Top Senior Cyber Security Jobs in Richmond, VA

Serve as the central information security lead for Enterprise Data, providing proactive consulting on API, data, infrastructure, network, container, and access security; perform risk assessments and architecture reviews; influence security adoption, escalate and manage cyber risk, support leadership reporting, and provide ad hoc security expertise.

Lead AI/ML-focused information security for enterprise agentic capabilities. Advise projects and CSOC teams on threat mitigation, compliance, automation, monitoring, and incident response. Partner with engineering and stakeholders to secure cloud, generative AI, and customer servicing platforms while driving data-driven decisions and continuous improvements.

Serve as the primary security consultant for a line of business, advising on infrastructure, application, data, network, and access security. Lead security risk assessments, architecture reviews, escalate/manage cyber risk, coordinate cross-functional security solutions, support executives with security posture updates, and provide guidance on modern platforms including cloud, containers, APIs, and generative AI security.

The role involves leading cybersecurity product management by developing strategies, collaborating with stakeholders, managing projects, and mentoring teams to enhance security solutions.

Provide technical oversight, assessments, and effective challenge of endpoint security controls and operations. Assess risks, draft senior-level reports, coordinate remediation, advise stakeholders, and stay current on emerging threats. Mentor teams and manage multiple programs to improve endpoint security posture.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Lead federal cloud security and compliance efforts to achieve and sustain ATOs. Implement and automate FedRAMP/IL-5/RMF controls, manage continuous monitoring, coordinate 3PAO audits, drive cloud security architecture, oversee change control/SCRs, and lead incident response and POA&M remediation using AI-enabled automation and monitoring across high-security GovCloud environments.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

Manage and coach a security operations team responsible for detection, investigation, and incident response. Perform hands-on work designing/tuning detections, operating SIEM/SOAR, leading incident response, improving automation and runbooks, and managing vendor relationships to protect patient and provider data.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

Lead planning, deployment, tuning, and operational support of CrowdStrike Falcon's AI/ML detection and response capabilities. Implement and optimize ML models, develop automation playbooks and Falcon API integrations, troubleshoot AI-related issues, support incident response and threat hunting, and deliver customer workshops and collateral. Up to 25% travel.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Lead competitive intelligence for CrowdStrike's cloud security portfolio, analyzing competitors' technical capabilities and market positioning. Provide deal support, win/loss analysis, and actionable guidance to Product, Sales, and senior leadership. Develop competitive materials, readiness plans, and recommendations to influence product strategy and GTM. Work autonomously and collaborate cross-functionally globally.

Responsible for ensuring security and integrity in technology operations, providing expertise in security engineering, and collaborating with teams to embed security measures in API design and deployment.

Sell Zscaler's data security portfolio (DLP, CASB, DSPM) to commercial accounts. Act as the specialist for customers and partners, build account-based strategies, collaborate with solution engineers and sales leadership, and close complex deals with stakeholders from technical practitioners to C-suite.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

The role involves managing the security incident response team, handling incidents, coaching team members, and improving security processes, aiming for operational excellence in threat response.

The role involves overseeing cybersecurity responsibilities within Capital One's Financial Services, ensuring risk management and process improvement. You'll collaborate with teams, manage projects, and deliver presentations to stakeholders.

The Senior Manager, Information Security Office (ISO) Consultant role involves leading cybersecurity strategies, securing AI/ML systems, and advising senior leadership on risks and governance in AI innovation.

The Senior Security Engineer will design secure development lifecycles, integrate security tools, lead remediation of security issues, and mentor teammates, ensuring systems resilience and security across DraftKings.

Lead planning, deployment, tuning, and operational support of CrowdStrike Falcon's AI/ML detection and response capabilities. Implement and troubleshoot AI-driven detection models, automation playbooks, API integrations, and threat-hunting for customers. Provide training, mentorship, and customer-facing collateral while optimizing detection efficacy and integrating Falcon into customers' security workflows.

The Senior Security Engineer will assess application security for AI systems, focusing on prompt injection techniques, threat modeling, and client training on AI security topics.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.