll want to start here for those. These work even from 2008, though 2008 is out of support so I would not use that version, 2014 is out of mainstream support and wouldn't do any new work on that version either.
Protecting a column via encrypting it you have column level encryption and Always Encrypted. Column level encryption is available in all versions, Always Encrypted will require 2016+.
Data masking can be done via dynamic data masking and is available in 2016+.
So basically, for 2008->2014 you have permissions and column level encryption available to you.