Top Cyber Security Jobs in Richmond, VA

Leads multiple security engineering teams, sets strategy and roadmaps for security automation, detection, resilience, IAM, data protection, and cloud security. Partners with executives to embed secure design across technology lifecycles, oversees major security programs, translates risk into engineering priorities, mentors future leaders, and advises on emerging threats and enterprise architecture.

Provides cybersecurity consulting and governance for a business function, evaluating architectures, infrastructure, cloud, network, data, access, and resilience risks. Advises engineering and product teams on security capabilities, risk mitigation, and secure development. Manages cyber risks, supports incident analysis, presents security health to executives, and evaluates AI-related security, privacy, compliance, and attack risks.

Owns the vision, roadmap, backlog, and delivery of cryptographic services and data protection cybersecurity products. Translates customer and business needs into engineering objectives, user stories, acceptance criteria, and prioritized features. Partners with product, engineering, architecture, and cross-functional teams in Agile and SAFe ceremonies. Uses expertise in PKI, encryption, cloud security, risk management, analytics, resilience, and emerging technologies such as post-quantum cryptography to improve cybersecurity capabilities.

Evaluate and mature cybersecurity capabilities using frameworks such as NIST CSF. Analyze cyber data, risks, vulnerabilities, controls, and logging strategies; lead assessments; identify root causes; track maturity objectives; and create executive and technical risk reports. Coordinate governance, metrics, and reporting across teams while partnering with stakeholders and executives to drive cybersecurity improvements.

Leads full-stack engineering projects and developers building cloud-based, distributed microservices and cybersecurity solutions. Defines service boundaries, integration patterns, coding standards, and reusable frameworks; mentors engineers; evaluates emerging technologies; improves system performance and reduces technical debt. Works with product managers, architects, and Agile teams using modern programming languages, databases, containers, cloud platforms, CI/CD, infrastructure as code, automated testing, observability, and AI-assisted development tools.

Own Cleo’s application and product security program across SaaS and customer-hosted products. Lead SSDLC practices, threat modeling, security tooling, vulnerability management, penetration testing, coordinated disclosure, CVE publication, and NIST CSF controls. Define product security standards, roadmap, secure defaults, access controls, and customer-facing advisories. Partner with engineering, product, architecture, and customers while guiding security engineers and consultants. Also establish protections for LLM applications, AI agents, and AI-assisted development workflows.

Build and operate secure AI platforms, agent workflows, and reusable automation patterns. Embed security into SDLC and PDLC through threat modeling, scanning, secrets detection, supply-chain controls, and automated reviews. Develop AWS identity, network, access, and infrastructure guardrails, including zero-trust and privileged-access automation. Own production services, monitoring, incident response, and on-call support while partnering with teams across the company to enable secure self-service workflows.

Leads Pluralsight’s enterprise-wide information security strategy across corporate and product environments. Oversees security architecture, regulatory compliance, policies, third-party audits, business continuity, disaster recovery, and security reporting. Builds operational rigor, monitors program effectiveness, translates regulations into practical controls, and communicates with executives, auditors, regulators, and technical teams. The role requires extensive information security leadership, deep knowledge of security technologies and regulations, and strong organizational communication skills.

Monitor, triage, investigate, and respond to cybersecurity alerts and intrusions. Analyze EDR telemetry, logs, forensic artifacts, malware, and Microsoft 365 activity; determine root causes and recommend remediation. Support threat-related escalations, contribute to detection engineering and tuning, and collaborate across teams. The role requires familiarity with endpoint attack surfaces, threat actor techniques, Windows and domain administration, networking, web security, and basic malware analysis.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Lead full-stack engineering projects and developers building cloud-based identity security solutions. Design distributed microservices and APIs, establish engineering standards, partner with architects and product managers, reduce technical debt, optimize performance, mentor engineers, and influence technology strategy. The role uses modern programming languages, databases, containers, cloud platforms, CI/CD, infrastructure as code, automated testing, and observability in an Agile environment.

The Application Security Architect leads secure design and architecture reviews, threat modeling, source-code reviews, and security initiatives across application, cloud, infrastructure, and identity layers. The role develops security architectures and documentation, mentors security and engineering teams, supports AI-assisted product security workflows, and advances security awareness through the Security Champions program. Responsibilities include communicating risks to technical and executive audiences and embedding secure practices throughout software development and deployment.

Lead product security assessments and penetration testing across MongoDB products and cloud environments. Conduct threat modeling, code analysis, architecture reviews, vulnerability verification, and attack research. Use AI and automation to improve assessment workflows, collaborate with engineering teams on remediation and secure coding, and advise on container security and secrets management. Coordinate with red and detection teams while mentoring others and communicating findings to technical and non-technical stakeholders.

Assess Falcon Complete customer environments, identify security posture gaps, recommend remediation, and guide customers toward Falcon standards. Document and resolve issues within SLAs, produce service reports, communicate directly with customers, and coordinate with internal support and technical teams. The role requires cybersecurity experience, threat detection and incident response knowledge, strong communication, operating system expertise, and the ability to use AI technologies to improve workflows and outcomes.

Assess customers’ Falcon environments, identify security-posture gaps, recommend remediation, and contact customers regarding standards misalignment. Document and resolve issues within SLAs, produce service reports, coordinate troubleshooting with support and internal teams, and promote customer satisfaction. The role requires cybersecurity experience, threat detection and incident response knowledge, operating-system proficiency, strong customer communication, and the ability to use AI technologies to improve workflows and decisions.

Represent security compliance with customers, map frameworks to Zscaler capabilities, create reusable playbooks, educate sales teams, and complete security questionnaires and assessments. Translate technical security and data-protection concepts into business and sales messaging while supporting frameworks including NIST, ISO 27001, DORA, GDPR, PCI, and HIPAA. The role requires customer-facing credibility, compliance expertise, security architecture knowledge, and the ability to leverage AI-driven workflows.

Lead enterprise cybersecurity engineering strategy across encryption, data protection, cryptographic policy, cloud security, DevSecOps, and automated security controls. Architect scalable key management and tokenization solutions, establish security reference architectures, automate detection and remediation, resolve systemic vulnerabilities, and embed security into software, cloud, infrastructure, and data platforms. Mentor senior engineers, influence technical roadmaps, and translate emerging threats into proactive architectural mitigations.

Leads cybersecurity product strategy, roadmaps, and enterprise security capabilities using threat, risk, data, and design thinking. Partners with engineering, operations, vendors, and executives to prioritize solutions, make build-versus-buy decisions, define metrics, and scale products. Oversees cybersecurity projects, risk programs, control automation, incident analysis, and stakeholder communication while recruiting, mentoring, and managing technical teams.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Leads endpoint detection engineering using AI, machine learning, Detection-as-Code, behavioral analytics, and MITRE ATT&CK. Owns detection coverage from telemetry onboarding through alert deployment, tuning, and gap analysis. Partners with threat intelligence, security operations, and business stakeholders to manage cyber risk and compliance. Conducts threat research, aligns detection capabilities with red-team techniques, mentors engineers, and drives architecture decisions for scalable, high-fidelity endpoint protections.

Lead macOS security research, including Endpoint Security API telemetry, malware reverse engineering, attack emulation, EDR bypass research, and proof-of-concept development. Collaborate with Detection Engineering, Product, and Engineering to operationalize findings, track Apple platform changes, improve detection coverage, document risks, and mentor teammates. The role also involves building ephemeral research infrastructure and representing the company through technical publications, speaking, and media engagement.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Leads Motive’s global security compliance, privacy, risk, audit, customer trust, and AI governance functions. Builds integrated controls across ISO, SOC, PCI DSS, FedRAMP, GDPR, and related frameworks; manages audits, privacy operations, international regulatory readiness, customer security reviews, policies, training, and human risk. The role also establishes AI-first automation, AI governance, and a path to FedRAMP while leading a distributed team and partnering across Legal, Engineering, Product, IT, Finance, Sales, and Customer Success.

Own the enterprise Application Security product roadmap, evaluate SAST/DAST/SCA tools, develop AI application-security strategies, partner with engineering teams, govern vulnerability disposition, and communicate cybersecurity risks to executives. The role requires extensive cybersecurity, AppSec, product management, metrics, risk governance, cloud-native, vulnerability management, and people leadership experience.