Ashburn, VA

Cybersecurity Jobs in Ashburn, VA

17 jobs found

Include remote jobs

6d ago

Application Security Engineer

Anakim Consulting Inc Ashburn, VA

Ashburn, VA

6d ago

Full time Application Security Engineer Information Security

Apply Now

Job Description

Anakim Consulting Inc is seeking Junior, Mid, and Senior-level Application Security Engineers to support application security activities. The role is 100% onsite in Ashburn, VA, with work focused on identifying and addressing weaknesses across applications through reviews, testing, and remediation support.

Role Responsibilities

Support application security activities, including security code reviews, vulnerability assessments, and application security testing
Use application security tools to identify security weaknesses
Collaborate with development teams to remediate vulnerabilities
Assist with the implementation of security controls within applications
Contribute to secure software development practices
Participate in security assessments of applications
Maintain application security documentation and track security findings

Multiple Openings

This position has multiple openings at the Junior, Mid, and Senior levels.

Location and Work Arrangement

100% On-Site
Ashburn, VA

Security Requirements

CBP Suitability
Public Trust

View full job page →

17d ago

Cybersecurity Engineer, Lead

Indigo IT Ashburn, VA

Ashburn, VA

17d ago

$90k - $115k/yr Full time Cybersecurity Operations Cybersecurity Tools Endpoint Security

Apply Now

Job Description

The Lead Cybersecurity Engineer role at Indigo IT focuses on vulnerability and configuration compliance for Windows and MacOS end-user devices. Working within the OIT End-User Device IT Management Services team, you will support RMF continuous monitoring and audit-ready security activities, while also developing procedures and generating auditable security evidence.

Role Responsibilities

Support execution of the Risk Management Framework across all facets, with emphasis on Continuous Monitoring.
Participate in and lead Security Assessment & Authorization (SA&A) activities as required.
Perform conformance testing to determine whether systems meet defined specifications, including system and application baselines.
Assist team members using test bed environments to validate hardware and support peripherals against specifications, recording and analyzing test data.
Create auditable evidence of implemented security measures.
Support Independent Validation and Verification (IV&V) testing for software applications and systems, including conducting and monitoring testing activities.
Advise senior leadership or the Authorizing Official on actions that affect the organization’s information assurance posture.
Collect and maintain system information assurance reporting data.
Coordinate with team members to ensure information assurance inspections, tests, and reviews are aligned for the environment.
Perform operational security tasks as assigned, including incident handling and analysis, and prepare reports to keep senior leadership informed.
Use existing security tools to perform RMF continuous monitoring activities.
Analyze port, protocol, and network traffic information to support real-time decisions about organizational security posture.
Adhere to information assurance requirements integrated into system and organizational continuity planning.
Provide subject matter expertise to support corporate business development, including proposal development, white papers, and requests for information as needed.

Security, Compliance, and Validation Focus

This position includes collaboration with the end-user device management services team to support RMF continuous monitoring, SA&A, IV&V testing, and preparation of auditable security evidence.

Required Qualifications

Current CBP Background Investigation or Top-Secret clearance adjudicated within the last 5 years (preferred).
At least 5 years of hands-on experience detecting, monitoring, and remediating security issues across network, hardware, software, and platform security.
Demonstratable experience performing compliance control testing, identifying and resolving cybersecurity issues, and developing remediation or mitigation strategies.
Bachelor’s or master’s degree in Cybersecurity, Computer Science, Computer Information Systems, or Information Technology (master’s preferred).
In lieu of a degree, 10 years of hands-on experience in control testing, vulnerability identification and resolution, and recommendations to minimize cybersecurity risk will be considered.
Must hold one or more certifications: ISC2 CISSP, EC-Council Certified Ethical Hacker, or CompTIA Security Analytics Expert (equivalent certifications may be considered).

Technologies and Tools

Windows, MacOS
Tenable Nessus
Security Center
Tanium
Splunk
SEIM
ISVM
STIGs
GPO/Group Policy
CISA KEV list

Additional Knowledge, Skills, and Abilities

Advanced or expert knowledge and/or work experience in Information Certification & Accreditation regulations, FISMA, and NIST guidance.
Ability to identify, collect, process, document, and report cyber security and incident response events.
Experience developing and implementing cyber security and incident response policies and procedures, including engineering, testing, installing, patching, and upgrading security hardware and software.
Contingency plan creation, modification, and testing.
Zero Trust implementation experience.
Experience with Tenable Nessus, Security Center, and Tanium (or similar tools).
Experience with Splunk or other SEIM.
Experience with ISVM, security patching and vulnerabilities, configuration (STIGs), and GPO/Group Policy.
Experience with CISA KEV list and implementation deadlines.
Operations-based testing scenarios.
Ability to recommend improvements to internal processes to improve customer service levels and overall security posture.
Strong analytical skills to evaluate data sets, identify trends, establish strategies, and make decisions about real-time threats, including reduction of false positives from operational reporting.
Strong time management, organizational skills, and ability to juggle multiple priorities.
Excellent interpersonal and communication skills to work across diverse audiences.
Self-starter attitude and ability to work independently and as part of a team, owning tasks from start to finish.
Experience leading teams and providing feedback to junior members.
Familiarity with FISMA law, working with FISMA systems, maintaining and acquiring Authority to Operate, and assisting with Authority to Test phases.
Ability to write Risk Acceptance proposals.
Experience working with technology evaluation boards to support enterprise product and service evaluation.
Support ISSO/ISSM coordination for tracking and closing Plans of Actions and Milestones (POA&Ms).
Provide expert guidance to management based on findings brought in from the Vulnerability Assessment Team (VAT) in coordination with the ISSO.
Support junior staff with accurate FISMA system inventory for asset management and VAT scanning purposes.

Education

Master’s degree in Cybersecurity, Computer Science, Computer Information Systems, or Information Technology.
Bachelor’s degree also accepted (as listed under requirements).

Compensation and Location

Location: Ashburn, VA (hybrid)
Salary: USD 90,000 - 115,000 per year
Minimum Experience: 5 years

Company Overview

Indigo IT was founded in 2001 and provides information technology consulting and services. The company supports government agencies seeking Cloud, Cybersecurity, Knowledge Management, and Enterprise solutions, with a mission focused on maintaining urgency in anticipating and supporting customer technology goals. Indigo IT has been recognized on the Inc. 5000 list of America’s fastest growing companies in 2020 and 2021, and was named one of the 2022 Best Places to Work in Virginia.

Benefits

Medical, Dental, and Vision coverage options
401(k) with company match
Group life and disability
Flex Spending Accounts (FSA)
Paid Time Off (PTO)
Paid holidays
Education assistance
In house training programs for employees
Bonuses and recognition for publishing, speaking, and innovative thought leadership

View full job page →

25d ago

Penetration Tester Junior

General Dynamics Information Technology Ashburn, VA

Ashburn, VA

25d ago

$91k - $124k/yr Full time Application Security Cybersecurity Tools Information Security

Apply Now

Job Description

General Dynamics Information Technology is hiring a Junior Penetration Tester to support the U.S. Customs and Border Protection (CBP) Cyber Security Directorate. This onsite role in Ashburn, VA helps strengthen cybersecurity operations through hands-on penetration testing, vulnerability documentation, and follow-up validation activities.

What you’ll do

Assist with penetration testing across applications, endpoints, networks, cloud systems, and mission-critical environments to identify security gaps.
Perform discovery and enumeration using industry-standard tools such as Nmap, Nessus, Burp Suite, Metasploit, and similar utilities.
Execute basic exploitation steps under the direction of senior testers to help validate vulnerabilities.
Collect and document exploitation artifacts including screenshots, logs, payload outputs, and other evidence to maintain complete audit and reporting trails.
Support post-exploitation analysis by documenting privilege escalation paths, lateral movement opportunities, or insecure configurations.
Document vulnerabilities with clear descriptions, reproduction steps, and appropriate severity scoring.
Contribute to penetration testing reports by drafting technical sections and summarizing findings for stakeholder awareness.
Coordinate with system owners, developers, engineers, and cybersecurity teams to clarify findings and support remediation efforts.
Participate in retesting cycles to confirm remediation and track closure progress.

Qualifications

Minimum 3 years of cybersecurity or vulnerability assessment experience.
Experience executing penetration tests, gathering evidence, documenting vulnerabilities, and validating system weaknesses.
Experience with common penetration testing tools, including Nmap, Nessus, Burp Suite, and Metasploit, to run scripts, support senior testers, and improve assessment quality.
Strong analytical and documentation skills.
Understanding of exploit development concepts, offensive tooling, and common security control weaknesses.
Strong skills in maintaining testing notes, scripts, and tool configurations to support repeatability and compliance.
Ability to produce structured documentation, perform technical writing, and communicate effectively with technical and non-technical audiences.
Preferred certifications: CompTIA PenTest+, and eJPT / eCPPT.
Preferred: Bachelor’s degree in information technology, computer science, cybersecurity, or a related field.
Previous or Current CBP Background Investigation desired.
U.S. Citizenship Required.

Tools and technologies

Nmap
Nessus
Burp Suite
Metasploit

Additional details

Location: Ashburn, Virginia (Onsite Workplace)
Requisition type: Regular
Travel required: Less than 10%
Clearance level: None
Public Trust: BI Full 6C (T4)
Salary range: $91,375 - $123,625 per year

Identity verification process

You are expected to be on camera during virtual interviews.
We reserve the right to take your picture to verify your identity and prevent fraud.
You authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

Key skills for success

Cybersecurity Operations
Incident Response
Network Penetration Testing
Security Operations
Vulnerability Remediation

View full job page →

25d ago

Penetration Tester Senior

General Dynamics Information Technology Ashburn, VA

Ashburn, VA

25d ago

$143k - $170k/yr Full time Senior Cybersecurity Tools Data Security

Apply Now

Job Description

General Dynamics Information Technology is looking for a Senior Penetration Tester in Ashburn, VA (onsite) to support mission-critical cybersecurity operations. In this role, you will lead advanced penetration testing engagements, emulate real-world adversary behavior, and help drive vulnerability discovery, validation, and remediation through clear, actionable reporting. This position is based on BI Full 6C (T4) public trust and includes a salary range of USD 142,792 - 170,200 per year.

What you’ll do

Lead complex penetration testing engagements and provide guidance to junior and mid-level testers across scoping, tooling, exploitation techniques, documentation quality, and professional development.
Plan test approaches, conduct advanced exploitation, and deliver detailed reporting that supports corrective actions for critical systems.
Define objectives, rules of engagement, and test boundaries in partnership with system owners, ISSOs, engineering leads, and mission stakeholders.
Create tailored test plans that align with system architecture, threat scenarios, and compliance requirements.
Perform hands-on testing across network, application, wireless, and enclave targets using modern red-team methodologies to discover and validate exploitable weaknesses.
Use industry tools and frameworks including Nmap, Nessus, Metasploit, Burp Suite, CANVAS, and Kismet to enumerate, exploit, and confirm vulnerabilities at scale.
Develop proofs of concept, chained exploits, and post-exploitation procedures that demonstrate realistic impact and help system owners prioritize remediation.
Produce comprehensive technical reports with vulnerability descriptions, reproduction steps, affected assets, exploit evidence, and prioritized remediation recommendations for both engineering and executive audiences.
Present findings, defend methodologies, and translate technical risk into mission-aligned decisions during briefs and touchpoints.
Partner with developers, system engineers, SOC, and risk teams to recommend mitigation strategies and validate fixes during retesting cycles.

Required qualifications

Minimum 5 years of offensive security or penetration testing experience, including leading complex assessments and delivering authoritative reports.
Strong leadership and communication abilities.
Advanced proficiency with penetration testing tooling and exploitation techniques for network, application, and wireless vectors.
Strong technical writing and oral presentation skills that meet audit and executive communication standards.
Ability to collaborate with technical and non-technical stakeholders across federal and enterprise environments.
U.S. Citizenship Required.
Less than 10% travel.
A degree in cybersecurity, computer science, information technology, or a related field is preferred.

Preferred certifications

OSCP (highly valued)
GIAC Penetration Tester (GPEN)
CREST Registered Pen Tester (CRT)

Additional notes

Preferred: Previous or Current CBP Background Investigation.
Clearance level: None.
Public trust: BI Full 6C (T4).
Category: Cyber and IT Risk Management.
Technologies: Nmap, Nessus, Metasploit, Burp Suite, CANVAS, Kismet.

Identity verification process

Virtual interviews require you to be on camera.
The company reserves the right to take your picture to verify your identity and prevent fraud.
You authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

View full job page →

25d ago

Penetration Tester Mid-Level

General Dynamics Information Technology Ashburn, VA

Ashburn, VA

25d ago

$108k - $129k/yr Full time Application Security Information Security InfoSec

Apply Now

Job Description

Onsite role in Ashburn, VA supporting CBP Cyber Security Directorate activities. This mid-level penetration testing position combines hands-on assessment work across a wide range of environments and the chance to drive meaningful improvements through documented findings and retesting cycles.

Compensation for the role is USD 107,744 - 129,375 per year. U.S. citizenship is required, and the position is designated with Public Trust: BI Full 6C (T4).

What you’ll do

Run hands-on penetration tests across networks, applications, endpoints, cloud workloads, and mission systems to identify exploitable security weaknesses.
Apply industry-standard offensive tooling to uncover issues such as misconfigurations, privilege escalation paths, insecure protocols, and application-level vulnerabilities.
Conduct both credentialed and non-credentialed testing, covering reconnaissance, enumeration, exploitation, post-exploitation analysis, and vulnerability validation.
Assess vulnerabilities for exploitability, impact, and potential operational risk, supporting clear prioritization decisions.
Analyze complex, cross-domain environments including hybrid cloud, containerized platforms, mobile, and legacy systems to identify security gaps.
Create detailed technical assessment reports that include vulnerability descriptions, exploitation steps, affected assets, and prioritized remediation recommendations.
Support follow-up assessments and retesting cycles to confirm remediation completeness and sustained risk reduction.

Tools you’ll use

Work will involve technologies such as Nmap, NESSUS, Metasploit, Burp Suite, CANVAS, and Kismet, along with other offensive frameworks as needed.

What you bring

3+ years of penetration testing or offensive security experience.
Strong understanding of exploit development concepts, offensive tooling, and common security control weaknesses.
Experience conducting network, application, and wireless assessments using modern red-team methodologies.
Ability to produce structured documentation with clear technical writing and effective communication to both technical and non-technical audiences.
Preferred certifications: CompTIA PenTest+, eJPT / eCPPT, OSCP (highly valued), GIAC Penetration Tester (GPEN).
Education preference: Bachelor’s degree in information technology, computer science, cybersecurity, or a related field.
Preferred: Previous or current CBP Background Investigation.

Work requirements & eligibility

Travel: Less than 10%
Citizenship: U.S. Citizenship Required
Clearance level: None listed
Public Trust: BI Full 6C (T4)

Identity verification

The hiring process may include virtual interview steps where you are expected to be on camera. The employer reserves the right to take a picture to verify your identity and help prevent fraud.

View full job page →

30d ago

Application Security Engineer

True Zero Technologies Ashburn, VA

Ashburn, VA

30d ago Closed

Full time Analytics Application Security Cyber Security

This position is no longer accepting applications (closed Nov 3, 2026).

Job Description

Senior Application Security Engineer role focused on securing and sustaining CBP application systems across the full software lifecycle.

Responsibilities

Administer, configure, maintain, tune, and secure CBP application systems throughout the software lifecycle.
Develop and keep current application operations and maintenance procedures, tuning guidance, and software maintenance recommendations.
Support ISSOs during ATO and ATT activities by producing and maintaining required application security documentation and evidence.
Conduct weekly application security impact assessments and evaluate proposed software, products, and emerging technologies.
Maintain continuous application monitoring, including critical-incident alerting, operational status reporting, and service-request tracking.
Apply configuration management and change-control processes for application baselines, configuration items, engineering changes, and deployment records.
Improve application logging, integrate relevant data with SIEM and vulnerability-management processes, and support remediation tracking.

Requirements

Minimum 7 years of relevant application security or security engineering experience.
Proven ability to lead application security operations, lifecycle management, configuration control, logging and monitoring, and vulnerability remediation efforts.
Advanced experience supporting ATO or ATT activities, including security impact assessments, product evaluations, change approvals, and operational risk decisions.
Strong written and oral communication skills for technical recommendations, procedures, status reporting, and coordination with ISSOs and Government leads.

Technologies

SIEM

Location & Work Setup

Ashburn, VA (onsite)

Benefits

Competitive salary; paid twice per month
Best in class medical coverage
100% of medical premiums covered by True Zero
Company wide new business incentive programs
Contribution Incentives (white papers, blog posts, internal webinars, etc.)
3 weeks of PTO starting + 11 Paid Holidays annually
401k Program with 100% company match on the first 4%
Monthly reimbursement of Cell Phone and Home Internet costs
Paternity/Maternity Leave
Investment in training and certifications to broaden and deepen technical skills

AI Use Notice

May use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications and analyzing.
AI tools assist the recruitment team and do not replace human judgment.
Final hiring decisions are made by humans.
For details on how data is processed, contact the company.

View full job page →

1mo ago

Security Analyst

Loudoun County Government Ashburn, VA

Ashburn, VA

1mo ago Closed

$69k - $121k/yr Full time Security Security Analysis Security Analytics

This position is no longer accepting applications (closed Nov 2, 2026).

Job Description

The Loudoun County Government Office of Emergency Management, Safety & Security seeks a customer service-oriented Security Analyst to support day-to-day surveillance, intelligence monitoring, and security reporting for county facilities and operations.

Location and Employment Details

Location: Ashburn, VA (onsite)
Compensation: USD 69,287 - 121,253 per yearly
Experience: 3+ years required
Education: Associate's degree

Responsibilities

Manage electronic access control systems for county facilities.
Monitor alarms, alerts, and notifications, and track operational events.
Monitor live security camera feeds across county facilities and identify suspicious activity, unauthorized access attempts, or abnormal patterns in facility operations.
Maintain detailed incident logs and produce security reports.
Collect, analyze, and synthesize security-related information to support intelligence briefings.
Continuously monitor social media platforms, news outlets, blogs, forums, and public safety channels for emerging threats and situational updates.
Monitor weather, natural hazard alerts, and infrastructure disruption reports from public sources.
Collaborate with security, law enforcement, and other County and regional partners.
Perform routine systems checks, troubleshoot security systems, and coordinate with technical support for maintenance and repairs.
Participate in training, exercises, and after-action reviews to improve situational awareness, response effectiveness, and overall security posture.
Ensure compliance with applicable laws, regulations, policies, and procedures.

Requirements

Associate's degree with coursework in one or more of the following: Intelligence and Data Analytics, Homeland Security, Criminology, Emergency Management, or a related field.
Three (3) years of related work experience in intelligence and/or security.
An equivalent combination of education and experience may be considered.

Preferred Qualifications

Experience monitoring security systems, including cameras and access control tools.
Experience in Law Enforcement, Fire and EMS, private security, and/or Military roles.
Skill working with computers and County/Department software, including Oracle, Microsoft Office products, mapping tools, dashboards, and software used in intelligence analysis.