Arlington, VA

Cybersecurity Jobs in Arlington, VA

23 jobs found

Include remote jobs

Today

Penetration Tester, Mid

Praescient Analytics Arlington, VA

Arlington, VA

Today

$90k - $130k/yr Full time Application Security Bash Cybersecurity Tools

Apply Now

Job Description

Praescient Analytics is seeking a Mid level Penetration Tester to support the DoW's War Data Platform in Arlington, Virginia. This onsite role conducts comprehensive penetration testing across applications, networks, and hybrid-cloud systems and requires an active TS/SCI clearance.

Responsibilities

Comprehensive Security Testing: Execute a range of penetration tests, including network, web application, and social engineering assessments, employing a blend of advanced manual techniques and automated tools to identify and safely exploit vulnerabilities.
Risk Assessment & Reporting: Assess overall system risk based on testing findings and produce detailed, actionable technical reports that map exploitation paths and potential mission impact.
Remediation & Collaboration: Partner with network engineering, software development, and AI engineering teams to design, track, and implement robust remediation plans; provide deep technical insights to support incident response when needed.
Methodology Evolution: Contribute to the ongoing development, refinement, and maintenance of internal penetration testing methodologies, custom testing tools, and baseline vulnerability assessment standards.
Threat Intelligence Integration: Support the organization’s threat intelligence program by sharing insights, novel attack chains, and defensive gaps discovered during offensive assessments.
Continuous Research: Stay current with emerging threat actors, zero-day vulnerabilities, and bypass techniques to continuously upgrade testing capabilities.

Requirements

Active TS/SCI security clearance is required.
Minimum of 3 years of hands-on experience in offensive security, ethical hacking, vulnerability research, or penetration testing.
Strong familiarity with web application security frameworks (OWASP Top 10), cloud infrastructure security, network routing/protocols, and common scripting languages (e.g., Python, PowerShell, Bash) for tool customization.
Must hold at least one of the following certifications: CompTIA Cloud+, GIAC Certified Enterprise Defender (GCED), GIAC Certified Incident Handler (GCIH), GIAC Industrial Cyber Security Professional (GICSP), GIAC Security Essentials (GSEC), CompTIA PenTest+, CompTIA Security+.

Technologies

OWASP Top 10
Python
PowerShell
Bash

Benefits

Very competitive salary based on qualifications and experience
Company-paid healthcare coverage for the employee, including premiums and deductibles
401(k) with company match
Travel and performance incentives
Three weeks of paid time off plus Federal holidays
$5,000 annual training allowance

Preferred Certifications

Certified Computer Examiner (CCE) or CyberSec First Responder (CFR)
Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM)
Certified Information Systems Security Officer (CISSO)
Certified Penetration Testing Engineer (CPTE)
CompTIA CyberSecurity Analyst (CySA+)
Federal IT Security Professional-Auditor (FITSP-A)
GIAC Cloud Security Automation (GCSA)
GIAC Penetration Tester (GPEN)
GIAC Systems and Network Auditor (GSNA)

What You Can Expect From Us

A genuine opportunity for career growth in an environment that recognizes achievements
Ongoing collaboration with multiple teams to ensure client success
A culture that respects and values your ideas and expertise
Colleagues motivated by pursuing excellence rather than personal gain
A workplace dedicated to supporting and improving public safety and government agency outcomes

View full job page →

1d ago

Penetration Tester / Active Secret

Peraton Arlington, VA

Arlington, VA

1d ago

$86k - $138k/yr Full time Senior Cloud Platforms Cybersecurity Tools

Apply Now

Job Description

Peraton is seeking an experienced Cyber Penetration Tester to support its Federal Strategic Cyber programs from Northern Virginia. The role is hybrid, with on‑site presence required as needed, and centers on leading penetration tests to assess customer systems, uncover vulnerabilities, and drive remediation aligned with NIST 800-53 controls. This position integrates hands-on testing with reporting to system owners and engineers, while also maintaining Red Cell infrastructure and developing tools to automate discovery or exploitation.

Responsibilities

Support the Red Cell Team by performing and leading penetration tests to assess the security of customer systems.
Identify vulnerabilities and develop recommended remediations to satisfy mandated NIST 800-53 security controls.
Report and demonstrate findings to system owners and engineers.
Maintain Red Cell infrastructure.
Develop or modify tools to automate discovery or exploitation.

Requirements

Bachelor of Science and 5 years experience, or a Master’s of Science and 3 years of experience. In lieu of a degree, 4 years of additional experience may be considered.
Minimum of 2 years with penetration testing experience.
Possess one of the following certifications, OR be able to obtain before start date: CCNA Cyber Ops, CCNA-Security, CEH, CFR, Cloud+, CySA+, GCIA, GCIH, GICSP, SCYBER, Security+ CE, SSCP.
Demonstrated experience with Kali Linux.
Demonstrated penetration testing tools experience with Nmap, Burp Suite, Metasploit, etc.
Demonstrated ability in evaluating vulnerabilities, performing root cause analysis, and reporting findings utilizing assessment methodologies such as NIST SP 800-115, Penetration Testing Execution Standard (PTES), Information Systems Security Assessment Framework (ISSAF), OWASP Web Security Testing Guide (WTG).
Demonstrated ability to lead a penetration test and guide Senior/Junior Penetration Testers.
U.S. citizenship required.
An active Secret security clearance.
Must have the ability to obtain a final Top Secret security clearance.

Technologies

Kali Linux
Nmap
Burp Suite
Metasploit
Bash
Python
PowerShell
JavaScript
Amazon Web Services (AWS)
Microsoft Azure
Google Cloud Platform (GCP)
OWASP Web Security Testing Guide (WTG)

Benefits

Medical
Dental
Vision
Life
Health Savings Account
Short/Long term disability
EAP
Parental leave
401(k)
Paid time off and holidays

About Peraton

Peraton is a next generation national security company delivering mission outcomes worldwide and advancing enterprise IT capabilities to protect the nation and its allies. As a leading mission capability integrator and transformative technology partner, Peraton operates at the intersection of conventional and evolving threats across land, sea, space, air, and cyber domains.

Program Overview

The Federal Strategic Cyber programs encompass technical, engineering, data analytics, cyber security, management, operational, logistical, and administrative support for the Bureau of Diplomatic Security across Cyber Monitoring and Operations, Cyber Threat and Investigations, and Technology Innovation and Engineering State functions.

About the Role

The role focuses on joining Peraton's Federal Strategic Cyber initiatives as an experienced Cyber Penetration Tester. Location is Northern Virginia with a hybrid arrangement, on-site presence as required.

Details

Target Salary Range: $86,000 - $138,000 per year. Salary is determined by factors including scope, experience, education, knowledge, skills, competencies, geographic location, and contract considerations. Overtime, shift differential, and discretionary bonuses may apply.
Benefits Statement: Peraton offers medical, dental, vision, life, Health Savings Account, short/long term disability, EAP, parental leave, 401(k), paid time off for vacation, and company paid holidays. Full benefits details: https://www.careers.peraton.com/benefits.
Application statements: The posting period is estimated at 30 days from the posting date, subject to change. Applicants may be asked to participate in an on-camera interview and a process to verify identity.
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

View full job page →

1d ago

Security Engineer III, Exploitation Analyst / Incident Responder (TS Clearance)

Deloitte Arlington, VA

Arlington, VA

1d ago

$103k - $189k/yr Full time Senior Cyber Forensics Cybersecurity Tools

Apply Now

Job Description

Security Engineer III, Exploitation Analyst / Incident Responder with an active Top Secret clearance and SCI eligibility is a key member of Deloitte's Cyber Defense & Resilience team in Arlington, VA. This onsite role focuses on monitoring for indicators of compromise, investigating incidents, evaluating vulnerabilities, and analyzing malware to strengthen security across enterprise environments.

Responsibilities

Continuously monitor networks, systems, and applications for signs of compromise and correlate threat data to detect malicious activity.
Investigate security incidents by collecting and examining logs, memory artifacts, and network traffic, supporting containment, eradication, and recovery efforts.
Identify and assess vulnerabilities across assets and recommend risk-based remediation actions considering exploitability.
Analyze malware, exploits, and adversary tooling, including reverse engineering where appropriate and simulating attacker techniques in controlled environments.
Prepare technical reports, briefings, and documentation that summarize findings, methodologies, and recommendations for stakeholders.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field.
Active Top-Secret Clearance with SCI eligibility.
2+ years of experience in cyber exploitation analysis, threat intelligence, or incident response.
2+ years of experience analyzing advanced persistent threats, malware, exploitation techniques, and reverse engineering tools such as IDA Pro or Ghidra.
2+ years of experience performing vulnerability assessments, penetration testing, or red team activities.
2+ years of experience with network traffic analysis, log analysis, digital forensics, Windows, Linux, macOS, common network protocols, scripting languages (Python, PowerShell, or Bash), and security monitoring tools (SIEM, IDS, IPS, or EDR).
Ability to travel up to 20% on average based on client needs and project assignments.
Willingness to work onsite with clients or at Deloitte offices for up to five days per week.
Industry certifications such as GIAC, CISSP, or CompTIA Security+ are required.
Must be legally authorized to work in the United States without employer sponsorship now or in the future.

Technologies

IDA Pro
Ghidra
Python
PowerShell
Bash
SIEM
IDS
IPS
EDR
Windows
Linux
macOS
MITRE ATT&CK

Benefits

Discretionary annual incentive program, subject to program rules, based on individual and organizational performance.

The Team

Deloitte's Cyber Defense & Resilience offering helps clients defend against advanced threats by transforming security operations, enhancing monitoring technologies, leveraging data analytics, and utilizing threat intelligence. The team supports dynamic attack surfaces and delivers rapid crisis and cyber incident response to ensure clients can prepare for, respond to, and recover from business disruptions.

Wage Range

Salary for this role is USD 102,500 to 188,900 annually. The range reflects factors such as skills, experience, licensure, certifications, and business needs, and is not adjusted for location-based differences where the role may be filled.

Preferred Qualifications

Experience supporting incident response in government, defense, intelligence, or large enterprise environments.
Experience analyzing packet captures, memory dumps, and host-based forensic artifacts.
Experience mapping threat activity to the MITRE ATT&CK framework.
Experience developing or tuning detections for SIEM or EDR platforms.
Industry certifications such as GIAC, CISSP, or CompTIA Security+.

View full job page →

1d ago

Security Engineer II

Amazon.com Services LLC Arlington, VA

Arlington, VA

1d ago

$159k - $202k/yr Full time Agent Ai Enabled Security Ai Security

Apply Now

Job Description

As a Security Engineer II on Amazon HealthSec's AI team, you will help secure GenAI applications and enable secure AI adoption across Amazon Health Services. This on-site role in Arlington, VA centers on building scalable AI powered security tooling and ensuring HIPAA compliant AI systems within the AI for Security and Security for AI domains. The annual compensation ranges from USD 159,300 to 202,400.

Responsibilities

Lead the design and rollout of proactive security controls for Amazon Health Services AI apps, including GenAI chatbots, agent-based systems, and LLM powered tools
Create and enforce security controls across the AI-SDLC to ensure secure AI applications by default
Evaluate AI specific security risks such as prompt injection, model abuse, data exfiltration, and unauthorized tool invocation, and guide mitigations at scale
Develop and promote AI powered security tooling such as automated threat modeling, code scanning, and security test generation to scale security across AHS
Advance AI security guardrails, testing frameworks, and monitoring for GenAI applications across AHS
Collaborate with AHS builder teams to embed security guidance into AI development workflows, reducing late-stage security findings
Create and maintain security documentation including AI threat models, risk assessments, and secure AI development guidelines
Support security incident investigations related to AI systems, including prompt injection attacks and model misuse

Requirements

3+ years of programming in Python, Ruby, Go, Swift, Java, .NET or C++ or a similar object-oriented language
Bachelor's degree in a STEM field, or equivalent experience in IT security
Experience with AI/ML technologies
Experience applying threat modeling or other risk identification techniques
Knowledge of common AI security risks such as prompt injection, data poisoning, model extraction, and insecure tool use

Technologies

Python
Ruby
Go
Swift
Java
.NET
C++
AWS

Benefits

Health insurance including medical, dental, vision, prescription coverage, Basic Life and AD&D insurance with options for supplemental life plans, EAP, mental health support, Medical Advice Line, Flexible Spending Accounts, and adoption or surrogacy reimbursement
401(k) matching
Paid time off
Parental leave
Sign-on payments
Restricted stock units (RSUs)

About the Team

The HealthSec AI team secures Amazon's healthcare AI applications and builds AI powered security tooling to scale protection across AHS. We operate in two domains: Security for AI, securing GenAI applications and the AI-SDLC, and AI for Security, building AI tools that automate security guidance, testing, and workflows. Amazon Security offers security professionals the chance to grow across cloud, devices, retail, entertainment, healthcare, and operations.

Diverse Experiences

Amazon Security values diverse experiences. If you do not meet every listed qualification, we encourage you to apply. Whether your career is just starting, follows a nontraditional path, or includes alternative experiences, your background may bring valuable perspectives to the team.

Why Amazon Security?

Security is central to maintaining customer trust and delivering exceptional experiences at Amazon. The Security organization maintains a high standard across all products and services and offers opportunities to broaden expertise across cloud, devices, retail, entertainment, healthcare, operations, and more.

Inclusive Team Culture

Learning and curiosity come first in Amazon Security. Ongoing DEI events and development opportunities help us grow while embracing diverse ideas, perspectives, and voices.

Training & Career Growth

We continually raise the performance bar as we strive to be Earth’s Best Employer. You will have access to knowledge-sharing, training, and resources that support professional development.

Work/Life Balance

Flexibility is valued, with adaptable work hours and arrangements designed to support a healthy balance between work and home life.

View full job page →

1d ago

Cybersecurity Compliance Analyst

Booz Allen Hamilton Arlington, VA

Arlington, VA

1d ago

$78k - $176k/yr Full time Analyst Data Security Enterprise Risk

Apply Now

Job Description

Booz Allen Hamilton offers a collaborative, people-first culture with strong support for professional growth. In this onsite Arlington, VA role, you will design, implement, and manage policies that safeguard database and software security. You will apply advanced advisory skills and broad industry knowledge, mentor teammates, and contribute to innovative solutions. The compensation range for this position is USD 77,600 to 176,000 per year.

Location

Arlington, VA (onsite)

Responsibilities

Designs, implements, and manages policies and procedures to ensure database and software security.
Applies advanced advisory skills or extensive technical expertise with full industry knowledge.
Develops innovative solutions to complex problems.
Works without considerable direction and mentors and may supervise team members.

Requirements

10+ years of experience with compliance analysis
Knowledge of the DoW, its Components, and the authorities and responsibilities of each Component-type
Ability to interpret DoD policy regarding cybersecurity, information security, and or information technology
Ability to communicate with internal and external stakeholder personnel to ensure compliance with existing policy and to receive and evaluate reporting to verify compliance
Ability to clearly and concisely communicate cybersecurity posture information to senior department leadership through verbal, written, and visual mechanisms
TS/SCI clearance
Bachelor's degree

Nice If You Have

Experience evaluating organizational cybersecurity reports to determine compliance required
Knowledge of DoW reporting and tasking mechanisms
Knowledge of DoW issuance development, update, and coordination processes
Ability to evaluate new or emerging technology to identify policy gaps
Bachelor's degree in cybersecurity, information technology, systems engineering, or information systems
CISSP, CISM, CASP+, or CEH Certification

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Benefits

Health, life, disability, financial, and retirement benefits
paid leave
professional development
tuition assistance
work-life programs
dependent care
recognition awards program

Compensation

The projected compensation range for this position is USD 77,600 to 176,000 per year. Salary is determined by factors including location, the individual’s education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. This posting will close within 90 days from the posting date.

Identity Verification

As part of the hiring process, you will complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You may be on camera during interviews and assessments, and we reserve the right to capture your picture to verify identity and prevent fraud.

Candidate AI Usage Policy

AI is a part of our daily work at Booz Allen, and we are committed to ethical use of AI tools. The use of artificial intelligence or other tools to assist with responses during interviews is prohibited unless explicit permission is provided.

Work Model

Our people-first culture prioritizes collaboration, whether in person or virtually. Virtual employees are generally expected to have cameras on during meetings. This role is onsite, with potential in-person collaboration at Booz Allen facilities or customer sites as required by the role.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable law.

View full job page →

2d ago

Information Systems Security Engineer / ISSE (HPC)

AMERICAN SYSTEMS Arlington, VA

Arlington, VA

2d ago

$165k - $200k/yr Full time Business Systems Cybersecurity Tools Engineer

Apply Now

Job Description

AMERICAN SYSTEMS is seeking an experienced Information Systems Security Engineer to support Red Hat Enterprise Linux and Windows within a High Performance Computing environment in Arlington, Virginia. This role centers on security architecture design, RMF and JSIG artifact development, rigorous assessments, and ongoing compliance to safeguard critical HPC systems in a federal setting.

Below is a detailed outline of the position and its requirements, outlining responsibilities, qualifications, and the broader context of the role.

Responsibilities

Develop and deploy enterprise security architectures for RHEL within an HPC SAP environment.
Apply JSIG requirements to system authorization, control implementation, and documentation.
Manually craft RMF and JSIG artifacts, including SSPs, control narratives, POA&Ms, and supporting evidence.
Conduct hands-on security assessments on Linux and Windows systems, including CLI audits, compliance scans, log reviews, and control validation.
Analyze scan results to identify gaps and support remediation planning and execution.
Validate and implement host-based firewall and security configurations in collaboration with system administrators.
Manage and track POA&Ms through mitigation, remediation, or risk acceptance.
Ensure ongoing system compliance through continuous monitoring of controls, procedures, and documentation.
Identify security deficiencies and provide actionable remediation recommendations.
Support system recovery and security oversight after outages or incidents.
Participate in change management activities, assessing security impacts to SAP systems.
Support security investigations, incident response, and remediation activities.
Collaborate with engineering teams to integrate security requirements into system design and production releases.

Requirements

Active Top Secret/SCI with SAP eligibility.
Bachelor’s degree in a STEM discipline with 11–12 years of relevant experience.
Master’s degree with 8–10 years of relevant experience.
Minimum 5 years designing and implementing enterprise-scale security solutions with hands-on security assessment experience across Linux systems, including command-line validation.
DoD 8140 IAT Level III–equivalent certification (for example, SecurityX, CISSP, CCNP Security, CISA, GCED, GCIH, or CCSP).
Strong background in RMF, ICD 503, NIST SP 800-53, DCID 6/3, or current DoD authorization practices.
Working knowledge of the JSIG and its application to RMF authorization.
Proven experience authoring RMF/JSIG artifacts by hand, without reliance on automated RMF tools (eMASS, Xacta, etc.).
Experience supporting security tools such as Splunk Enterprise, HBSS, McAfee ePO, ENS, and DLP.
Demonstrated security engineering experience across Linux, Windows, Cisco platforms, databases (SQL or Oracle), and virtualized environments.

Technologies

RHEL, Windows, Linux, SAP
Splunk Enterprise, HBSS, McAfee ePO, ENS, DLP
eMASS, Xacta, SQL, Oracle
Cisco, Virtualized environments
JSIG, RMF

Benefits

Sign-on bonus
Healthcare benefits
Paid leave
Retirement plans
Insurance programs
Education and training assistance

Overview

AMERICAN SYSTEMS, a 100 percent employee-owned federal contractor, seeks a seasoned ISSE to support RHEL and Windows within an HPC environment in Arlington, VA. The role includes a $10,000 sign-on bonus in addition to a competitive compensation package.

Pay Transparency Statement

AMERICAN SYSTEMS is committed to pay transparency for applicants and employee-owners. The salary range for this position is USD $165,000.00/Yr. to USD $200,000/Yr. Actual compensation will be determined based on several factors permitted by law. The company offers a comprehensive benefits program including healthcare, paid leave, retirement plans, insurance programs, and education and training assistance.

EEO Statement

AMERICAN SYSTEMS is an equal opportunity employer. EEO Race/Sex/Disability Status/Veteran Status.

View full job page →

2d ago

Sr AWS Application Security Engineer, ADC AppSec

Amazon.com Services LLC Arlington, VA

Arlington, VA

2d ago

$178k - $227k/yr Full time Amazon Web Services Application Security Cloud

Apply Now

Job Description

Senior AWS Application Security Engineer focusing on threat modeling, automation, and guiding AWS IT Security teams.

Responsibilities

Conduct application security reviews
Thorough threat model of AWS services
Drive ongoing improvement and research activities as needed
Deliver security training and outreach to internal development teams
Produce security guidance documentation
Develop security tooling
Deliver security metrics and drive enhancements
Support recruiting efforts and related administrative tasks

Requirements

At least 4 years of non-internship experience troubleshooting system issues, analyzing logs, or automating complex tasks via command line tools
Hands-on, non-internship experience identifying security vulnerabilities, attack patterns, and remediation techniques in real-world environments
Experience as a mentor, tech lead, or leading an engineering team
Bachelor's degree in computer science or equivalent, or 4+ years of technical work experience
5+ years of any combination of threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security

Technologies

AWS (Amazon Web Services)
C++
Java
Perl
Python
HTTP(S)
DNS
TCP/IP
Web services
Microservices
Service-oriented architectures

Benefits

Health coverage (medical, dental, vision, prescription)
401(k) matching
Sign-on payments
Restricted stock units (RSUs)
Paid time off
Parental leave
Basic life insurance and AD&D
Supplemental life insurance options
Flexible Spending Accounts
Employee Assistance Program (EAP)
Mental health support
Medical Advice Line
Adoption and Surrogacy Reimbursement coverage

Description

Protect the AWS cloud and customer environments. Since 2006, the AWS Security team has enabled customers to bring innovative ideas to life beyond traditional IT environments.

A Day in the Life

Participate in threat modeling workshops for leading AWS services
Innovate on delivering security outcomes to customers, including exploring AI assisted approaches
Utilize AI tools to maximize outcomes and free time for high judgment human decisions

About the Team

We value diverse experiences; Amazon Security encourages applications even if you do not meet every preferred qualification, and unconventional career paths are welcome.

Why Amazon Security

Security is central to protecting customer trust and delivering excellent experiences. The security organization sets and maintains a high standard across Amazon products and services.

Work/Life Balance

We prioritize work–life harmony with flexible hours and arrangements as part of our culture.

Inclusive Team Culture

Amazon Security values learning and curiosity, with ongoing DEI events and development opportunities to support growth and celebrate individuality.

Training and Career Growth

Continuous performance enhancement through extensive knowledge sharing, training, and career-advancing resources to help you become a well-rounded professional.