Top Senior Cyber Security Jobs in Richmond, VA

Leads cybersecurity product strategy and roadmaps for enterprise network security services. Evaluates threats, risks, technologies, and build-versus-buy options; manages RFI/RFP processes; translates security objectives into product backlogs and engineering requirements; defines metrics and value propositions; advises executives; and mentors teams. The role partners extensively with engineering, operations, developers, and business stakeholders to deliver scalable security capabilities.

Leads cybersecurity risk reduction initiatives, capability assessments, control evaluations, and continuous improvement programs. Advises on cybersecurity tools, frameworks, threats, vulnerabilities, and remediation strategies while coordinating efforts across cyber programs. Mentors associates, communicates risks and control gaps to leadership, supports cybersecurity metrics and dashboards, and drives alignment with enterprise standards, business objectives, and regulatory expectations across multi-cloud environments.

Supports cybersecurity governance, risk management, compliance, and audit activities. Conducts risk and control assessments, maintains risk registers and audit evidence, reviews vendor security documentation, supports IT audits and privacy reviews, develops policies and compliance reports, coordinates remediation and security awareness training, and evaluates emerging technology and AI risks.

Designs, develops, tests, deploys, and maintains cybersecurity automation playbooks using SOAR, Python, APIs, CI/CD, infrastructure-as-code, and LLMs. Partners with SOC, DLP, threat intelligence, red team, insider risk, and detection teams to automate workflows, improve incident response, tune detections, and measure efficiency gains. Leads automation initiatives, enforces quality and standardization, and supports continuous improvement across security functions.

Conducts cybersecurity governance, risk, compliance, privacy, audit, and third-party security assessments. Maintains risk registers, corrective actions, evidence, security documentation, and executive reporting. Applies NIST, Commonwealth, regulatory, and industry requirements; reviews data-sharing agreements and vendor documentation; supports security awareness, AI governance, incident response, continuity planning, and control assessments. Advises technical teams, business owners, auditors, executives, and vendors while tracking remediation and escalating unresolved risks.

Designs and deploys enterprise IAM frameworks, automated security controls, cloud and on-premise security platforms, and vulnerability and compliance automation. Partners with software, cloud, and infrastructure teams to embed security by design, evaluates security technologies, establishes engineering standards, and supports investigations and troubleshooting. Requires cybersecurity experience, cloud expertise, automation skills, and preferred SailPoint ISC and IdentityIQ experience.

Leads cybersecurity capability advancement, third-party risk management, control and risk assessments, issue remediation, and cyber-risk reporting. Uses security frameworks, tools, automation, and data analysis to identify trends and mitigation opportunities. Presents insights to senior leaders, improves monitoring workflows, supports incident analysis, and mentors cybersecurity associates.

Own Deepgram’s privacy operations, security compliance, audit evidence, control mapping, security questionnaires, policies, and public trust documentation. Lead DPIAs, data-flow mapping, DSAR and deletion workflows, vendor reviews, SOC 2, ISO 27001, and PCI DSS audits. Partner with Engineering, Legal, Research, and Sales Engineering to verify technical claims, automate evidence collection, maintain accurate documentation, and translate privacy and AI regulations into practical requirements and enablement.

Designs and implements secure Azure cloud infrastructure for an enterprise migration. Configures Azure networking and security controls, manages IAM and privileged access, monitors threats through Sentinel and Splunk, investigates incidents, manages vulnerabilities, develops policies and automation, and applies Zero Trust, NIST, CIS, and enterprise security standards.

Secure and support enterprise Azure infrastructure and migration through cloud security architecture, Zero Trust, IAM, vulnerability management, network security, SIEM monitoring, incident response, threat hunting, compliance, and audit readiness. The role configures Azure security controls, validates remediation, implements deployment pipeline security gates, collaborates with engineering and governance teams, and mentors junior engineers.

Leads the architecture, implementation, monitoring, and continuous improvement of secure Azure cloud environments. Responsibilities include vulnerability and risk management, identity and network security, Azure policy and automation, SIEM monitoring, threat detection, incident investigation and containment, security governance, compliance, audit support, and collaboration with engineering, application, SOC, and infrastructure teams.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Lead OT security monitoring and triage operations, investigate suspicious activity across industrial networks, tune detections, manage vulnerabilities and asset classification, and escalate findings to incident responders and threat hunters. Produce customer-facing reports, support platform operations, mentor analysts, and collaborate across cybersecurity teams. The role requires shift-based coverage, remote coordination, and expertise in network security with a strong interest in ICS/OT environments.

Provides proactive technical account management for strategic cybersecurity customers. Responsibilities include customer onboarding, platform training, health checks, issue resolution, escalation management, success planning, knowledge-base development, renewal-risk mitigation, and expansion support. The role serves as a customer advocate while collaborating with support, engineering, and sales teams. Candidates need cloud, application infrastructure, security, incident response, forensics, networking, and cloud architecture expertise, along with strong communication and customer-success skills.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Conduct advanced application security and red team assessments for Fortune 1000 clients. Test web, API, mobile, and AI-enabled applications; perform threat analysis, reconnaissance, customer interviews, and technical control validation. Document vulnerabilities, analyze risk and root causes, and recommend remediation. Projects may also include network, Active Directory, social engineering, wireless, and security technology bypass testing. The role requires strong penetration testing, consultative communication, reporting, and client-facing skills.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Supports enterprise cybersecurity governance, risk, compliance, privacy, and security assurance activities. Conducts risk assessments, control reviews, BIAs, data classification, privacy reviews, vendor risk assessments, audits, and remediation tracking. Maintains risk registers and evidence in Archer GRC, develops security policies and reports, supports awareness training and incident governance, and evaluates emerging technology and AI initiatives for security and privacy risks. Applies NIST, SEC530, CIS, CJIS, HIPAA, PCI, FERPA, FTI, and related requirements.

Partner with sales teams to win strategic data security opportunities. Present technical solutions, gather customer requirements, lead product evaluations, configure solutions, and design evaluation test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection and web technology knowledge, and collaboration across matrixed go-to-market and partner teams.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Designs and implements cloud security solutions for Microsoft Azure and Microsoft 365 customers. Leads security architecture discussions, Zero Trust adoption, technical evaluations, implementation planning, troubleshooting, and enterprise security strategy. Advises executives and technical stakeholders on identity and access management, threat protection, cloud security, information protection, and secure-by-design architectures. Collaborates with Microsoft engineering, product, and security teams to remove blockers and orchestrates technical resources to deliver customer outcomes.

Secure software and cloud environments through threat modeling, code review, vulnerability remediation, security automation, detection engineering, and attack simulations. The role partners closely with Engineering, manages Snyk and Docker Scout findings, integrates security into CI/CD, coordinates third-party penetration testing for SOC 2 and HITRUST, and helps define secure architecture for mobile, data lake, AI, and production cloud systems.