Tysons, VA

Cybersecurity Jobs in Tysons, VA

2 jobs found

Include remote jobs

Today

Lead, Technology Operations & Cybersecurity

Madison Energy Infrastructure Tysons, VA

Tysons, VA

Today

$100k - $125k/yr Full time Manager Endpoint Security Identity and Access Management

Apply Now

Job Description

Lead the day-to-day technology operations and cybersecurity program as the primary internal owner for Madison Energy Infrastructure.

Responsibilities

Own day-to-day administration, reliability, and continuous improvement for MEI’s technology ecosystem, including Microsoft 365, collaboration platforms, enterprise applications, and related business systems.
Act as the primary internal owner for managed technology partners, including the IT Managed Service Provider (MSP), vCISO, MDR/SOC, and other strategic vendors; ensure alignment to business priorities and effective delivery.
Partner with employees, business leaders, and the Digital team to deliver technology support, implement business solutions, and enhance the overall employee technology experience.
Oversee technology operations such as user lifecycle management, identity and access, endpoint management, software licensing, and technology asset management.
Coordinate the cybersecurity program in partnership with the MSP, vCISO, and MDR/SOC teams, including incident response, vulnerability management, governance, security policies, and operational runbooks.
Monitor and report on technology operations, cybersecurity posture, service performance, and organizational risk using meaningful metrics, dashboards, and executive reporting.
Collaborate with the Digital team and business stakeholders to implement and support technologies that improve business operations, strengthen security, and support MEI growth.
Serve as a trusted technology advisor to drive operational excellence, security awareness, cross-organization collaboration, and continuous improvement.

Requirements

Bachelor’s degree in Information Technology, Information Systems, Computer Science, Cybersecurity, or a related field.
2–5 years of experience supporting enterprise technology operations, systems administration, cybersecurity, or a related role, including technology projects spanning multiple business functions.
Experience supporting enterprise technology environments including Microsoft 365, collaboration platforms, identity and access management, endpoint management, and SaaS applications.
Working knowledge of modern IT operations and cybersecurity practices: vulnerability management, incident response, endpoint security, business continuity and disaster recovery, backup and recovery, security governance, and security awareness.
Strong interpersonal and communication skills with the ability to connect with technical and non-technical audiences; collaborative, service-oriented support for employees.
Organized and self-motivated with the ability to manage multiple priorities, drive initiatives to completion, and exercise sound judgment with sensitive and business-critical systems.
Eagerness to learn emerging technologies and cybersecurity practices to improve business operations.
Experience working with managed service providers (MSPs) or third-party technology vendors.
Industry certifications preferred (e.g., CompTIA Security+, CompTIA Network+, Microsoft, ITIL), not required.

Technology Experience

Microsoft 365
SaaS
CompTIA Security+
CompTIA Network+
Microsoft
ITIL

Location and Reporting

Tysons, VA (onsite)
Reports to the Digital Manager
Based in the Tysons Corner (McLean), VA area

Benefits

PTO and company holidays
Medical, dental, vision
Employer-paid short-term disability, long-term disability, life insurance
401(k) and company match
Professional development stipend
Strong culture of collaboration, performance, and personal growth

Compensation: USD 100,000 - 125,000 per yearly

Employment: 2+ years minimum experience; 2–5 years recommended

Equal opportunity employer statement.

View full job page →

1mo ago

Application Security Engineer

Veilant Tysons, VA

Tysons, VA

1mo ago Closed

$115k - $145k/yr Full time Application Security Code Security Cybersecurity Tools

This position is no longer accepting applications (closed Sep 15, 2026).

Job Description

Veilant is seeking an Application Security Engineer to validate, secure, and continuously improve software developed by internal and partner engineering teams.

Responsibilities

Audit software releases across major and minor cycles to intercept and remediate security flaws before deployment.
Analyze source code to identify, isolate, validate, and contextualize vulnerabilities in complex application codebases.
Build safe proof-of-concept examples to demonstrate exploitation paths and verify real-world impact.
Contextualize findings using application business logic, user workflows, data sensitivity, and production use cases.
Author remediation guidance and collaborate with development teams on patches, controls, or architectural mitigations.
Intercept and analyze application-layer network traffic using tools such as Burp Suite or similar intercepting proxies.
Inspect encrypted payloads, API calls, and authentication flows.
Assess and help secure core architectures across REST APIs, SQL databases, PostgreSQL, JWT/OAuth, identity providers, and token-based authentication mechanisms.
Perform threat modeling for web applications based on use cases, data flows, user roles, trust boundaries, and production environments.
Improve DevSecOps pipelines by integrating, tuning, and operationalizing SAST, DAST, SCA, IaC scanning, secrets detection, and container security tooling.
Support container runtime security efforts using monitoring and runtime protection tools such as Falco, NeuVector, or similar technologies.
Create standardized security reporting that translates technical findings into clear risk narratives for engineering teams and executive stakeholders.
Build a repeatable AppSec review process for major and minor software releases to help teams identify and resolve security issues before deployment.
Integrate and improve SAST, DAST, and SCA checks in CI/CD pipelines so security testing is part of the development lifecycle.
Establish threat modeling practices using common frameworks and apply them to Veilant’s Angular front-end, Java Spring Boot back-end, REST APIs, SQL databases, and authentication flows.
Partner with engineering and software teams to strengthen secure coding practices through collaborative reviews and practical remediation guidance.
Implement container runtime security best practices, including visibility, monitoring, and runtime protections for containerized workloads.
Write standardized security reports that communicate risk, impact, and remediation steps for both executive-level stakeholders and engineering teams.

Requirements

Ability to obtain a Security Clearance.
2+ years of software development experience in Java.
Hands-on experience reviewing or securing applications built with Java Spring Boot, Angular, REST APIs, SQL databases, and PostgreSQL.
Working knowledge of authentication and authorization technologies, including JWT, OAuth, identity providers, Entra, Keycloak, and token-based access models.
Experience intercepting, decrypting, manipulating, and analyzing web or application network traffic.
Demonstrated ability to find, validate, and explain vulnerabilities in a real codebase.
Familiarity with CI/CD tools such as GitLab CI, Azure DevOps, or GitHub Actions.
Experience with containerized environments and orchestration tools such as Kubernetes.
Exposure to infrastructure-as-code and container scanning tools such as Trivy, Kubesec, or similar technologies.
Understanding of cloud hosting environments such as Azure or AWS.
Familiarity with secrets management tools such as GitLab Secrets Manager, AWS KMS, Azure Key Vault, or Ansible Vault.
Experience with automated application security testing, including SAST, DAST, and SCA.
Familiarity with runtime security and monitoring tools for containers, such as Falco, NeuVector, or similar platforms.
Hands-on web security testing experience using Burp Suite or comparable tooling.
Strong written communication skills, including the ability to write reports for both technical and non-technical audiences.
OSWE, OSCP, and/or GXPN certifications are highly desirable.

Technologies

Java, Java Spring Boot, Angular
REST APIs, SQL databases, PostgreSQL
JWT, OAuth, Entra, Keycloak
Burp Suite
SAST, DAST, SCA, IaC scanning, secrets detection, container security tooling
Falco, NeuVector
CI/CD: GitLab CI, Azure DevOps, GitHub Actions
Kubernetes
Trivy, Kubesec
Azure, AWS
GitLab Secrets Manager, AWS KMS, Azure Key Vault, Ansible Vault
OSWE, OSCP, GXPN

Benefits

Flexible PTO + holidays
Generous 401k match benefit up to 10%, with an automatic 3% safe harbor contribution and additional matching based on employee contributions
Medical (HSA & PPO Plans Available), dental, vision, disability, and life insurance
Employer Contribution to Health Savings Account (HSA)
Learning & Development opportunities
Professional coaching services
Get the technology you want to do your job
Free daily snacks & drinks

Compensation and Work Location

Salary range: USD 115,000 - 145,000 per year
Location: Tysons, VA (onsite)

Physical Requirements

Must be able to remain in a stationary position 50% of the time; occasionally move about inside the office
Constantly work with computers and other information technology equipment
Ability to communicate information and ideas in a classroom style format; may stand at a podium for long periods of time

View full job page →

Cybersecurity Jobs in Tysons, VA

Lead, Technology Operations & Cybersecurity

Application Security Engineer

Get Cybersecurity Jobs in Tysons, VA alerts