Top Cyber Security Jobs in Richmond, VA

Provide technical oversight, assessments, and effective challenge of endpoint security controls and operations. Assess risks, draft senior-level reports, coordinate remediation, advise stakeholders, and stay current on emerging threats. Mentor teams and manage multiple programs to improve endpoint security posture.

Provide centralized information security consulting for enterprise platforms: advise on infrastructure, data, network, resiliency, access management, and cloud security; perform risk assessments and architecture reviews; escalate/manage cyber risk; influence secure development practices; report security posture to leadership and support special security initiatives.

Responsible for ensuring security and integrity in technology operations, providing expertise in security engineering, and collaborating with teams to embed security measures in API design and deployment.

The role involves overseeing cybersecurity responsibilities within Capital One's Financial Services, ensuring risk management and process improvement. You'll collaborate with teams, manage projects, and deliver presentations to stakeholders.

The Senior Manager, Information Security Office (ISO) Consultant role involves leading cybersecurity strategies, securing AI/ML systems, and advising senior leadership on risks and governance in AI innovation.

The Mainframe Security Engineer will optimize cybersecurity processes, manage risk assessments, analyze security vulnerabilities, and report on cybersecurity threats using various frameworks and tools.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

Lead and grow an Infrastructure Security team securing cloud infrastructure, edge networks, and application delivery. Drive cloud security architecture, WAF/SASE/zero-trust implementations, PAM and secrets management, incident management and on-call response, KPIs/OKRs, cross-team partnerships, and continuous security process and tooling improvements.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

The Physical Security Manager oversees the design and management of security systems, operations, and infrastructure while leading security initiatives and vendor management across corporate environments.

Lead and mature GitLab's security compliance program, expand certification portfolio (SOC 2, ISO, PCI, FedRAMP, etc.), drive automation and AI-enabled compliance workflows, manage auditors and cross-functional stakeholders, mentor a team, and improve metrics, reporting, and regulatory readiness to support business growth.

Lead and scale an AI Security incubation team to drive technical GTM, recruit and mentor principal AI security specialists, build repeatable POVs and sales playbooks, advise C-level customers on secure AI deployments (RAG, agents, prompt workflows), and channel field insights into product and engineering roadmaps while supporting high-value deals.

As a Sr. Product Security Engineer, you will focus on network security, identifying gaps, architecting solutions, and leading cross-functional security initiatives.

As a Software Engineer in Product Security, you will develop security tooling, build scalable systems, and collaborate with teams to safeguard the security cloud.

Manage and improve vulnerability management, asset visibility, and cloud security across hybrid and multi-cloud environments. Operate tools (Wiz, Rapid7), maintain asset inventories, triage and track vulnerabilities, coordinate remediation with Engineering/SRE/IT, support incident investigations and on-call rotation, maintain compliance evidence and runbooks, and contribute to program improvements and reporting.

Lead operational support for privileged access management, implement AI security capabilities, and maintain security architecture. Collaborate to strengthen cybersecurity posture.

The Staff Cloud Security Engineer will secure cloud infrastructure for Huntress, focusing on product security, risk management, and compliance for a SaaS platform. Responsibilities include collaborating with DevOps, managing vulnerabilities, threat modeling, and developing incident response strategies.

Lead and grow a team to drive maturity in Insider Risk, Data Protection/DLP, AI Security, and Federal Security. Own strategy, cross-functional programs, threat scenarios, and security investments while working with stakeholders to implement controls and scale capabilities.

Advise Falcon Complete customers on security posture, assess and remediate misconfigurations, produce reports, document and resolve issues per SLAs, liaise with support and internal teams to troubleshoot and improve security outcomes.

Lead second-line IT risk oversight for technology, cyber, data and AI. Perform risk assessments, advise on controls and product launches, drive policy and remediation, support regulatory compliance, and report to executives and board on information security themes.

Lead customer trust and security governance: oversee contract reviews, security questionnaires, and escalations; partner with Legal, Sales, Product, and Procurement; develop templates, policies, playbooks, metrics, and awareness programs; and apply automation and AI to scale workflows and reporting.

As a Cryptography Engineer, you will design and maintain cryptographic solutions, manage TLS lifecycle, integrate HSMs, and automate cryptographic operations, while providing technical leadership and mentoring junior engineers.

The AI Security Consultant will enhance security programs, secure AI systems, engage in technical analysis, and report findings. They will also contribute to thought leadership while ensuring high-quality service delivery.

The Sr. Infrastructure Security Engineer is responsible for protecting patient data, enhancing cloud infrastructure security, and collaborating with engineering teams to implement effective security practices.