Top Senior Cyber Security Jobs in Hampton, VA

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

Lead and support cybersecurity planning, risk management, system security monitoring, and Assessment & Authorization (A&A) for GSS and Major Applications. Prepare authorization packages (SSP, SAR, POAM, GCP), collaborate on NIST control policies, apply system security engineering across lifecycles, and represent security engineering on cross-functional teams.

Support Navy Key Management Infrastructure accreditation by preparing RMF packages, uploading documentation to eMASS, assessing NIST 800-53 and DISA STIG/SRG compliance, developing security plans and POA&Ms, collaborating on remediation, and participating in DoN accreditation meetings.

Design, implement, and sustain security controls for cross‑domain and enterprise systems supporting the Air Force IC. Perform RMF assessments, vulnerability evaluations, and ATO activities; enforce DISA STIGs and NIST compliance; monitor and respond to security incidents; produce SSPs, POA&Ms, and control matrices; integrate controls with platform engineers; and maintain dashboards and CVU tracking using XACTA and ELK/Splunk.

Serve as RMF/ATO subject-matter expert for COMSUBLANT. Review and prepare A&A documentation (SSPs), track authorization progress, advise shipboard IT, evaluate security solutions, maintain device records, and support ISSM to ensure operational cybersecurity posture for submarine network systems.

Lead security strategy, operations, and GRC across corporate and customer-facing transit systems. Drive security architecture, incident response (incident commander), threat intelligence, tabletop exercises, vendor risk management, and compliance across PCI DSS, SOC 2, and ISO 27001. Serve as primary auditor contact and communicate risk to leadership.

Design, implement, and validate cloud security architectures for Intelligence Community systems. Support RMF assessments, create and evaluate security documentation, advise on security doctrine, recommend tools, and implement cloud-native and IaC solutions. Work hands-on with clients to ensure compliance and secure mission-critical environments.

Design, implement, and assess cloud security architectures for intelligence community systems. Develop and evaluate security documentation, perform RMF assessments, recommend and deploy cloud security tools (on-prem, cloud, hybrid), and support accreditation. Collaborate with stakeholders, codify security procedures, and implement infrastructure-as-code solutions to meet mission requirements.

Lead multicloud cloud security architecture across AWS, Azure, and GCP. Develop enterprise security standards, governance models, and reference architectures. Guide engineering teams on secure-by-design implementations, IaC patterns, networking, identity, telemetry, and compliance. Conduct architecture reviews and advance scalable, compliant cloud environments for intelligence-community systems.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

Lead research and deliver strategic and tactical advice on AI data security and AI ecosystem data management. Produce written research, briefings, and presentations; advise clients and stakeholders; grow networks of thought leaders and vendors; ensure research integrity and collaborate across Gartner to support deliverables. Travel up to 25%.

Own security and infrastructure for a fintech payments platform, with security comprising roughly two-thirds of the role. Responsibilities include cloud and application security, IAM, secrets management, threat modeling, detection engineering, incident response, vulnerability management, compliance, privacy, CI/CD, infrastructure as code, observability, reliability, backups, disaster recovery, and on-call operations. The role reports to the CTO and will establish the security function as the company’s founding security hire.

Serve as a senior security solution architect advising enterprise customers on modern, cloud-native Microsoft security architectures. Design and validate solutions using Microsoft security products, remove technical blockers, act as SME on complex deployments, gather customer insights to influence product roadmap and map solutions to business outcomes, and support large-scale security and compliance projects.

Design and assess secure systems for Microsoft business operations: perform threat modeling and security design assessments, drive risk-based architecture decisions, communicate risk, mentor teammates, and ensure compliance with security policies and screenings.

Lead a U.S.-based team of Security Operations Engineers and TPMs to design, build, and operationalize identity protections that reduce lateral-movement risk. Define strategy, apply AI and automation, partner with engineering and platform teams, deliver scalable controls, and drive measurable security outcomes, operational readiness, and executive reporting.

Lead Wikimedia Foundation’s product security strategy, prioritize security and privacy engineering initiatives, develop platform interventions against threats, strengthen organizational security culture, and communicate with Wikimedia communities. The role partners with cross-functional and departmental leaders on information security, represents the Foundation to volunteers, and applies AI-based tools to security analysis, code review, and software engineering. Prior product management experience is not required, but strong technical, security, communication, and online-community experience are important.

Own and evolve the application security program, partnering with development teams to embed secure coding, threat modeling, code review, and vulnerability remediation. Manage SAST, SCA, DAST, ASM, mobile security, and WAF tooling while improving CI/CD automation. Collaborate with DevOps on AWS, ECS, IAM, networking, containers, and secure infrastructure. Develop standards, playbooks, and training, lead vulnerability triage, and support incident investigations and PCI compliance reporting.

Manages information security risks, vendor and third-party risk reviews, mitigation plans, policy exceptions, and compliance reporting. Partners with stakeholders and Enterprise Risk Management to maintain risk policies within tolerance. Serves as a technical expert, supports risk awareness and accountability, monitors security controls, and contributes to operational goals. The role requires expertise in IT audit, security monitoring, access management, encryption, networking, incident response, SOX compliance, and project management.