Top Senior Cyber Security Jobs in Richmond, VA

Own the enterprise Application Security product roadmap, evaluate SAST/DAST/SCA tools, develop AI application-security strategies, partner with engineering teams, govern vulnerability disposition, and communicate cybersecurity risks to executives. The role requires extensive cybersecurity, AppSec, product management, metrics, risk governance, cloud-native, vulnerability management, and people leadership experience.

Leads cybersecurity governance, capability maturity, risk assessments, and enterprise risk-reduction initiatives. Manages and mentors cybersecurity professionals, advises on security tools and platforms, develops risk and threat classification frameworks, and coordinates continuous improvement programs. The role evaluates controls, capabilities, tooling, threats, and vulnerabilities; communicates remediation recommendations to leadership; supports cybersecurity metrics and dashboards; and drives consistent control design, testing, and reporting across cyber programs.

Leads cybersecurity capability advancement, governance, risk assessments, control monitoring, and remediation tracking. Analyzes cyber and fraud intelligence data to produce risk indicators, metrics, dashboards, and actionable insights. Drives automation for security workflows, presents risk trends to senior leaders, supports incident analysis, and mentors cybersecurity associates. The role requires expertise in cybersecurity frameworks, cloud environments, security tooling, cyber-enabled fraud investigations, database querying, programming, and regulated-industry risk management.

Leads cybersecurity risk reduction initiatives, capability assessments, control evaluations, and continuous improvement programs. Advises on cybersecurity tools, frameworks, threats, vulnerabilities, and remediation strategies while coordinating efforts across cyber programs. Mentors associates, communicates risks and control gaps to leadership, supports cybersecurity metrics and dashboards, and drives alignment with enterprise standards, business objectives, and regulatory expectations across multi-cloud environments.

Leads cybersecurity product strategy and roadmaps for enterprise network security services. Evaluates threats, risks, technologies, and build-versus-buy options; manages RFI/RFP processes; translates security objectives into product backlogs and engineering requirements; defines metrics and value propositions; advises executives; and mentors teams. The role partners extensively with engineering, operations, developers, and business stakeholders to deliver scalable security capabilities.

Leads cybersecurity governance, risk reduction, capability maturity, assessments, and continuous improvement across enterprise programs. Advises on security tools, frameworks, controls, threats, vulnerabilities, and remediation; coordinates cross-domain initiatives; communicates risks and recommendations to leadership; and manages and develops cybersecurity staff.

Designs and deploys enterprise IAM frameworks, automated security controls, cloud and on-premise security platforms, and vulnerability and compliance automation. Partners with software, cloud, and infrastructure teams to embed security by design, evaluates security technologies, establishes engineering standards, and supports investigations and troubleshooting. Requires cybersecurity experience, cloud expertise, automation skills, and preferred SailPoint ISC and IdentityIQ experience.

Leads cybersecurity capability advancement, third-party risk management, control and risk assessments, issue remediation, and cyber-risk reporting. Uses security frameworks, tools, automation, and data analysis to identify trends and mitigation opportunities. Presents insights to senior leaders, improves monitoring workflows, supports incident analysis, and mentors cybersecurity associates.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Leads Enterprise Security services, setting and enforcing security standards across identity, endpoints, business applications, cloud infrastructure, networking, IoT, and automation. Partners with IT, SOC, vulnerability management, governance, and threat operations teams to secure applications, monitor environments, manage EDR policies, remediate vulnerabilities, assess risks, and maintain compliance. Also drives AI security initiatives and uses AI tools to improve enterprise security capabilities and team efficiency.

Lead OT security monitoring and triage operations, investigate suspicious activity across industrial networks, tune detections, manage vulnerabilities and asset classification, and escalate findings to incident responders and threat hunters. Produce customer-facing reports, support platform operations, mentor analysts, and collaborate across cybersecurity teams. The role requires shift-based coverage, remote coordination, and expertise in network security with a strong interest in ICS/OT environments.

Provides proactive technical account management for strategic cybersecurity customers. Responsibilities include customer onboarding, platform training, health checks, issue resolution, escalation management, success planning, knowledge-base development, renewal-risk mitigation, and expansion support. The role serves as a customer advocate while collaborating with support, engineering, and sales teams. Candidates need cloud, application infrastructure, security, incident response, forensics, networking, and cloud architecture expertise, along with strong communication and customer-success skills.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Partner with sales teams to win strategic data security opportunities. Present technical solutions, gather customer requirements, lead product evaluations, configure solutions, and design evaluation test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection and web technology knowledge, and collaboration across matrixed go-to-market and partner teams.

Lead insider risk detection engineering and investigations using EDR/XDR, UEBA, SIEM, and SOAR tools. Refine detection rules, reduce alert noise, close coverage gaps, manage investigations, develop playbooks, document evidence, mentor analysts, and collaborate discreetly with HR, Legal, business leaders, and executives. The role also requires investigative workflow automation using Python or JavaScript and ownership of scalable security processes.

Build and lead Motive’s globally distributed SOC, owning detection engineering, 24/7 incident response, threat hunting, intelligence, security analytics, endpoint protection, cloud and workload monitoring, and AI-driven automation. Establish operating models, coverage strategies, runbooks, telemetry platforms, incident command processes, and measurable detection and response capabilities across corporate and production environments.

The Senior Security Engineer will secure networks, systems, applications, databases, and cloud infrastructure; embed security controls into build pipelines; manage vulnerabilities and remediation; respond to incidents through on-call rotation; and promote security awareness across engineering. The role requires cloud security, infrastructure-as-code, application security, REST API protection, IAM, and tools including AWS, Kubernetes, Terraform, Wiz, Exaforce, and CrowdStrike.

Leads enterprise data security and information governance by building data intake, catalog, marketplace, classification, lineage, and access-control programs. Translates privacy and security requirements into technical controls, self-service workflows, and governance documentation. Partners with Legal, InfoSec, engineering, product, and data teams to support compliant data use, AI/ML initiatives, and regulatory requirements including HIPAA, GDPR, and CCPA. Measures adoption, turnaround times, and governance maturity across a global SaaS organization.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Assess product and application architectures, develop threat models, identify security risks, and guide engineering teams on remediation. Promote security culture through training, mentoring, vulnerability management, and internal security initiatives. Build security tooling, automation, patterns, and workflows that embed secure-by-design practices across engineering. Partner with product managers, designers, and engineers to secure complex, large-scale cloud systems.

Protect corporate data through DLP implementation, tuning, alert review, false-positive reduction, and control optimization across web, endpoint, email, cloud, and SaaS environments. The engineer will review data protection programs, improve monitoring and blocking controls, collaborate with business partners, and use automation and emerging AI tools to strengthen security operations.

Leads and mentors a product security engineering team while remaining hands-on. Owns certification, accreditation, DISA STIG hardening, SOC 2, ISO 27001, audit readiness, vulnerability remediation, security tooling, and authorization initiatives. Coordinates with Compliance, Legal, Sales Engineering, and customers; tracks remediation SLAs and certification posture; establishes evidence collection processes; and translates technical security strategy into an executable roadmap.

Lead enterprise eDiscovery and insider-risk investigations by collecting, preserving, analyzing, and reviewing data from cloud infrastructure, endpoints, and repositories. Build AI-powered automation, correlate activity logs into investigative timelines, manage legal holds and governance policies, support digital forensics, and produce structured evidence packages for Security, Legal, HR, and investigative teams.

Administer and improve Workday and multi-platform HR security, including role-based access, security groups, access reviews, request approvals, audit support, governance documentation, and compliance controls. Evaluate elevated access requests, identify risks, resolve routine issues, coordinate remediation, and escalate complex decisions. Partner with HR, IT, Legal, and Compliance stakeholders to strengthen policies, processes, and least-privilege access across Workday, Peakon, UKG, Prism, and HR data platforms.