Richmond, VA

Cybersecurity Jobs in Richmond, VA

10 jobs found

Include remote jobs

16d ago

Senior Security Engineer, Application

Genworth Richmond, VA

Richmond, VA

16d ago

$97k - $145k/yr Full time Senior Application Security Cloud Platforms

Apply Now

Job Description

Genworth offers a hybrid work setup and a total rewards package designed to support your health, growth, and day to day wellbeing. This Senior Security Engineer role focuses on securing application development across physical datacenter and cloud environments, with opportunities to partner across teams, improve security automation, and help strengthen application security outcomes.

Location: Richmond, VA (hybrid) or Lynchburg, VA (hybrid). In office days are Tuesday, Wednesday and Thursday, with working hours targeting 9am to 5pm EST.

Compensation: USD 96,700 - 145,000 annually (national range). Actual compensation may vary by geographic location, experience, skills, and other job-related factors. This role is also eligible to participate in a bonus incentive plan, based on individual and company performance and not guaranteed.

Benefits

Competitive Compensation & Total Rewards Incentives
Comprehensive Healthcare Coverage
Multiple 401(k) Savings Plan Options
Auto Enrollment in an employer-directed retirement account feature (100% employer-funded)
Generous Paid Time Off including 12 paid holidays, Volunteer Time Off, and Paid Family Leave
Disability, Life, and Long Term Care Insurance
Tuition Reimbursement, Student Loan Repayment, and Training & Certification Support
Wellness support including gym membership reimbursement and Employee Assistance Program resources (work/life support, financial & legal management)
Caregiver and Mental Health Support Services

What You’ll Do

In this role, you will manage and support application security technologies and processes that help internal partners develop more secure applications. You will coordinate vulnerability scanning and security tooling across cloud and datacenter environments, provide application security guidance, and serve as a subject-matter-expert for critical application security issues.

Manage and support application vulnerability scanning technologies, AST platforms, and cloud security tooling
Collaborate with stakeholders to design secure applications, test for security weaknesses, and partner on remediation
Identify, respond to, and remediate information security issues with key stakeholders
Coordinate orchestration, automation, and lifecycle management of security technologies and platforms
Support day-to-day lifecycle activities including threat assessment, threat modeling, and risk avoidance
Create reasonable, actionable reporting that demonstrates direct impact to the security posture
Define and implement metrics using Key Risk Indicators (KRIs) and security scorecards to measure control effectiveness
Serve as a subject-matter-expert for Application Security, including triage and support for critical issues, security risk assessments, and CI/CD security issues with partners and stakeholders
Evaluate business and technical requirements to identify and implement tools, processes, and technologies that improve security posture
Support continuous improvement of existing compliance processes

Requirements

Computer Science or similar degree
5+ years of experience
Experience using vulnerability scanning technologies, AST platforms, and cloud security tooling
Formal experience with threat modeling
Experience leading projects, initiatives, and resources through direct and indirect leadership
Deep knowledge of assessing and prioritizing risk, including ability to think from an attacker perspective to conduct threat models
Cloud experience with AWS, Azure, and/or GCP
Understanding of Infrastructure as Code (IaaC) and Policy as Code (PaC) concepts
Experience implementing secure Software Development Lifecycle programs
Familiarity with security controls, guidelines, and frameworks such as SOC2, ISO 27001, and NIST 800-53
Ability to automate tasks and build code solutions to repetitive problems
Scripting or programming experience in one or more: Java, .NET, HTML, Ruby, PHP, Perl, C#, Python, JavaScript, PowerShell, Bash
Experience with penetration testing and web application assessment
Experience assessing software compliance with HIPAA, PHI, PII, and PCI regulations

Technologies

AWS, Azure, GCP, Infrastructure as Code (IaaC), Policy as Code (PaC), Java, .NET, HTML, Ruby, PHP, Perl, C#, Python, JavaScript, PowerShell, Bash, SOC2, ISO 27001, NIST 800-53, HIPAA, PCI, CI/CD

Eligibility: This position is available to Virginia residents for in-office applicants in Richmond or Lynchburg, Virginia.

View full job page →

29d ago

Junior Cybersecurity Analyst

Agency Cyber Inc Richmond, VA

Richmond, VA

29d ago

$15 - $20/hr Full time Analyst Entry Level Information Security

Apply Now

Job Description

Agency Cyber Inc is building a growing cybersecurity and compliance practice from its Richmond, VA office, and this junior role is designed for people who want to learn how a fast-moving security team operates in real client environments. This is an hourly, full-time, on-site entry-level position where you will be trained on the frameworks, tools, client posture, and certifications needed to support cybersecurity and compliance work.

You will work alongside senior analysts, contribute to projects across cybersecurity, compliance, IT, and business operations, and develop industry-recognized skills through hands-on exposure. If you thrive with clear writing, follow-through, and learning in ambiguous situations, this role aligns with how the team evaluates talent.

Position details

Location: Richmond, VA (on-site)
Employment: Hourly, full-time
Schedule: Mandatory overtime, averaging ~45 hours/week
Compensation: $15 - $20 per hour, plus overtime
Experience level: Entry-level; no cybersecurity background required

What you’ll do

Work directly under senior analysts with direct exposure to how a high-growth cybersecurity team functions
Deliver exceptional service to business clients and key contacts
Manage accounts and serve as the connective link between client needs and internal teams
Support projects spanning cybersecurity, compliance, IT, and business operations
Learn the field from the ground up while working toward industry-recognized certifications

What you’ll bring

Relentless follow-through: finish what you start, and handle gaps so they do not become your failures
Sharp written communication: write clearly under pressure to clients, teammates, or auditors, with writing treated as real work
Comfort with ambiguity: operate without a manual, ask strong questions, take a position, and move
Intellectual curiosity: enjoy learning hard technical material and prefer deep understanding over surface answers
High personal standards: hold yourself to the bar before it has to be enforced
Resilience: handle long days, hard feedback, and difficult weeks while recovering and continuing
No cybersecurity experience required: training will cover frameworks, tools, client posture, and certifications

Growth and career trajectory

Analysts who remain in the role for 3+ years routinely move into full Cybersecurity Analyst positions, building the certifications, client exposure, and operational fluency that typically takes others a decade to develop elsewhere.

Benefits

10 days of paid time off
11 paid federal holidays
401(k) with 4% company match
Monthly healthcare stipend
Gym membership stipend
Weekly team lunches and in-office snacks

About Agency Cyber Inc

Agency Cybersecurity is a fast-growing venture-backed startup providing cybersecurity and compliance services. The company’s software and services simplify complex compliance frameworks including SOC 2, ISO 27001, and HIPAA, helping businesses scale securely and with confidence. Agency Cybersecurity is backed by investors including Y Combinator, and maintains offices in NYC, Boston, Richmond, and London.

How candidates are evaluated

The team hires for traits rather than résumés. Candidates are encouraged to share concrete evidence of traits from prior work, academics, athletics, military service, side projects, or any setting where they were genuinely tested. The company values demonstrated hard-earned signals such as leadership, completion of demanding work, and building something without being asked.

View full job page →

30d ago

Cybersecurity Engineer

Intellibee Richmond, VA

Richmond, VA

30d ago Closed

Full time Cloud Platforms Cybersecurity Tools Endpoint Security

This position is no longer accepting applications (closed Sep 4, 2026).

Job Description

The Cybersecurity Engineer will develop and implement advanced cyber defense capabilities while operating and enhancing a Splunk SIEM environment. This onsite role in Richmond, VA supports Splunk Enterprise Security for monitoring, detection, analysis, and response to security events, with emphasis on log analysis, threat hunting, incident response, and Splunk detection and compliance reporting.

Key Responsibilities

Continuously monitor network traffic, endpoint logs, and cloud security events to identify anomalous behavior and potential security incidents.
Create, maintain, and tune Splunk correlation searches, alerts, and dashboards to reduce false positives and strengthen detection coverage.
Investigate potential security incidents, follow forensic evidence, and coordinate with IT and network teams to remediate identified threats.
Develop and refine detection and response playbooks using threat intelligence and frameworks such as MITRE ATT&CK.
Partner with infrastructure teams to onboard new data sources, ensuring log integrity, parsing, and normalization within the SIEM platform.
Support audit readiness by collecting SIEM control evidence and producing compliance reports aligned with internal policies and standards.

Required Qualifications

8+ years of hands-on cybersecurity experience, specifically operating, building, and investigating threats within a SIEM or Splunk environment.
Excellent critical thinking, problem-solving, and communication skills, including the ability to manage multiple security tickets and operate calmly under pressure.
Proficiency writing SPL (Splunk Processing Language).
Strong understanding of networking, firewalls, EDR, and cloud platforms such as AWS, Azure, or GCP.
Knowledge of security frameworks (for example, MITRE ATT&CK) and security compliance standards such as NIST, HIPAA, or SOC 2.
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
Relevant certifications such as Splunk Core Certified User and Splunk Core Certified Advanced Power User are highly preferred.

Technologies and Tools

Splunk SIEM
Splunk Enterprise Security
Splunk Processing Language (SPL)
MITRE ATT&CK
AWS, Azure, GCP
NIST, HIPAA, SOC 2
EDR

Benefits

Long-Term Stability: Multi-year opportunities with room to grow.
Comprehensive Health Coverage: Healthcare benefits for you and your family.
401(k) Program: Retirement savings with future planning support.
GC Assistance: Support for immediate Green Card processing, if required.

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.

View full job page →

1mo ago

Cybersecurity Engineer

Skywalk Global Richmond, VA

Richmond, VA

1mo ago Closed

Full time Cloud Platforms Cloud Security Cyber Forensics

This position is no longer accepting applications (closed Sep 3, 2026).

Job Description

Richmond, VA (onsite) role focused on Splunk SIEM operations, detection engineering, and incident investigation.

Responsibilities

Continuously review network traffic, endpoint logs, and cloud security events to identify anomalies and potential incidents
Build, maintain, and tune Splunk correlation searches, alerts, and dashboards to reduce false positives and strengthen detection quality
Investigate potential incidents using forensic evidence and coordinate with IT and network teams to remediate threats
Create and refine detection and response playbooks informed by threat intelligence and frameworks such as MITRE ATT&CK
Partner with infrastructure teams to onboard new data sources, ensuring log integrity, parsing, and normalization across the SIEM platform
Support audit readiness by collecting SIEM control evidence and producing compliance reports aligned with internal policies and standards

Requirements

Minimum 8+ years hands-on cybersecurity experience operating, building, and investigating threats within a SIEM or Splunk
Critical thinking, problem-solving, and communication skills; able to operate calmly under pressure and manage multiple security tickets
Proficiency writing SPL (Splunk Processing Language)
Strong understanding of networking, firewalls, EDR, and cloud platforms including AWS, Azure, or GCP
Knowledge of security frameworks such as MITRE ATT&CK and security compliance standards including NIST, HIPAA, or SOC 2
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field
Relevant certifications such as Splunk Core Certified User and Splunk Core Certified Advanced Power User (highly preferred)

Technologies

Splunk SIEM
Splunk Enterprise Security
SPL (Splunk Processing Language)
Splunk correlation searches
MITRE ATT&CK
AWS, Azure, GCP
EDR
NIST, HIPAA, SOC 2

View full job page →

1mo ago

Engineer II, Cybersecurity

CarMax Enterprise Services, LLC Richmond, VA

Richmond, VA

1mo ago Closed

$81k - $121k/yr Full time Application Security Cloud Platforms Cybersecurity Tools

This position is no longer accepting applications (closed Aug 31, 2026).

Job Description

CarMax Enterprise Services, LLC is seeking an Engineer II, Cybersecurity to implement, develop, operate, and enhance security solutions across the organization. The role is based at the CarMax Home Office in West Creek, Richmond, VA, with onsite work four days per week and participation in a 24x7 on‑call rotation. The position offers a salary range of USD 80,600 to 120,900 annually and requires at least one year of information security operations experience.

Responsibilities

Stay current with evolving technology and client industry trends
Design, implement, operate, and refine cybersecurity solutions
Provide functional and technical security expertise on projects requiring cybersecurity services
Collect information from business and IT teams to develop security-related processes and procedures that strengthen CarMax's security posture
Drive tasks and projects to completion through effective project management, stakeholder interaction, and IT coordination
Triage support issues promptly and respond with appropriate urgency
Participate in a 24x7 on-call rotation and provide after‑hours support as needed

Requirements

Experience with network security technologies including firewalls, proxies, network access controls, intrusion detection and intrusion prevention, and routing
Familiarity with identity concepts (authentication, authorization, governance), data loss prevention, and secure coding and configuration standards
Proficiency in at least one coding or scripting language such as PowerShell, Python, Java, or JavaScript
Experience with Windows Server and Linux operating systems
Understanding of cloud technologies across SaaS, IaaS, and PaaS
Strong analytical, troubleshooting, and problem-solving skills with the ability to perform under pressure
Excellent organization and time management abilities
Effective communication skills, including verbal and written, with the ability to deliver organized presentations and tailor messages to different audiences; capable of facilitating group discussions with diplomacy
Ability to estimate effort and impact required to complete tasks or projects
1-5 years of experience in information security operations
Bachelor’s Degree in Computer Science, Engineering, Cybersecurity, or related field, or equivalent combination of education, skills, or experience
Certifications: CISSP, CISA, Security+, CCNA or CCNP Security preferred

Technologies

PowerShell
Python
Java
JavaScript
Firewalls
Proxies
Network access controls
Intrusion detection and intrusion prevention
Routing
Windows Server
Linux operating systems
SaaS, IaaS, PaaS

Benefits

Up to 48 hours of sick time per year, accrued per pay period
Between 80 and 200 hours of vacation time per year after a 90-day waiting period, depending on years of continuous service
Eight hours of pay for each of six paid holidays per year plus one floating holiday; holiday work may qualify for Holiday Premium Pay
Full-time salaried associates receive paid time away with no specified limit for sick, vacation, bereavement, jury duty, holidays, and floating holidays, subject to manager approval

Work Location and Arrangement

This role will be based at the CarMax Home Office in West Creek (Richmond, VA) and associates will work onsite four days per week.

Work Authorization

Applicants must be currently authorized to work in the United States on a full-time basis.

About CarMax

CarMax disrupted the auto industry by delivering the honest, transparent and high-integrity experience customers want and deserve. This innovative thinking around the way cars are bought and sold has helped us become the nation’s largest retailer of used cars, with over 200 locations nationwide. Our amazing team of more than 25,000 associates work together to deliver iconic customer experiences. Along the way, we help every associate grow their career and achieve their best, at work and in their

Our Commitment to Diversity and Inclusion

CarMax is committed to bringing together people from different backgrounds and perspectives, providing employees with a safe, welcoming, and inclusive work environment.

CarMax is an Equal Opportunity Employer

CarMax is an equal opportunity employer, and all qualified candidates will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, protected veteran status, disability status, or any other characteristic protected by law.

View full job page →

1mo ago

Engineer II, Cybersecurity, Application Security

CarMax Enterprise Services, LLC Richmond, VA

Richmond, VA

1mo ago Closed

$81k - $121k/yr Full time Application Security Cloud Platforms Container Security

This position is no longer accepting applications (closed Aug 31, 2026).

Job Description

This role is a Cybersecurity Engineer II focused on Application Security with CarMax Enterprise Services, LLC in Richmond, VA on site, offering a salary range of USD 80,600 - 120,900 per year.

Responsibilities

Design, implement, operate, and improve security solutions that advance application security, including static analysis, dynamic testing, API protection, and container security.
Provide functional and technical guidance on projects with application security implications for the organization.
Develop a deep understanding of the full portfolio of CarMax cybersecurity capabilities and how they interwork to fortify the enterprise.
Independently drive tasks and projects to completion through effective time management, stakeholder engagement, and cross-functional collaboration.
Efficiently triage security incidents and respond with appropriate urgency.
Participate in a weekly 24x7 on-call rotation with potential after hours support as needed.
Current on-call rotation is approximately three weeks per year.

Requirements

Strong foundational knowledge of cybersecurity concepts with an interest in expanding expertise in Application Security.
Proficiency in at least one coding or scripting language such as PowerShell, Python, .NET, JavaScript, or C#.
Excellent analytical, troubleshooting, and problem-solving abilities, including performance under pressure.
Strong organizational and time-management skills.
Excellent communication skills, both verbal and written; ability to tailor messages to diverse audiences and facilitate discussions with diplomacy.
Ability to estimate effort and impact for tasks and projects to enable realistic planning.
Minimum 2 years of relevant cybersecurity experience.
Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or a related field.

Technologies

PowerShell
Python
.NET
JavaScript
C#
GitHub
Azure DevOps
TeamCity
Azure
AWS
GCP
Kubernetes

Benefits

Paid sick time
Paid vacation time
Six holidays per year plus one floating holiday
Holiday premium pay
Paid time away for full-time salaried employees with no specified limit for sick, vacation, bereavement, jury duty, holidays, floating holiday, subject to manager approval

Work Location and Arrangement

This role is based at the CarMax Home Office in West Creek, Richmond, VA and requires onsite work four days per week.

Work Authorization

Applicants must be currently authorized to work in the United States on a full-time basis.

Preferred Qualifications

Functional proficiency with at least one coding or scripting language.
Experience performing dynamic application security testing (DAST) using open source and commercial tools.
Experience performing static security code analysis (SAST) and providing actionable recommendations to stakeholders.
Experience integrating security into the container lifecycle, including image assurance, Kubernetes posture management, secrets management, and runtime threat detection.

View full job page →

1mo ago

Senior Security Engineer, Data

Genworth Richmond, VA

Richmond, VA

1mo ago Closed

$97k - $145k/yr Full time Senior Cybersecurity Tools Data Classification

This position is no longer accepting applications (closed Aug 22, 2026).

Job Description

Genworth is seeking a Senior Security Engineer, Data to operationalize and scale the organization’s data security program, overseeing data discovery, classification, and protection across enterprise environments. The role is based in Richmond, Virginia with a hybrid work arrangement.

Responsibilities

Manage the daily operations of data security platforms
Onboard new data sources and maintain scanning coverage across environments
Continuously adjust classification rules and validation workflows to improve accuracy
Refine data loss prevention policies and enforcement to balance protection with usability
Detect overexposed, misclassified, or unprotected sensitive data and lead remediation
Analyze data exposure risks and propose mitigation strategies
Verify the effectiveness of data protection controls such as DLP, encryption, and labeling
Assist in data related incident investigations and provide root cause analyses
Collaborate with application, data, cloud, and business teams to enhance data protection outcomes
Advise stakeholders on data classification, labeling, and handling best practices
Participate in working groups and governance forums to align on data security strategy
Coordinate with SOC, Identity, and Privacy teams for integrated security operations
Identify opportunities to automate data discovery, classification, and response workflows
Improve onboarding, tuning, and governance processes
Stay informed on evolving risks such as insider threat, data leakage, and AI data misuse
Contribute to improvements in the enterprise data security strategy and roadmap
Support adoption of new capabilities related to data security and privacy

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, or Information Systems
Minimum of 3 years of experience in data security, cybersecurity, or a related field
Hands-on experience with at least one data security platform (BigID, Varonis, Spirion) or a DLP solution (Microsoft Purview, Forcepoint, Symantec)
Strong understanding of data classification and governance principles
Solid knowledge of data protection techniques (DLP, encryption, tokenization)
Strong familiarity with security frameworks (NIST, ISO 27001, CIS)
Experience operating in enterprise IT environments (cloud, endpoint, SaaS)
Familiarity with Linux and Kubernetes environments

Technologies

BigID
Varonis
Spirion
Microsoft Purview
Forcepoint
Symantec
Linux
Kubernetes

Benefits

Competitive compensation and total rewards incentives
Comprehensive healthcare coverage
Multiple 401(k) savings plan options
Auto enrollment in an employer-directed retirement account funded by the employer
Generous paid time off including 12 paid holidays, volunteer time off, and paid family leave
Disability, life, and long term care insurance
Tuition reimbursement, student loan repayment, and training and certification support
Wellness support including gym membership reimbursement and Employee Assistance Program resources
Caregiver and mental health support services

Compensation

The base annual salary range is USD 96,700 to 145,000. This position is eligible for a bonus incentive plan, with payout determined by individual and company performance.

Additional Information

This role is aligned to a national market based pay range. Actual compensation will vary based on geographic location, experience, skills, and other job related factors. In addition to base salary, the role is eligible to participate in a bonus incentive plan, with incentive compensation based on performance and not guaranteed.