Top Cyber Security Jobs in Richmond, VA

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Leads Apollo’s detection and response strategy, detection architecture, security observability, incident response, and AI-assisted security workflows. Builds MITRE ATT&CK-aligned detections, response automations, investigation tools, and detection-as-code pipelines using Panther and Python. Leads high-severity incidents across cloud, SaaS, and corporate systems; improves IR readiness, metrics, playbooks, and forensic processes. Partners with Engineering, Infrastructure, IT, Legal, Fraud, and leadership while mentoring engineers and driving multi-quarter security initiatives.

Lead cloud security strategy and hands-on execution across AWS environments. Own CNAPP and CSPM capabilities, improve IAM and container security, build infrastructure-as-code guardrails, conduct architecture reviews and threat modeling, support detection and incident response, and drive remediation programs. Establish a multi-year cloud security roadmap, influence engineering priorities, mentor teammates, and partner with platform, infrastructure, SOC, and product engineering teams.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Leads the Network Security Engineering and Operations team, overseeing enterprise network security infrastructure, availability, lifecycle management, monitoring, incident response, compliance, risk mitigation, and 24/7 escalation support. Manages engineers, vendors, budgets, strategic projects, and cross-functional initiatives while communicating cybersecurity risks to technical and executive audiences. Drives automation, resilience, continuous improvement, and preventative security practices across sites, datacenters, and cloud environments.

Manage a global 24/7 Security Operations Center, including analyst leadership, shift coverage, operational processes, quality assurance, training, and career development. Improve workflows, playbooks, and service-level performance while collaborating with Product, Support, Tactical Response, Threat Hunting, and Detection Engineering teams. Lead initiatives, track security operations objectives, operationalize new services, and communicate technical concepts to internal stakeholders and external audiences.

Designs, implements, and governs secure AWS, Azure, and GCP cloud architectures across IaaS, PaaS, and SaaS environments. Defines security standards, IAM strategies, network controls, and guardrails; leads cloud security reviews, threat modeling, and risk assessments; integrates security into DevOps and CI/CD workflows; evaluates security tooling; supports compliance; and mentors engineering teams. The role also drives cloud security posture improvements, documentation, remediation, and long-term security architecture maturity.

Leads multiple security engineering teams, sets strategy and roadmaps for security automation, detection, resilience, IAM, data protection, and cloud security. Partners with executives to embed secure design across technology lifecycles, oversees major security programs, translates risk into engineering priorities, mentors future leaders, and advises on emerging threats and enterprise architecture.

Provides cybersecurity consulting and governance for a business function, evaluating architectures, infrastructure, cloud, network, data, access, and resilience risks. Advises engineering and product teams on security capabilities, risk mitigation, and secure development. Manages cyber risks, supports incident analysis, presents security health to executives, and evaluates AI-related security, privacy, compliance, and attack risks.

Owns the vision, roadmap, backlog, and delivery of cryptographic services and data protection cybersecurity products. Translates customer and business needs into engineering objectives, user stories, acceptance criteria, and prioritized features. Partners with product, engineering, architecture, and cross-functional teams in Agile and SAFe ceremonies. Uses expertise in PKI, encryption, cloud security, risk management, analytics, resilience, and emerging technologies such as post-quantum cryptography to improve cybersecurity capabilities.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

The Security Operations Engineer will build and manage cloud and enterprise security detections, lead incident response and threat hunting, automate security operations with SOAR playbooks, and maintain security telemetry pipelines. The role also involves vulnerability remediation, cloud architecture security reviews, cross-functional collaboration, on-call participation, and continuous improvement of runbooks and alert quality. Candidates need strong AWS security, SIEM, incident response, detection engineering, scripting, attacker tradecraft, and compliance framework experience.

Supports enterprise information security governance, risk, compliance, privacy, and third-party security initiatives. Maintains GRC documentation, SSPs, risk assessments, controls, policies, process maps, and security artifacts. Partners with business, technology, legal, privacy, project, and vendor stakeholders to identify risks, recommend controls, review contracts, and address security requirements throughout project lifecycles. Also researches security guidance and supports awareness and training programs.

Lead Apollo’s application security strategy across engineering, product, platform, data, and AI teams. Responsibilities include security architecture reviews, threat modeling, secure code review, penetration testing, exploit development, vulnerability management, secure-by-default building blocks, AI security standards, automation, and mentoring security engineers and champions. The role requires solving ambiguous, high-scale AppSec problems, influencing cross-functional roadmaps, and delivering measurable reductions in security risk.

The Senior Application Security Engineer will strengthen Apollo’s secure software development lifecycle through application security reviews, threat modeling, code analysis, vulnerability management, penetration testing, remediation, and AppSec tooling. The role includes developing automation, securing AI-powered features, improving security observability, enabling developers, and partnering across Engineering, Product, Platform, Data, Legal, and Security teams. This senior individual contributor will own long-term AppSec goals, resolve ambiguous risks, and drive cross-functional security improvements.

Serve as a hands-on technical security leader addressing complex product, infrastructure, architecture, and risk challenges. Evaluate security across compute, network, and storage; influence cross-functional decisions; lead M&A diligence and partner risk assessments; mentor senior individual contributors; and build a technical security community across product, enterprise, and security operations.

Leads full-stack engineering projects and developers building cloud-based, distributed microservices and cybersecurity solutions. Defines service boundaries, integration patterns, coding standards, and reusable frameworks; mentors engineers; evaluates emerging technologies; improves system performance and reduces technical debt. Works with product managers, architects, and Agile teams using modern programming languages, databases, containers, cloud platforms, CI/CD, infrastructure as code, automated testing, observability, and AI-assisted development tools.

Evaluate and mature cybersecurity capabilities using frameworks such as NIST CSF. Analyze cyber data, risks, vulnerabilities, controls, and logging strategies; lead assessments; identify root causes; track maturity objectives; and create executive and technical risk reports. Coordinate governance, metrics, and reporting across teams while partnering with stakeholders and executives to drive cybersecurity improvements.

Leads the company’s information security program, IT governance, risk assessments, security controls, technology strategy, vendor relationships, and major IT initiatives. Evaluates vulnerabilities, regulatory requirements, infrastructure improvements, and system lifecycle decisions while recommending risk-reduction and modernization strategies. Partners with leadership and business units to guide technical solutions, maintain governance documentation, oversee operational resiliency, and drive continuous improvement.

Own Cleo’s application and product security program across SaaS and customer-hosted products. Lead SSDLC practices, threat modeling, security tooling, vulnerability management, penetration testing, coordinated disclosure, CVE publication, and NIST CSF controls. Define product security standards, roadmap, secure defaults, access controls, and customer-facing advisories. Partner with engineering, product, architecture, and customers while guiding security engineers and consultants. Also establish protections for LLM applications, AI agents, and AI-assisted development workflows.

Build, test, automate, and deploy security controls for AWS and Azure cloud workloads. Assess cloud security posture using CSPM tools, integrate controls into CI/CD and infrastructure pipelines, validate compliance, and support production readiness. Collaborate with cloud architects, SOC, product, infrastructure, and DevOps teams; document solutions, analyze vulnerabilities, guide junior engineers, and contribute to security roadmap planning.

Build and operate secure AI platforms, agent workflows, and reusable automation patterns. Embed security into SDLC and PDLC through threat modeling, scanning, secrets detection, supply-chain controls, and automated reviews. Develop AWS identity, network, access, and infrastructure guardrails, including zero-trust and privileged-access automation. Own production services, monitoring, incident response, and on-call support while partnering with teams across the company to enable secure self-service workflows.

Monitor, triage, investigate, and respond to cybersecurity alerts and intrusions. Analyze EDR telemetry, logs, forensic artifacts, malware, and Microsoft 365 activity; determine root causes and recommend remediation. Support threat-related escalations, contribute to detection engineering and tuning, and collaborate across teams. The role requires familiarity with endpoint attack surfaces, threat actor techniques, Windows and domain administration, networking, web security, and basic malware analysis.

Lead full-stack engineering projects and developers building cloud-based identity security solutions. Design distributed microservices and APIs, establish engineering standards, partner with architects and product managers, reduce technical debt, optimize performance, mentor engineers, and influence technology strategy. The role uses modern programming languages, databases, containers, cloud platforms, CI/CD, infrastructure as code, automated testing, and observability in an Agile environment.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.