Top Cyber Security Jobs in Hampton, VA

Designs, implements, and oversees security architectures for federal systems, including zero-trust and cloud environments. Leads secure system design, control integration, detection and response architecture, and alignment with NIST and FISMA requirements. Collaborates with SOC analysts, incident responders, engineers, and leadership to build resilient, scalable security operations environments.

Owns compliance documentation and security control narratives for an Agentic AI platform. Responsibilities include authoring System Security Plans, managing POA&Ms, coordinating audit evidence, supporting RMF and ATO activities, maintaining policies and SOPs, and partnering with cloud, platform, and security engineers. The role validates that documentation reflects implemented infrastructure and supports CMMC, FedRAMP, DoD, and NIST-aligned compliance efforts.

Provides L1 technical support for enterprise customers using cloud email and SaaS security platforms. Resolves configuration, API, integration, false-positive, and threat investigation issues through troubleshooting and log analysis. Communicates root causes and recommendations, partners with Engineering and Product, supports onboarding, maintains knowledge documentation, and identifies recurring customer issues. Requires 4+ years of cybersecurity, SaaS, or enterprise technical support experience, strong email security and cloud ecosystem knowledge, API troubleshooting skills, and excellent communication.

Provides customer-facing cybersecurity expertise during presales engagements. Consults with CIOs, CISOs, security engineers, and procurement teams; educates sales teams; develops cybersecurity collateral, use cases, and service offerings; supports solution scoping and statements of work; and demonstrates security technologies including DLP, DSPM, DDR, and file encryption. The role requires strong cybersecurity knowledge, presales consulting experience, security framework familiarity, product expertise, and up to 20% travel.

Manages enterprise security awareness and training programs, including campaign development, content creation, global delivery, project calendars, compliance alignment, stakeholder collaboration, and outcome reporting. The role adapts training for diverse employee groups, uses creative learning methods and LMS platforms, supports security culture initiatives, and protects confidential information.

Conduct application security assessments and red team engagements for Fortune 1000 clients. Test web, API, mobile, and AI-enabled applications; perform threat analysis, reconnaissance, interviews, and technical control validation. Document vulnerabilities, analyze risk and root causes, and recommend remediation. The role may also involve network, Active Directory, social engineering, wireless, and security control bypass testing, along with client-facing consulting and report writing.

Provides customer-facing presales cybersecurity expertise, leading technical discovery, assessing cloud and hybrid security architectures, designing CNAPP and enterprise security solutions, delivering demonstrations and presentations, supporting proofs of concept, enabling sales teams, collaborating with vendors, and assisting with statements of work and post-sales handoffs.

Provides customer-facing presales cybersecurity expertise focused on OT and IoT environments. Advises executives, security teams, and procurement stakeholders; develops security services, sales collateral, use cases, system and network diagrams, and lab demonstrations. Educates sales teams, stays current on security technologies and trends, and supports consultative solution engagements involving industrial protocols, asset visibility, traffic analysis, segmentation, cloud security, and security frameworks.

Supports enterprise cybersecurity governance, risk, compliance, privacy, and security assurance activities. Conducts risk assessments, control reviews, business impact analyses, data classification, vendor risk reviews, audits, and remediation tracking. Maintains risk registers and evidence in Archer GRC, develops policies and reports, supports security awareness, incident and continuity governance, and evaluates emerging technology and AI risks. Advises technical teams, business owners, vendors, auditors, and executives on security and compliance requirements.

Lead product strategy, roadmap, and delivery for AI-native security experiences. Partner with engineering, security research, design, and data science teams to translate emerging technologies into customer value. Establish operational readiness practices covering release governance, risk management, quality reviews, incident learning, executive readiness, onboarding, adoption, and partner success. Drive complex cross-organizational programs and ensure scalable, reliable launches and measurable customer outcomes.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Drive new customer sales for cybersecurity, governance, risk, and compliance advisory services. Qualify partner-referred opportunities, conduct consultative discovery, develop proposals and Statements of Work, manage forecasts and CRM records, and coordinate with sales, delivery, and legal teams. Participate in project kickoffs, support project execution, and serve as the customer point of contact while identifying additional service opportunities.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Designs and operates controlled cyber-capability evaluations for frontier AI models and agentic systems. Builds vulnerable applications, cyber ranges, exploit-development targets, and evaluation harnesses; runs experiments; collects telemetry; analyzes model behavior and evaluation artifacts; and documents security findings. The role also develops sandboxing, containment, access, and secrets-management controls while collaborating with red-team operators, researchers, engineers, and Responsible AI stakeholders.

Designs, implements, and optimizes enterprise, cloud, and operational security controls. Responsibilities include managing firewalls, SIEM, EDR, SOAR, IAM, vulnerability assessments, penetration testing, incident response, security monitoring, architecture documentation, compliance alignment, and remediation support. The role collaborates with IT, DevOps, and security teams to improve detection, response, resilience, and audit readiness.

Leads technical pre-sales engagements for Microsoft security and compliance solutions. Designs architectures, delivers presentations, demonstrations, workshops, pilots, and proof-of-concept solutions focused on XDR, zero trust, cloud security, Purview, data protection, governance, privacy, and compliance. Partners with sales, consulting, and internal and external technical teams to resolve blockers, influence competitive strategy, and help customers implement Microsoft and third-party cloud security technologies.

Reviews client evidence and controls for SOC 2, ISO 27001, PCI, HIPAA, and GDPR audit readiness. Supports security program managers with client consultations, control implementation, policies, procedures, integrations, auditor coordination, and stakeholder communication. Identifies evidence gaps, documents actionable findings, tracks readiness metrics, contributes to QA standards, and provides product feedback. The role combines internal audit quality assurance with client-facing security compliance support.

Supports enterprise cybersecurity governance, risk, compliance, privacy, and security assurance activities. Conducts risk assessments, control reviews, BIAs, data classification, privacy reviews, vendor risk assessments, audits, and remediation tracking. Maintains risk registers and evidence in Archer GRC, develops security policies and reports, supports awareness training and incident governance, and evaluates emerging technology and AI initiatives for security and privacy risks. Applies NIST, SEC530, CIS, CJIS, HIPAA, PCI, FERPA, FTI, and related requirements.

Support backend, database, API, authentication, authorization, and security improvements for a live HR platform. Responsibilities include identifying vulnerabilities, improving tenant isolation and access controls, maintaining database integrity and performance, monitoring production issues, writing automated tests, reviewing dependencies, documenting changes, and assisting with backups, migrations, and deployment testing.

Partner with sales teams to win strategic data security opportunities. Present technical solutions, gather customer requirements, lead product evaluations, configure solutions, and design evaluation test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection and web technology knowledge, and collaboration across matrixed go-to-market and partner teams.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

Leads Windows security assurance across compliance, risk assessment, security controls, vulnerability research, and security tooling. Manages security assurance program managers, partners with engineering and product teams, translates requirements into controls, drives scalable security reviews and scanning, and coordinates high-impact initiatives. The role requires influencing across teams, managing ambiguity, tracking outcomes, and improving security processes throughout the product lifecycle.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Lead FIPS 140-3 evaluations and entropy source validations, including source code reviews, test planning, noise data analysis, entropy assessments, health-test evaluation, documentation, and CMVP submissions. Address reviewer comments, explain technical findings to customers, mentor colleagues, and improve testing automation and methods. The role requires cryptographic implementation knowledge, probability and statistics expertise, programming skills in C/C++ and Python, strong technical writing, and approximately 25% domestic travel.