Top Cyber Security Jobs in Richmond, VA

Lead a U.S.-based team of Security Operations Engineers and TPMs to design, build, and operationalize identity protections that reduce lateral-movement risk. Define strategy, apply AI and automation, partner with engineering and platform teams, deliver scalable controls, and drive measurable security outcomes, operational readiness, and executive reporting.

Lead end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational security environments. Develop offensive tooling, implants, and AI-driven autonomous agents for reconnaissance, exploitation, and post-exploitation. Serve as a technical lead for customer engagements, brief security executives, collaborate with blue teams and threat intelligence organizations, establish operational standards, and mentor senior operators.

Lead CSfC cybersecurity implementation engineers supporting USN classified networks. Oversee secure solution design, deployment, configuration, integration, testing, compliance with NSA standards, audits, risk assessments, documentation, troubleshooting, vendor evaluation, executive briefings, and team development. Apply expertise in RHEL platform security, virtualization, PKI, DoD hardening, networking, encryption, firewalls, and IPsec VPNs while coordinating with government, industry, and cross-functional stakeholders.

Leads client-facing ServiceNow Security Operations and cybersecurity consulting engagements from discovery through implementation and adoption. Advises executives on security operations, vulnerability and exposure management, threat intelligence, governance, automation, integrations, and responsible AI use. Oversees engagement quality, budgets, risks, schedules, and client satisfaction while leading consulting teams. Supports recruiting, practice development, business development, proposals, and account growth.

Supports federal cybersecurity risk management and authorization activities using the NIST RMF. Responsibilities include system categorization, security control documentation, SSP and POA&M management, control assessments, vulnerability remediation, continuous monitoring, ATO preparation, incident response coordination, and FISMA compliance. The role requires collaboration with stakeholders, cloud security experience, cybersecurity governance tool use, Security+ certification, and eligibility for a Public Trust.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Design and implement AI-powered security agents and tooling across CI/CD, perform threat modeling and manual assessments, find and drive remediation of vulnerabilities, embed security into development workflows, connect telemetry to detection systems, and shape product security strategy and incident response.

Designs, implements, maintains, and supports security infrastructure, including firewalls, networks, cloud workloads, authentication, monitoring, threat hunting, vulnerability assessments, incident response, and security controls. The role maintains federal compliance, supports system hardening and access control, automates administration, contributes to cloud migration, documents technical processes, and participates in project and on-call support activities.

Leads large-scale security, IT, and engineering programs from strategy through execution. Coordinates cross-functional stakeholders, manages governance, risks, dependencies, and timelines, and develops unified security and compliance frameworks. The role drives control implementation, regulatory alignment, risk mitigation, process automation, continuous improvement, and a culture of compliance while connecting security initiatives to business goals and customer expectations.

Hands-on Information Security Engineer responsible for SOC 2 Type 2 compliance, vulnerability management, Azure and endpoint security, security tooling, governance, customer security questionnaires, vendor risk, secure SDLC practices, incident response, and security awareness. The role partners across Engineering, IT, Legal, and Product to improve the company’s SaaS security posture.

Hands-on application security engineer responsible for finding and remediating vulnerabilities across a healthcare platform. Duties include offensive security testing, custom tooling, system hardening, security monitoring, PHI protection, AI-assisted vulnerability discovery, secure code review, security training, mentoring, defensive strategy, and disaster recovery resilience.

Lead and deliver end-to-end Salesforce security and compliance engagements. Advise enterprise customers on security controls, governance frameworks, and compliance posture. Drive pre-sales, shape solutions, and present to executives. Develop practice methodologies and reusable assets, mentor team members, and collaborate with Product, Engineering, and Trust on the Salesforce security roadmap.

Performs vulnerability management, WordPress and dependency security, Linux hardening, security-focused code reviews, incident response support, SOC 2 evidence collection, and platform engineering. Maintains PHP and JavaScript applications, Ubuntu/Debian servers, nginx, DNS, certificates, MySQL, deployments, and automation scripts. The role requires hands-on WordPress and PHP expertise, web security fundamentals, Linux command-line skills, scripting, and U.S. work authorization without sponsorship.

Leads security and operational incident response for infrastructure, platforms, hosting, and customer environments. Coordinates incident commanders, escalations, bridge calls, stakeholder communications, post-mortems, corrective actions, and reporting. Analyzes incidents and trends, maintains response documentation and governance standards, and improves operational maturity. Requires Linux incident response and forensics, advanced log analysis, system auditing, network and socket triage, cross-functional coordination, and composure during high-pressure events.

Serve as a senior security solution architect advising enterprise customers on modern, cloud-native Microsoft security architectures. Design and validate solutions using Microsoft security products, remove technical blockers, act as SME on complex deployments, gather customer insights to influence product roadmap and map solutions to business outcomes, and support large-scale security and compliance projects.

Defines and executes enterprise security strategy, roadmaps, governance, and high-priority initiatives. Leads security architecture reviews, threat modeling, risk assessments, and systemic remediation across products, platforms, and business operations. Influences cross-functional teams without direct authority, establishes secure practices and measurable outcomes, evaluates business and operational tradeoffs, and develops automation, analytics, and AI-assisted capabilities to improve security reviews and risk reduction.

Lead strategy to define, measure, and evolve Solution Engineer and Cloud Solution Architect excellence for Microsoft Security. Use data, AI-powered analytics, and customer insights to identify performance drivers, design capability strategies, advise senior leaders, and drive field transformation. Build governance, risk remediation, and scalable enablement programs while partnering across engineering, product, sales, and enablement to measure impact and continuously improve outcomes.

Owns Microsoft’s Security Compete Program, developing competitive strategy, battlecards, positioning, and objection-handling guidance for AI security offerings. Provides deal coaching, analyzes competitive wins and losses, tracks performance metrics, gathers field intelligence, and delivers executive reporting. Partners across sales, marketing, engineering, product, and regional teams to improve go-to-market execution, strengthen competitive differentiation, accelerate strategic deals, and influence product and field-readiness decisions.

Leads information security governance, compliance, data protection, privacy, enterprise risk, third-party risk, and customer trust programs. Owns SOC 2 and ISO 27001 certifications, audits, security policies, data security strategy, GDPR and CCPA/CPRA compliance, and executive risk reporting. Builds and manages a team spanning GRC, privacy, and risk while partnering with engineering, legal, product, sales, and leadership.

Lead solution sales for Microsoft Security with enterprise customers: identify opportunities, build solutions and business cases, manage senior relationships and pipeline, collaborate with partners and internal teams, forecast and pursue high-potential accounts, and obtain relevant product/role certifications.

Leads RapidFort’s cybersecurity, risk, compliance, and assurance programs. Owns the ISO 27001 ISMS, SOC 2 Type 2, FedRAMP authorization, and CMMC Level 2 programs; directs security monitoring, incident response, vulnerability management, identity governance, penetration testing, vendor risk, and security architecture. Reports risk to executive leadership and the Audit Committee, manages customer security assurance, oversees a compliance specialist, and serves as incident commander for declared security events.

Build backend services and distributed systems for a cybersecurity and software supply chain security platform. Develop scalable APIs, data pipelines, and platform components handling vulnerability, container, package, runtime, and SBOM data. Work across Linux, Kubernetes, containers, and cloud environments while solving concurrency, performance, reliability, and distributed processing challenges. Own projects from design through deployment, participate in architecture discussions, review code, and collaborate with security researchers and product teams.

Leads AI governance and cybersecurity risk advisory engagements for large, regulated organizations. Advises C-suite executives and boards on AI threats, regulatory requirements, governance operating models, risk assessments, control frameworks, and cyber resilience. Owns complex engagement delivery, client relationships, team leadership, business development, proposals, engagement economics, and practice growth. Develops methodologies, thought leadership, and risk-management solutions covering AI governance, cloud security, identity management, data protection, incident response, and third-party risk.

Build and secure scalable backend services and APIs while debugging, optimizing performance, implementing features, refactoring codebases, and conducting security reviews and penetration testing. The role also involves automated testing, code review, vulnerability assessment, and contributing domain expertise to training next-generation AI systems.

Leads cybersecurity governance, risk, and compliance programs, with ownership of third-party cyber risk, customer security assessments, risk exceptions, and the cyber risk register. Manages a geographically distributed team, matures GRC processes, drives automation, partners with internal and external stakeholders, and reports risk trends and recommendations to senior leadership. Requires extensive cybersecurity experience, people leadership, customer-facing skills, and experience building or improving third-party risk capabilities.