132 information security jobs at 62 companies in Richmond, VA

2mo
Save
Mark Applied
Hide
Director Of Information Security
Richmond, Virginia, United States
OnsiteFull Time
New Horizon Bank
New Horizon Bank: Community bank offering personalized banking and fiduciary financial services.
8+ YOELead and mature enterprise information security and technology risk programs, manage cybersecurity operations, ensure regulatory compliance (FFIEC/GLBA/NIST), perform risk assessments and vendor reviews, and build a security team.
FFIEC, FDIC, GLBA, NIST, SIEM
1w
Save
Mark Applied
Hide
Information Security Analyst (Risk & Compliance)
Richmond, Virginia, United States
$70k-$100k/yr OnsiteFull Time
Performance Food Group
Performance Food GroupNYSE: PFGC: Distributes food and related products to the foodservice industry.
1+ YOEBachelor's degree and 1–3 years of experience required; security risk assessments, regulatory frameworks, security controls, privacy statutes, business impact analysis, Microsoft Azure Information Protection, and strong MS Office skills.
Microsoft Azure Information Protection, Microsoft PowerPoint, Microsoft Word, Microsoft Excel, Microsoft Project, Microsoft Visio, SaaS, PaaS, IaaS, Cloud Security Alliance, Service Organization Controls (SOC), CobIT, GDPR, CCPA, HIPAA, PCI DSS
3mo
Save
Mark Applied
Hide
Senior Lead Information Security Office Consultant
McLean or Richmond or New York or Plano
$209k-$286k/yr OnsiteFull Time
Capital One
Capital OneNYSE: COF: Financial services offering credit cards, banking, and loans.
6+ YOESenior-level information security consulting with cloud and risk management experience; CISSP/CISM/CISA and cloud certifications preferred; 6+ years cybersecurity/IT; 5+ years security architectural guidance; strong communication skills.
Cloud platforms, Security frameworks, DevSecOps, AWS, GCP, Azure, ISO 27001, NIST CSF, PCI DSS, ITIL, COBIT
1mo
Save
Mark Applied
Hide
Director, Information Security Office Consultant
McLean or Richmond or Plano
$245k-$307k/yr OnsiteFull Time
Capital One
Capital OneNYSE: COF: A diversified financial services providing banking and credit products.
7+ YOE5+ MgmtBachelor's degree, 7+ years in cybersecurity or IT, and 5+ years each in people leadership, security risk assessments and architecture reviews, and application development.
Cloud, Containers, Docker, Microservices, Serverless, APIs, DevOps, AWS, GCP, Azure, Agile, SaaS, Generative AI, ISO 27001/27002, NIST CSF, GLBA, GDPR, FFIEC, PCI-DSS
2mo
Save
Mark Applied
Hide
Director, Information Security Office AI/ML
McLean or Plano or Richmond
$245k-$307k/yr OnsiteFull Time
Capital One
Capital OneNYSE: COF: Provides credit card, banking, and auto loan services.
7+ YOE3+ MgmtBachelor's degree, 7+ years in cybersecurity or IT, 5+ years in application development and operating systems, plus security operations, cloud, AI security, and stakeholder leadership experience.
SIEM, SOAR, Linux, Unix, Windows, AWS, Azure, GCP, Docker, APIs, DevOps, PCI
3w
Save
Mark Applied
Hide
CNIC N6 Information System Security Engineer - (Naples, Italy) 1
Alexandria or Arlington or Arlington or Chantilly or Clintwood or Crystal City or Dumfries or Fairfax or Falls Church or Fredericksburg or Gainesville or Glen Allen or Herndon or Manassas or McLean or Potomac Falls or Richmond or Rosslyn or Vienna or Virginia or Washington Navy Yard or Washington
$120k-$167k/yr OnsiteFull Time
Serco
SercoLondon Stock Exchange: SRP: Provides professional outsourcing services to governments worldwide.
8+ YOEActive DoD Secret clearance, IAT Level II, Bachelor’s in IT/Cyber/Computer Science (or HS+10 years), minimum 8 years cybersecurity/IT experience, RMF and eMASS experience, ability to travel ~10%.
RMF, eMASS, HBSS, ACAS, RHEL, STIG, ISCM
2mo
Save
Mark Applied
Hide
Information Systems Security Engineer (ISSE) - Navy - Norfolk
Norfolk or Tysons or Richmond
$122k-$211k/yr HybridFull Time
LMI
LMI: Provides management consulting and digital solutions to federal government agencies.
8+ YOEBachelor's degree required; DoD 8570 Level III (e.g., CISSP); 8+ years IT/cybersecurity experience; 4+ years security engineering; 2+ years DoD support; cloud (AWS/GCP/Azure) experience; ability to obtain Secret+ clearance.
AWS, GCP, Azure, DevOps, DevSecOps, IoT, OT, IoMT, LAN, WAN, RMF, ATO
2mo
Save
Mark Applied
Hide
Sr. Security Engineer
Arlington or Richmond
HybridFull Time
CoStar Group
CoStar GroupNASDAQ: CSGP: Provides global real estate information, analytics, and online marketplaces.
5+ YOE5+ years in information security or security engineering; bachelor's degree; certifications; AWS networking experience; NGFW/WAF; scripting; SaaS security.
AWS networking, NACLs, Security Groups, ALB, NLB, Transit Gateway, Network Firewall, NGFW, WAF, CASB, SSE tooling, Python, PowerShell
1mo
Save
Mark Applied
Hide
Director, Information Systems
Richmond or Virginia
RemoteFull Time
All Points Broadband
All Points Broadband: Provides high-speed fiber-to-the-home internet services.
10+ YOE10+ Mgmt10+ years IT leadership in telecom/ISP or high-growth environment; bachelor's in IT/CS/IS required; experience delivering ERP, data platform, OSS/BSS, security, automation, data governance, vendor management, and process documentation.
Business Central, Snowflake, SharePoint, Microsoft 365, OSS/BSS, GIS, ITSM
2mo
Save
Mark Applied
Hide
Sr. Security Engineer
Arlington or Richmond
HybridFull Time
CoStar Group
CoStar GroupNASDAQ: CSGP: Global provider of commercial and residential real estate data.
5+ YOEBachelor's degree required, 5+ years in information security or security engineering, industry certifications (CISSP, GIAC, CCNA) preferred, strong AWS networking, NGFW/WAF experience, scripting (Python/PowerShell), SaaS/CASB/SSE familiarity, strong communication.
AWS, NACLs, Security Groups, ALB, NLB, Transit Gateway, Network Firewall, NGFW, WAF, CASB, SSE, Python, PowerShell, Azure DevOps, Terraform, SSO, OAuth
2mo
Save
Mark Applied
Hide
Data Security Engineer
Richmond, Virginia, United States
OnsiteFull Time
Genworth Financial
Genworth FinancialNYSE: GNW: Provides insurance products for aging care and mortgage protection.
3+ YOEBachelor's in Cybersecurity/Computer Science/Information Systems, 3+ years in data security/cybersecurity, hands-on experience with data security or DLP platforms, knowledge of data classification/protection and security frameworks, familiarity with Linux and Kubernetes.
BigID, Varonis, Spirion, Microsoft Purview, Forcepoint, Symantec, DLP, Linux, Kubernetes, NIST, ISO 27001, CIS
1mo
Save
Mark Applied
Hide
Security Engineer - Cloud Security Engineer
Raleigh or Richmond or Atlanta or Charlotte
$100k-$126k/yr OnsiteFull Time
Truist
TruistNYSE: TFC: Offers personal banking, business lending, and investment management services.
5+ YOE5+ years security engineering experience, cloud security expertise across AWS/Azure/GCP, strong IaC and automation (Terraform, CI/CD), scripting (Python/PowerShell), and knowledge of compliance frameworks.
GitLab, AWS Guard Duty, Defender for Cloud, Security Hub, AWS Inspector, Terraform, Amazon Bedrock, Azure Foundry, Wiz, AWS IAM, AWS KMS, Azure Active Directory (Entra ID), Azure Key Vault, Azure Security Center, VPCs, WAFs, AWS CloudWatch, Microsoft Sentinel, Python, PowerShell, ARM templates
1w
Save
Mark Applied
Hide
Junior Security Engineer
Richmond, Virginia, United States
$69k-$71k/yr HybridFull Time
Virginia Commonwealth University
Virginia Commonwealth University: Public research university and academic medical center in Richmond.
1+ YOECybersecurity, networking, incident response, DLP, SIEM, and access-control knowledge required; 1–2 years of related IT experience preferred. Bachelor's degree and security certifications preferred.
Data Loss Prevention (DLP), Secure Access Service Edge (SASE), Secure Service Edge (SSE), Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Security Orchestration, Automation and Response (SOAR), Windows, Linux, macOS, PowerShell, Python, DNS, HTTP, HTTPS, TLS, SSL, PKI, TCP/IP, OSI
1d
Save
Mark Applied
Hide
Cyber Security Analyst / Sr. Cyber Security Analyst
Richmond, Virginia, United States
$82k-$133k/yr OnsiteFull Time
Dominion Energy
Dominion EnergyNYSE: D: Provides regulated electric and natural gas utility services.
3+ YOERequires 3–5 years of cybersecurity experience for analyst level or 5 years for senior level, SIEM and SOAR or Python experience, security investigation skills, and a bachelor's degree or equivalent experience.
SIEM, SOAR, Python, EDR, IDS, REST API, CISCO, Microsoft 401k
4w
Save
Mark Applied
Hide
Junior Security Specialist- Incident Response
Richmond, Virginia, United States
$74k-$79k/yr OnsiteFull Time
Virginia Farm Bureau
Virginia Farm Bureau: Providing insurance and agricultural advocacy for Virginia residents.
1+ YOE1-3 years IT/cyber experience, associate or bachelor in IT/cyber preferred, entry-level certs (CompTIA Security+, GIAC GSEC, Microsoft SC-900) preferred, basic network/OS/security knowledge and familiarity with incident response and vulnerability scanning.
SIEM, EDR, IAM, MDR
2mo
Save
Mark Applied
Hide
Security Field Engineer
Richmond, Virginia, United States
HybridFull Time
Instrata Technologies
Instrata Technologies: Provider of low-voltage cabling and communication system installation services.
5+ YOE5+ years in security system installation, programming, service; expertise in access control, CCTV, intrusions; IT networking knowledge; high school/trade or associate degree; background checks.
CCTV, NVR/DVR, IP cameras, Access control, Avigilon, Motorola, Paxton, OpenPath, Windows, Linux, Bluebeam Studio, Networking
1mo
Save
Mark Applied
Hide
Data Security Analyst
Richmond or Chantilly or United States
$100k-$121k/yr RemoteFull Time
Amentum
AmentumNYSE: AMTM: Provides engineering, technology, and mission support to government agencies.
5+ YOEBachelor's in CS/InfoSec, 5+ years data security experience in international or government environments, US citizenship, hands-on with cloud/on-prem data platforms, data classification, encryption/key management, DLP, and audit/compliance (FedRAMP/NIST).
Snowflake, Redshift, BigQuery, Databricks, Azure Synapse, Microsoft Fabric, Microsoft Purview, Collibra, Alation, AWS, Azure, GCP, AWS GovCloud, Azure Government, SIEM, TLS, SFTP, EDI, APIs, DLP, Python, SQL, PowerShell, FedRAMP, FISMA, NIST 800-53, CMMC, ITAR, GDPR, LGPD, PIPL, CCPA, CPRA, Schrems II, DoD SRG
2w
Save
Mark Applied
Hide
DCMA Security Control Assessor
Fort Gregg-Adams, Virginia, United States
$90k-$95k/yr OnsiteFull Time
Crest Security Assurance
Crest Security Assurance: Provides cybersecurity assessment and intelligence services for government agencies.
5+ YOEActive Secret clearance, 5+ years cybersecurity/RMF/security control assessment experience, DoD IAM III certification required, experience with NIST RMF, STIGs, eMASS, and producing RMF artifacts.
DoDI 8510.01, RMF, NIST SP 800-53, NIST SP 800-53A, Security Technical Implementation Guide (STIG), eMASS
1mo
Save
Mark Applied
Hide
Lead Cyber Security Architect
Richmond, Virginia, United States
$143k-$238k/yr OnsiteFull Time
McKesson
McKessonNew York Stock Exchange: MCK: Distributes pharmaceuticals and provides healthcare information technology solutions.
10+ YOE10+ years in cybersecurity with 5+ years in security architecture; CISSP required; Bachelor's degree or equivalent; hands-on cloud, IAM/Zero Trust, SIEM/EDR/SOAR, scripting (Bash, Python, PowerShell), and policy/infrastructure-as-code experience.
SIEM, EDR/XDR, SOAR, Bash, Python, PowerShell, Kubernetes, CI/CD, infrastructure-as-code, policy-as-code, NIST, ISO 27001, HITRUST, HIPAA/HITECH, PCI DSS, SOX, GDPR, SOC 2, Windows, Linux
2mo
Save
Mark Applied
Hide
Lead Engineer, Network Security Platform
Birmingham or Bentonville or Phoenix or Tempe or Boulder or Denver or Hartford or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Baltimore or Detroit or Minneapolis or Kansas City or St. Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Albany or Buffalo or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or Richmond or Milwaukee or Virginia Beach
OnsiteFull Time
KPMG
KPMG: Global professional services network providing audit, tax, and advisory.
5+ YOERequires 5+ years of network security experience, Palo Alto and Zscaler expertise, GCP security engineering, Terraform or Ansible, and a high school diploma or GED; bachelor's degree preferred.
Zscaler, Google Cloud Platform (GCP), Palo Alto, Azure, Palo Alto firewalls, Strata, VM-Series, Panorama, Prisma Access, Terraform, Ansible, Cloud Armor, Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA)