Top Remote Cyber Security Jobs in Richmond, VA

Research cloud and SaaS security vulnerabilities, develop proof-of-concepts, threat detections, and analytical algorithms, and hunt threat actors and insider threats. Analyze behavioral activity and large datasets, optimize detection algorithms, advise customers on hardening environments, collaborate with R&D teams, and publish cybersecurity research and threat insights.

Serves as a security subject matter expert supporting sales teams and customers. The role assesses security environments, facilitates incident response and investigations, demonstrates Varonis capabilities, supports threat detection evaluations, develops technical enablement materials, communicates product updates, and gathers customer feedback for product improvement. Strong expertise in cloud and self-hosted network security, Microsoft security ecosystems, identity management, SIEM, SOAR, and threat detection is required.

Leads enterprise security programs for a large-scale federal multi-tenant cloud environment. Responsibilities include security strategy, risk assessment, incident response, compliance, vulnerability monitoring, cloud security, DevSecOps integration, resource and financial management, stakeholder engagement, and executive communication. The role leads multidisciplinary teams, supports FedRAMP, FISMA, NIST, and Zero Trust compliance, and serves as the primary security contact for government customers.

Own and improve application security across applications, APIs, cloud services, and CI/CD pipelines. Manage penetration testing programs, vulnerability remediation, security scanning, WAF and API protections, threat modeling, secure design reviews, incident response, and compliance evidence. Partner with developers, vendors, cloud teams, and compliance stakeholders to close critical findings and embed secure delivery practices through automation and security AI tooling.

Own and improve application security across applications, APIs, cloud services, and CI/CD pipelines. Manage penetration testing programs, vulnerability remediation, security scanning, WAF and API protections, threat modeling, secure design reviews, and security automation. Partner with development, cloud, compliance, and security teams to remediate critical findings, support audits, improve secure coding, and provide security guidance. The role also involves leveraging AI-enabled tools for vulnerability triage and remediation.

Defines and maintains security architecture for AI/ML systems across Azure, Databricks, and enterprise platforms. Leads AI threat modeling, model and agent security, prompt-injection mitigation, tool and integration security, MLSecOps, and security observability. Creates reusable architecture patterns, requirements, and implementation guidance while validating controls through testing. Advises technology, governance, privacy, compliance, and business teams on secure AI adoption and evolving risks.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Leads Finance of America's AI security and safeguards program, including strategy, governance, red teaming, model and application security testing, threat detection, monitoring, and control validation. Maintains the enterprise AI inventory, evaluates use cases, integrates security requirements into procurement and development processes, and partners with legal, compliance, risk, and security teams. Reports AI risk posture to executives and boards, supports audits and regulatory examinations, and builds a team while remaining hands-on.

Build offensive red team agents that convert real-world adversary tradecraft into autonomous AI capabilities. Develop attack-chain workflows, payloads, command-and-control, evasion techniques, and post-exploitation skills across Windows, Active Directory, on-premises, cloud, and network environments. Design cyber ranges with production defenses, create measurable security benchmarks, validate attack paths in customer environments, and contribute research to the offensive security community.

Leads the design and implementation of security solutions for AI systems across data ingestion, model training, deployment, and runtime. Develops controls against prompt injection, data poisoning, model inversion, data leakage, and unauthorized access. Secures cloud infrastructure, APIs, identities, integrations, and third-party AI platforms; implements monitoring, automated security testing, and incident response. Partners with architecture, engineering, and governance teams to ensure resilient, compliant AI security practices.

Leads enterprise security strategy, staff, processes, technologies, compliance, risk assessment, incident remediation, and security operations. Oversees security solution configuration and integration, mentors analysts, develops policies and SOC procedures, supports vulnerability assessments, and collaborates with business stakeholders on information risk. The role also contributes to security project planning, budgeting, communications, and personnel management.

Lead messaging, positioning, and go-to-market for core AI-native security products. Drive product launches, sales enablement, demand generation content, customer research, and analyst/customer-facing evangelism to accelerate pipeline and revenue.

Part-time remote cybersecurity internship supporting presales, client engagement, technical writing, labs, certifications, and vendor solution research. Interns shadow consultants, build networking and security skills, practice explaining technical concepts, and gain exposure to SIEM, vulnerability scanning, endpoint security, cloud, and CTF platforms. The role requires foundational cybersecurity knowledge, self-directed learning, communication skills, and availability for 20–29 hours weekly during Central Time business hours. It may lead to full-time employment near Tulsa, Oklahoma.

Leads the strategy, architecture, delivery, and lifecycle management of secure multi-cloud products across AWS, Azure, GCP, and Oracle Cloud. Oversees cloud engineering teams, sets technical standards, drives modernization and DevSecOps adoption, establishes reliability and security metrics, and ensures alignment with CIS Benchmarks and governance requirements. Partners with product, engineering, sales, and customer teams while managing cloud maintenance, marketplace publishing, and organizational growth.

The posting provides conflicting information: the title indicates a Senior Associate in Cyber Security, while the description identifies the role as a Senior Payroll Analyst. No specific responsibilities are provided.

Supports the information security program by monitoring and triaging alerts, investigating and documenting security events, assisting with incident response, identity and access management, vulnerability remediation, security awareness, and security tool configuration. Collaborates with IT teams and an MSSP, maintains security documentation, and provides escalation support, including 24/7 availability for access management and incident response.

Conduct offensive security research focused on software supply chain threats, zero-day vulnerabilities, malicious code, third-party libraries, and CI/CD systems. Develop exploit techniques, collaborate on detection and mitigation capabilities, publish research through blogs and security conferences, and contribute open-source tools and methodologies. The role requires deep expertise in vulnerability research, reverse engineering, application security, exploit development, and software supply chain security.

Executes end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develops offensive tooling, implants, and evasion tradecraft; operates and improves AI-driven security agents; discovers and exploits vulnerabilities; and communicates findings to customers and internal security teams. The role also contributes to operational playbooks, product hardening, detection improvements, and scalable offensive security practices.

Leads investigations of critical vulnerabilities, zero-days, KEVs, and security exposures. Correlates technical data, determines scope and impact, coordinates remediation, commands incidents, escalates potential compromises, and maintains operational continuity across coverage periods. The role also mentors analysts and collaborates with SOC, incident response, technology, and security teams to reduce enterprise risk.

Leads security compliance assessments and audit readiness across cloud infrastructure and delivery services. Translates regulatory standards into technical guidance, evaluates architectures and controls, conducts risk assessments, directs remediation, and develops compliance playbooks and automated monitoring workflows. The role also mentors team members, coordinates audit evidence collection, and represents the organization during external certification assessments and audits.

Embeds security across the software development lifecycle by leading threat modeling, security design reviews, application security assessments, red-team exercises, and secure architecture guidance. The role drives adoption of SAST, DAST, and SCA tooling, strengthens CI/CD and cloud security, supports fintech regulatory compliance, and advises engineering and product leadership on prioritized security risks.

Assesses and mitigates security risks across applications, systems, networks, and cloud infrastructure. Conducts security assessments, identifies vulnerabilities and compromises, deploys mitigating controls, performs compliance investigations, and develops security guidance, policies, scripts, and tools. The role requires collaboration with IT, engineering, and business units, with emphasis on NIST frameworks, adversarial techniques, malware, intrusion management, FedRAMP, and CMMC environments.

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.

Lead OT security monitoring and triage operations, investigate suspicious activity across industrial networks, tune detections, manage vulnerabilities and asset classification, and escalate findings to incident responders and threat hunters. Produce customer-facing reports, support platform operations, mentor analysts, and collaborate across cybersecurity teams. The role requires shift-based coverage, remote coordination, and expertise in network security with a strong interest in ICS/OT environments.

Analyze, debug, and secure diverse codebases; implement features; refactor legacy software; conduct audits and penetration tests; optimize backend performance; and document findings to improve AI training datasets.