Top Cyber Security Jobs in Hampton, VA

Leads large-scale security, IT, and engineering programs from strategy through execution. Coordinates cross-functional stakeholders, manages governance, risks, dependencies, and timelines, and develops unified security and compliance frameworks. The role drives control implementation, regulatory alignment, risk mitigation, process automation, continuous improvement, and a culture of compliance while connecting security initiatives to business goals and customer expectations.

Hands-on Information Security Engineer responsible for SOC 2 Type 2 compliance, vulnerability management, Azure and endpoint security, security tooling, governance, customer security questionnaires, vendor risk, secure SDLC practices, incident response, and security awareness. The role partners across Engineering, IT, Legal, and Product to improve the company’s SaaS security posture.

Hands-on application security engineer responsible for finding and remediating vulnerabilities across a healthcare platform. Duties include offensive security testing, custom tooling, system hardening, security monitoring, PHI protection, AI-assisted vulnerability discovery, secure code review, security training, mentoring, defensive strategy, and disaster recovery resilience.

Lead and deliver end-to-end Salesforce security and compliance engagements. Advise enterprise customers on security controls, governance frameworks, and compliance posture. Drive pre-sales, shape solutions, and present to executives. Develop practice methodologies and reusable assets, mentor team members, and collaborate with Product, Engineering, and Trust on the Salesforce security roadmap.

Performs vulnerability management, WordPress and dependency security, Linux hardening, security-focused code reviews, incident response support, SOC 2 evidence collection, and platform engineering. Maintains PHP and JavaScript applications, Ubuntu/Debian servers, nginx, DNS, certificates, MySQL, deployments, and automation scripts. The role requires hands-on WordPress and PHP expertise, web security fundamentals, Linux command-line skills, scripting, and U.S. work authorization without sponsorship.

Leads security and operational incident response for infrastructure, platforms, hosting, and customer environments. Coordinates incident commanders, escalations, bridge calls, stakeholder communications, post-mortems, corrective actions, and reporting. Analyzes incidents and trends, maintains response documentation and governance standards, and improves operational maturity. Requires Linux incident response and forensics, advanced log analysis, system auditing, network and socket triage, cross-functional coordination, and composure during high-pressure events.

Serve as a senior security solution architect advising enterprise customers on modern, cloud-native Microsoft security architectures. Design and validate solutions using Microsoft security products, remove technical blockers, act as SME on complex deployments, gather customer insights to influence product roadmap and map solutions to business outcomes, and support large-scale security and compliance projects.

Defines and executes enterprise security strategy, roadmaps, governance, and high-priority initiatives. Leads security architecture reviews, threat modeling, risk assessments, and systemic remediation across products, platforms, and business operations. Influences cross-functional teams without direct authority, establishes secure practices and measurable outcomes, evaluates business and operational tradeoffs, and develops automation, analytics, and AI-assisted capabilities to improve security reviews and risk reduction.

Lead strategy to define, measure, and evolve Solution Engineer and Cloud Solution Architect excellence for Microsoft Security. Use data, AI-powered analytics, and customer insights to identify performance drivers, design capability strategies, advise senior leaders, and drive field transformation. Build governance, risk remediation, and scalable enablement programs while partnering across engineering, product, sales, and enablement to measure impact and continuously improve outcomes.

Leads information security governance, compliance, data protection, privacy, enterprise risk, third-party risk, and customer trust programs. Owns SOC 2 and ISO 27001 certifications, audits, security policies, data security strategy, GDPR and CCPA/CPRA compliance, and executive risk reporting. Builds and manages a team spanning GRC, privacy, and risk while partnering with engineering, legal, product, sales, and leadership.

Leads RapidFort’s cybersecurity, risk, compliance, and assurance programs. Owns the ISO 27001 ISMS, SOC 2 Type 2, FedRAMP authorization, and CMMC Level 2 programs; directs security monitoring, incident response, vulnerability management, identity governance, penetration testing, vendor risk, and security architecture. Reports risk to executive leadership and the Audit Committee, manages customer security assurance, oversees a compliance specialist, and serves as incident commander for declared security events.

Build backend services and distributed systems for a cybersecurity and software supply chain security platform. Develop scalable APIs, data pipelines, and platform components handling vulnerability, container, package, runtime, and SBOM data. Work across Linux, Kubernetes, containers, and cloud environments while solving concurrency, performance, reliability, and distributed processing challenges. Own projects from design through deployment, participate in architecture discussions, review code, and collaborate with security researchers and product teams.

Leads AI governance and cybersecurity risk advisory engagements for large, regulated organizations. Advises C-suite executives and boards on AI threats, regulatory requirements, governance operating models, risk assessments, control frameworks, and cyber resilience. Owns complex engagement delivery, client relationships, team leadership, business development, proposals, engagement economics, and practice growth. Develops methodologies, thought leadership, and risk-management solutions covering AI governance, cloud security, identity management, data protection, incident response, and third-party risk.

Build and secure scalable backend services and APIs while debugging, optimizing performance, implementing features, refactoring codebases, and conducting security reviews and penetration testing. The role also involves automated testing, code review, vulnerability assessment, and contributing domain expertise to training next-generation AI systems.

Leads cybersecurity governance, risk, and compliance programs, with ownership of third-party cyber risk, customer security assessments, risk exceptions, and the cyber risk register. Manages a geographically distributed team, matures GRC processes, drives automation, partners with internal and external stakeholders, and reports risk trends and recommendations to senior leadership. Requires extensive cybersecurity experience, people leadership, customer-facing skills, and experience building or improving third-party risk capabilities.

Conducts independent cybersecurity assessments of MARAD information systems across authorization, reauthorization, and continuous monitoring activities. Evaluates management, operational, and technical controls under NIST RMF; develops assessment plans, reports, risk assessments, and remediation recommendations; validates evidence and system compliance; supports ATO decisions; enters data into CSAM; and collaborates with federal cybersecurity stakeholders.

Designs, implements, and manages enterprise Microsoft security controls across Microsoft 365, Purview, Azure, Intune, Defender, Power Platform, and Windows environments. Responsibilities include security architecture, data protection, identity controls, threat modeling, vulnerability assessment, incident response, integrations with security platforms, compliance support, documentation, dashboards, enterprise deployments, and mentoring engineers.

Designs, implements, and operates Azure-native security controls for identity, networking, and workloads. Manages Defender for Cloud and Microsoft Sentinel, implements Conditional Access, MFA, and Zero Trust patterns, embeds security into Infrastructure-as-Code pipelines, monitors cloud posture, supports incident response, drives remediation, and maintains compliance documentation and metrics. Partners with cloud and infrastructure security teams to ensure secure, resilient, and compliant Azure environments.

The AI Security Consultant will enhance security programs, secure AI systems, engage in technical analysis, and report findings. They will also contribute to thought leadership while ensuring high-quality service delivery.

Leads Carina’s cloud infrastructure, internal IT, cybersecurity, risk management, compliance, and business continuity programs. Oversees AWS platform operations, infrastructure as code, deployment reliability, observability, incident response, disaster recovery, employee technology, identity systems, vendors, budgets, and governance. Advises executives on technology strategy, security posture, operational risk, and investments while partnering with Engineering and Data to provide a secure, reliable technology foundation.

Supports information and physical security, risk assessments, business continuity planning, regulatory controls, incident response, and internal security procedures. Identifies vulnerabilities across network and endpoint environments, coordinates remediation, manages endpoint protections and vulnerability tools, reviews user access, prepares security reports, and supports vendor management. The role also contributes to cloud security, business impact analyses, and security policy development.

Lead security engineering for a federal health supply chain and logistics software product line. Own security architecture through authorization, establish engineering standards, assess and remediate complex findings, advise stakeholders on risk, and mentor engineers. The role requires federal security framework expertise, cloud security experience, cross-team remediation leadership, and eligibility for a Public Trust background investigation. Preferred experience includes federal health IT, ATO packages, Kubernetes security, incident response, HIPAA, and Agile or SAFe environments.

Secure federal health IT supply-chain and logistics software by designing and validating application and infrastructure controls, assessing vulnerabilities, driving remediation, embedding security checks into CI/CD pipelines, monitoring security tools, supporting incident response, and translating federal security requirements into implementable technical designs.

Designs and engineers secure network and cloud architectures across AWS, GCP, Azure, and physical data centers. Responsibilities include threat modeling, network segmentation, monitoring, alerting, automation, attack-surface reduction, and secure connection patterns. The role drives strategic security improvements, partners with product and infrastructure teams, communicates architectural decisions, and mentors engineers. Candidates need deep hybrid networking and cloud security expertise, protocol knowledge, scripting ability, independent problem-solving skills, and strong communication.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.