Top Remote Cyber Security Jobs in Richmond, VA

Conduct cybersecurity assessments and OT/ICS inventories at CONUS and OCONUS DoD facilities. Perform logical network scans, document topology and data flows, evaluate compliance with DoD cybersecurity standards and RMF requirements, identify vulnerabilities, and recommend remediation. The role also supports site-visit planning, stakeholder coordination, logistics, and closeout reporting.

Supports company IT and security operations in a fully remote environment. Responsibilities include helpdesk and endpoint support, authentication and access management, security and compliance automation, disaster recovery, vendor management, system migrations, security tooling, and cross-functional technical project planning. The role also helps maintain audit-ready processes and supports AWS security, identity providers, compliance platforms, scripting, and remote security tools.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Designs and maintains security controls for blockchain, digital asset, application, cloud, and infrastructure environments. Responsibilities include threat modeling, cryptographic key management, application and API security, AWS and Kubernetes hardening, vulnerability management, monitoring, incident response, penetration testing, and security governance. The engineer collaborates with Cybersecurity, Engineering, DevOps, and Infrastructure teams to secure distributed systems and support regulatory requirements.

Provides security engineering and compliance expertise for FedRAMP Cloud Service Provider authorization packages. Reviews cloud architectures, security controls, system security plans, assessment reports, vulnerability scans, and penetration tests against NIST, FedRAMP, FISMA, RMF, and agency requirements. Leads architecture interviews, identifies technical and documentation gaps, advises government program leaders and CISOs on risk posture, supports continuous monitoring, and guides vendors through remediation and authorization activities.

Leads threat actor communications and ransomware negotiations, advising clients, legal counsel, and insurers during digital extortion incidents. Conducts threat intelligence collection and analysis, supports digital forensics and incident response investigations, develops persona operations, and produces technical and executive-facing deliverables. The role also improves intelligence workflows through automation, scripting, and tool integration, contributes to cybercrime research, and participates in an emergency on-call rotation.

Conduct original research into active campaigns, attacker behavior, and email and identity attacks. Synthesize technical findings from diverse sources into threat briefs, analytical reports, customer briefings, webinars, and executive summaries. Present intelligence to customers and prospects, collaborate with Threat Intelligence, Detection, Sales, Customer Success, and Marketing teams, mentor analysts, and use AI tools and automation to improve research and content workflows.

Own the strategy, roadmap, and commercial success of an AI SOC platform supporting MDR, MXDR, managed network security, and managed cloud security. Drive AI-assisted triage, automation, integrations, APIs, multi-tenancy, partner enablement, and MSSP-scale service packaging. Define network and cloud security capabilities, governance requirements, competitive positioning, pricing, and business cases while presenting to customers, partners, sales teams, and executives. Measure automation, workload reduction, cost-to-serve, adoption, retention, and partner revenue.

Monitors and investigates security alerts, threats, vulnerabilities, cloud misconfigurations, endpoint activity, and incidents. Supports incident response, CrowdStrike Falcon and Wiz administration, vulnerability remediation, access reviews, compliance activities, risk assessments, and security awareness initiatives. Collaborates with IT, cloud, infrastructure, application, and business teams to improve enterprise security posture and validate remediation efforts.

The Information Systems Security Engineer will secure a USPS information system modernization project by implementing federal security controls, conducting vulnerability assessments and penetration testing, integrating security into CI/CD pipelines, maintaining SSP, RMP, and POA&M documentation, monitoring cloud security tools, supporting incident response, and delivering security training. The role requires collaboration with development, operations, and federal security stakeholders while ensuring compliance with FISMA, NIST RMF, and FedRAMP standards.

Administers mainframe security access, including datasets, user IDs, CICS applications, resources, and certificates. Performs security reporting, access recertification, violation monitoring, audits, and compliance reviews. Maintains security plans, SOPs, test plans, and documentation while supporting investigations, migrations, and system implementations. Advises technical teams on security requirements and remediation. Uses RACF, ACF2, Vanguard, JCL, TSO, DB2, and related mainframe tools to maintain secure, compliant information systems.

Leads the design, implementation, and evolution of enterprise security capabilities across federal cloud and hybrid environments. The role engineers Zero Trust architectures, FedRAMP High controls, identity and access management, encryption, logging, vulnerability management, monitoring, and incident response. Responsibilities include supporting ATO authorization, continuous monitoring, risk remediation, security assessments, and secure adoption of AI-enabled technologies. The position requires collaboration with cloud, infrastructure, DevSecOps, compliance, and operations teams.

Designs and governs enterprise security architectures across applications, infrastructure, networks, endpoints, cloud environments, and sensitive data. Translates mission, business, regulatory, and federal requirements into secure designs; conducts architecture reviews and threat modeling; defines security standards and controls; guides DevSecOps, cloud, infrastructure, and application teams; and supports security technology selection and integration. The role requires extensive enterprise or federal security architecture experience, relevant certifications, U.S. citizenship, and the ability to obtain Public Trust clearance.

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Evaluate on-premises, cloud, hybrid, network, endpoint, application, identity, and infrastructure security. Identify risks and gaps, create reports, present recommendations, and support incident response and post-incident improvements. Collaborate with engagement managers and technical teams while communicating with English- and Spanish-speaking stakeholders. Travel approximately 20% for client engagements.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Customer-facing Cloud Solution Architect driving security transformation on Azure and Microsoft 365. Design and implement security architectures (Identity, Threat Protection, Cloud Security), run design sessions, perform hands-on evaluations of Defender, Sentinel, and Azure AD, and influence product and engineering teams to improve customer security posture and adoption.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.

Design and execute AI security evaluations focused on ethical jailbreaks, LLM red teaming, prompt injection, and tool-use abuse. Develop adversarial elicitation strategies, regression test suites, and evaluation frameworks to identify vulnerabilities in AI models. Collaborate with technical stakeholders to translate findings into safety improvements, and document methodologies and results for technical and non-technical audiences.

Leads cybersecurity solution sales for enterprise and small-to-medium business customers. Builds security transformation strategies, identifies and qualifies opportunities, develops pipelines, conducts consultative conversations, and drives complex cloud solution deals through closure. Partners with internal teams and channel partners on proposals, account planning, forecasting, competitive strategy, events, and customer outcomes. Serves as a cybersecurity subject matter expert, mentors colleagues, and supports customer adoption of AI, cloud, and security solutions.

Owns GitLab’s security policy and standards lifecycle, including drafting, approvals, exceptions, attestations, regulatory alignment, framework mapping, audits, and adherence measurement. Translates emerging regulations into actionable requirements, supports customer trust activities, and automates governance and evidence workflows using AI. Provides technical and program leadership across Security, Product, Legal, and Engineering while mentoring team members and shaping the security governance roadmap.

The Security Compliance Analyst manages cybersecurity, data privacy, classification, retention, governance, vulnerability assessments, incident response, and ATO documentation. Responsibilities include monitoring cloud environments and system logs, using SIEM tools, analyzing security risks, supporting security policies, reporting incidents, and ensuring compliance throughout the system lifecycle. The role also collaborates with Agile teams and stakeholders to protect sensitive data and resolve information assurance issues.

Designs, deploys, operates, and improves security infrastructure across AWS and on-premises environments. Responsibilities include AWS security controls, hybrid-cloud architecture, network segmentation, firewalls, Infrastructure as Code, automation, compliance support, monitoring, incident response, troubleshooting, and lifecycle management. The engineer will work with AWS security services, Palo Alto technologies, Terraform, scripting, DevSecOps practices, and frameworks including NIST, FedRAMP, and FISMA. The role is mostly remote with occasional onsite work near Rockville, Maryland.

Maintains the operational security posture of classified information systems supporting Collateral, SCI, and SAP environments. Responsibilities include authorization package management, compliance reviews, configuration change impact analysis, audit monitoring, vulnerability identification, incident handling, security documentation, system recovery oversight, and coordination with ISSM and authorization officials. The role requires SAP experience, TS/SCI clearance, eligibility for a CI polygraph, and on-site work with occasional travel.

Build and maintain hardened, minimal container images across Linux distributions and application runtimes. Remediate CVEs, troubleshoot package and dependency issues, reduce attack surfaces, and develop automation for image building, scanning, testing, versioning, SBOM generation, and publishing. Validate compatibility with Kubernetes and containerized environments, collaborate with infrastructure and security teams, establish hardening standards, and document curated-image usage.

Research cloud and SaaS security vulnerabilities, develop proof-of-concepts, threat detections, and analytical algorithms, and hunt threat actors and insider threats. Analyze behavioral activity and large datasets, optimize detection algorithms, advise customers on hardening environments, collaborate with R&D teams, and publish cybersecurity research and threat insights.