Virginia

Cybersecurity Jobs in Virginia

187 jobs found

Include remote jobs

1d ago

Cybersecurity Subject Matter Expert (SME)

CGI Group, Inc. Fairfax, VA

Fairfax, VA

1d ago

$128k - $276k/yr Full time Cybersecurity Tools Data Security Endpoint Security

Apply Now

Job Description

CGI Federal is seeking a Cybersecurity Subject Matter Expert (SME) to strengthen a multidisciplinary team supporting mission-critical capabilities for a federal client. This hybrid role centers on cybersecurity strategy, system assessment and authorization support, testing and remediation, and sustained compliance across IT and OT environments.

The position will be based in the Fairfax, VA area, with hybrid work available. The salary range for this role is USD 127,500 - 276,200 per year, depending on experience and qualifications.

Key Responsibilities

Develop, maintain, and execute cybersecurity strategies and plans for IT and OT systems.
Provide system assessment and authorization support, including ISSO duties, ATO processes, and POA&M remediation activities.
Conduct system testing and remediation, including red team/blue team exercises, penetration testing, and static/dynamic code scanning.
Support compliance with federal requirements, including Binding Operational Directives, Emergency Directives, Executive Orders, and the CDM program.
Implement and operate cybersecurity solutions across areas such as asset management, IAM, vulnerability management, configuration management, EDR, network protection, cloud security, and data protection.
Develop and maintain a Lifecycle Maintenance and Cybersecurity Sustainment Framework to help keep systems secure, modernized, and operational.
Provide OT risk management and compliance support, including implementation of risk management frameworks.

Required Qualifications

US citizenship required due to government contract and/or clearance requirements, along with successful completion of a CGI background check prior to beginning work.
Ability to obtain and maintain a DHS/CISA EOD/Public Trust clearance.
Bachelor's degree in Computer Science, Information Security, or a related field (preferred).
Proven cybersecurity experience covering strategy, assessment, remediation, and sustainment for IT and OT environments.
Familiarity with federal cybersecurity requirements and compliance frameworks.
Hands-on experience with system testing, penetration testing, and code scanning.
Expertise operating cybersecurity solutions across multiple domains.
Strong understanding of OT risk management frameworks.

Technologies

EDR
CDM program
IAM

Preferred / Desired Qualifications

CISSP
CEH
GSEC
CompTIA Security+

Additional Skills

Cyber Security Strategy
IT Security
Business Process Consulting
Ethical Hacking
English

Benefits

Competitive compensation
Comprehensive insurance options
Matching contributions through the 401(k) plan and the share purchase plan
Paid time off for vacation, holidays and sick time
Paid parental leave
Learning opportunities and tuition assistance
Wellness and well-being programs

Work Location and Schedule

This position is located in one of CGI Federal’s offices in the Fairfax, VA area. A hybrid working model is acceptable. You will be required to work in a CGI Federal office two days per week.

Eligibility and Background Investigation Notes

All CGI offers of employment in the U.S. are contingent upon successfully completing a background investigation.
Background investigation components can vary depending on assignment and/or level of U.S. government security clearance held.
Depending on role and federal clearance requirements, some background investigations may include a credit check in accordance with applicable laws.
CGI provides reasonable accommodations to qualified individuals with disabilities.

View full job page →

1d ago

Cybersecurity Engineer

Gromelski & Associates, Inc. Manassas, VA

Manassas, VA

1d ago

Full time Certificate Management Cloud Infrastructure Cloud Native

Apply Now

Job Description

Gromelski & Associates, Inc. is seeking a cybersecurity engineering professional to support Rotary & Mission Systems Technical Operations. This role focuses on building new security architectures for a large and critical DoD system of systems, pairing hands-on cyber engineering with structured documentation and design review. You will work onsite in Manassas, VA and contribute to designs that take a critical approach to STIGs, while strengthening authorizations and continuous monitoring for classified environments.

Responsibilities

Provide cybersecurity engineering expertise by translating architectural needs into practical cyber solutions that fit mission and system goals.
Lead the documentation and review process for new designs, applying a critical approach to design compliance and STIGs.
Research new cybersecurity capabilities, perform trade studies, and share findings with peers and leadership.
Develop and maintain system documentation to support information system authorization, security management, and continuous monitoring across both networked and standalone classified systems.

Requirements

Experience in software system design and development.
Experience with devSecOps solutions.
Experience using the Agile Methodology.
Bachelor’s degree in a related discipline, or equivalent experience/combined education, with 5 years of professional experience; or 3 years of professional experience with a related master’s degree.
Ability to obtain and maintain a DoD Secret Clearance: must be a U.S. Citizen with no dual citizenship.
Proactive self-starter with a task-driven approach and the ability to work independently.
Team player who takes ownership and builds relationships that support overall team success.

Technologies

devSecOps
Linux systems
PKI
Kubernetes
containers
Python

Highly Desirable Skills

Knowledge of MBSE-based design.
Cyber engineering experience.
Knowledge of Linux systems and large system development.
Knowledge of PKI.
Cloud experience such as Kubernetes and containers.
Experience with scripting languages including Python.
Basic knowledge of networking exposure with the ability to understand packet captures.
Effective oral and written communication skills to collaborate with internal and external stakeholders.

Benefits

Gromelski & Associates, Inc. offers a competitive benefit package.

View full job page →

3d ago

Palo Alto Network Security Engineer

Sedulous Consulting Services LLC Fort Belvoir, VA

Fort Belvoir, VA

3d ago

$90k - $160k/yr Full time Cybersecurity Tools Engineer Firewall

Apply Now

Job Description

This role provides network and cybersecurity engineering support in a Department of Defense environment, focused on hands-on administration and troubleshooting of Palo Alto Networks security technologies supporting mission-critical and classified networks.

Location and Employment

Site: Fort Belvoir, VA (onsite)
Employment Type: Full-Time
Travel: Up to 25%

Compensation

Salary: USD 90,000 - 160,000 per yearly

Minimum Experience

Experience: 2 years

Responsibilities

Configure, administer, maintain, and troubleshoot Palo Alto Networks Next-Generation Firewalls (NGFWs).
Configure and maintain PAN-OS.
Develop, implement, and maintain security and NAT policies.
Configure and support App-ID and User-ID.
Configure and maintain GlobalProtect.
Configure and troubleshoot VPN/IPsec connectivity.
Configure and support High Availability (HA).
Configure and troubleshoot routing, zones, and interfaces.
Implement and maintain Threat Prevention capabilities.
Monitor and analyze firewall logging and security events.
Manage firewall environments using Panorama and/or Strata Cloud Manager.
Perform firewall upgrades, maintenance, and troubleshooting.
Support secure network operations within classified and DoD environments.
Coordinate with network, cybersecurity, and systems engineering personnel to resolve technical issues and maintain secure network operations.

Required Qualifications

Experience: 3–5+ years of network and/or security engineering experience.
Hands-on Palo Alto: 2+ years of hands-on Palo Alto NGFW/PAN-OS experience.
Certification: Active Palo Alto Networks Certified Next-Generation Firewall Engineer certification or active legacy PCNSE certification.
Demonstrated hands-on experience with: PAN-OS; Security/NAT policies; App-ID; User-ID; GlobalProtect; VPN/IPsec; High Availability; Routing; Zones/interfaces; Threat Prevention; Logging; Panorama and/or Strata Cloud Manager; Firewall upgrades and troubleshooting.
Clearance: Active TS/SCI Security Clearance.

Preferred Qualifications

Palo Alto Networks Network Security Analyst certification.
CCNP Security or CCNP Enterprise.
CISSP (for more senior candidates).
Experience with DoD STIGs.
Experience with ACAS/Nessus.
Experience supporting Risk Management Framework (RMF) requirements.
Experience with DISA infrastructure.
Experience supporting classified networks.

Technologies

Palo Alto Networks Next-Generation Firewalls (NGFWs)
PAN-OS
App-ID
User-ID
GlobalProtect
VPN/IPsec
High Availability (HA)
Threat Prevention
Firewall logging
Panorama
Strata Cloud Manager
Palo Alto Networks Certified Next-Generation Firewall Engineer certification
PCNSE

Benefits

401K
Life/Health/ Dental/Disability Insurance
Flexible Paid Leave
Tuition Reimbursement

Physical Requirements and Work Environment

Primarily sedentary work requiring tasks involving reaching, lifting, finger dexterity, grasping, repetitive motions, standing, talking, hearing, and visual acuity.
Ability to lift up to 20 pounds occasionally.
Ability to read, write, and communicate effectively in English.
Dependability, accuracy, strong judgment, and ability to apply oral and written instructions.
Ability to make decisions that significantly impact the immediate work unit.

EEO Statement

Sedulous Consulting Services is an EEO/AA/Disability/Veterans Employer.

View full job page →

3d ago

Application Security Engineer - AI Trainer

DataAnnotation Reston, VA 🇺🇸 Remote

Reston, VA

3d ago

$50 - $100/hr Contract Adversarial Ai Security Adversarial Ai Security Evaluation Ai Security

Apply Now

Job Description

DataAnnotation is hiring an Application Security Engineer - AI Trainer to help train AI models for cybersecurity. This fully remote contract role lets you work on security-focused AI training tasks using your own computer, with a flexible schedule and hourly pay.

What you’ll do

Review and evaluate AI-generated cybersecurity content, including threat analysis, vulnerability assessments, and offensive security techniques, to confirm real-world accuracy and validity.
Design and solve security-focused technical problems that are used to train AI systems.
Produce clear technical explanations and security-relevant code to support model training.
Provide feedback that directly influences the next generation of AI security models.

What you bring

2+ years of hands-on experience in a cybersecurity role, such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or adjacent work, including government or military cyber operations.
Some coding experience and comfort navigating and patching a codebase.
English fluency (native or bilingual level) with strong writing skills.
A bachelor’s degree is preferred.
Certifications are a plus, such as OSCP, CRTO, GREM, GCFA, CEH, and similar credentials.

Contract benefits

Fully remote: work from anywhere in the US, Canada, UK, Ireland, Australia, and New Zealand.
Flexible schedule: choose which projects you take on and when you work.
Hourly pay: projects are paid $50 to $100 USD per hour.
Higher bonus rates: available for certain projects.
Impact: help shape AI technologies built for cybersecurity.

Payment and eligibility notes

Payment is made via PayPal.
DataAnnotation will never ask for any money from you.
This job is only available to candidates located in the US, Canada, UK, Ireland, Australia, and New Zealand.

View full job page →

4d ago

Security Engineer III, Splunk Content Engineer

Deloitte Rosslyn, VA

Rosslyn, VA

4d ago

$113k - $188k/yr Full time Analytics Cybersecurity Content Cybersecurity Tools

Apply Now

Job Description

The Security Engineer III, Splunk Content Engineer role on Deloitte’s Government & Public Services team focuses on building and refining security information and event management content, automation, and reporting across client environments. This position supports security platforms including Splunk and others through correlation rules, schemas, and severity criteria.

Key Responsibilities

Implement automation to optimize workflows and support consistent security response across client environments
Develop security platform content for tools including Splunk, Archer, Tanium, Trellix, FireEye, and CrowdStrike
Build, implement, and manage security information and event management correlation rules, logic, and content
Tune security information and event management rules and logic to reduce false positives, known errors, and expected network behavior
Create scheduled and ad hoc reporting, maintain event schemas, and apply customized security severity criteria

Required Qualifications

Bachelor’s Degree or relevant experience in lieu of degree required
Active Secret Clearance required
Ability to work onsite in Herndon, VA up to 3 days a week
2+ years of experience developing, implementing, and managing security information and event management correlation rules and content
Experience building and implementing event correlation rules, logic, and content in a security information and event management environment
Experience tuning event correlation rules and logic to filter events tied to known network behavior, false positives, and known errors
Experience maintaining an event schema with customized security severity criteria
Experience creating scheduled and ad hoc reporting with security information and event management tools
Experience with security information and event management technologies and event collector deployments in Windows and Linux operating environments
Ability to travel 15%, on average
Must be legally authorized to work in the United States without employer sponsorship, now or in the future

Technologies

Splunk
Archer
Tanium
Trellix
FireEye
CrowdStrike
Security information and event management (SIEM)
Event collectors
Windows and Linux

Skills for Success

Ability to work independently and collaborate as part of a team
Effective written and verbal communication skills
Meticulous attention to detail and quality of work product
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to mentor and provide clear guidance to others

Preferred Qualifications

Experience creating content for one or more of Splunk, Archer, Tanium, Trellix, FireEye, or CrowdStrike
Experience supporting cyber defense, security operations, or incident response environments
Experience working with government clients or within regulated environments
Experience automating security workflows and operational processes
Experience leading technical workstreams or junior team members

Location, Clearance, and Compensation

Location: Rosslyn, VA 22209 (onsite)
Clearance: Active Secret Clearance required
Salary: USD 113,000 - 188,400 per year
Wage range note: Compensation takes into account a wide range of factors used to make pay decisions
Estimated range: $113,000-$188,400

View full job page →

4d ago

Cybersecurity Manager - AI Trainer

DataAnnotation Annandale, VA 🇺🇸 Remote

Annandale, VA

4d ago

$50 - $100/hr Contract Manager Ai Security Cybersecurity Tools

Apply Now

Job Description

The Cybersecurity Manager - AI Trainer role supports the development of AI chatbots by reviewing AI-generated cybersecurity materials and addressing security-focused technical challenges. This is a fully remote contract position with an hourly payment structure.

Location and Work Model

Annandale, VA (remote). Contract work is available for candidates located in the US, Canada, UK, Ireland, Australia, and New Zealand.

Compensation

Hourly pay ranges from $50 to $100 USD per hour. Certain projects may offer higher bonus rates. Payment is made via PayPal.

Responsibilities

Evaluate AI-generated cybersecurity content, including threat analysis, vulnerability assessments, and offensive security techniques, with attention to real-world accuracy and validity.
Design and solve security-focused technical problems that are used to train AI systems.
Write clear technical explanations and security-relevant code to support training and model improvement.
Provide feedback that directly influences the next generation of AI security models.

Requirements

2+ years of hands-on experience in a cybersecurity role, such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or closely related work, including government or military cyber operations.
Coding experience required; comfort navigating and patching a codebase is important.
English fluency (native or bilingual) with strong writing skills.
Bachelor’s degree preferred.
Cybersecurity certifications are a plus, including OSCP, CRTO, GREM, GCFA, CEH, and similar credentials.

Benefits

Fully remote: work from anywhere in the US, Canada, UK, Ireland, Australia, and New Zealand.
Flexible schedule: select which projects to take on and determine when you work.
Own-computer setup: perform work from your home environment using your own computer.
Competitive hourly pay: $50 to $100 USD per hour, with possible higher bonus rates for select projects.
Impact: contribute to the development of cybersecurity-focused AI technologies.

Additional Contracting Notes

No money requested: the employer will never ask candidates for payment.
Eligibility limited by region: the role is only available to applicants in the US, Canada, UK, Ireland, Australia, and New Zealand.

View full job page →

5d ago

Security Engineer III, Red Team Operator (TS Clearance)

Deloitte Rosslyn, VA

Rosslyn, VA

5d ago

$111k - $218k/yr Full time Senior Cloud Platforms Cobalt Strike

Apply Now

Job Description

Operate as an adversary simulation specialist to test and strengthen enterprise detection, response, and resilience.

Responsibilities

Plan and carry out red team engagements across enterprise environments, web applications, cloud platforms, and endpoints
Emulate advanced threat actors using realistic attack paths, tools, and techniques
Simulate reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration
Evaluate the effectiveness of security controls, monitoring, and incident response processes
Conduct authorized phishing, social engineering, and credential attack exercises
Create custom payloads, scripts, and attack workflows to support engagement objectives
Document findings, attack chains, defense gaps, and remediation recommendations
Produce after-action reports and technical debriefs for stakeholders, including leadership
Partner with blue teams, detection engineers, and security leadership to improve defensive capabilities
Follow rules of engagement, legal requirements, and operational safety standards

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
Active Top-Secret clearance
Ability to work onsite in Rosslyn, VA up to 5 days a week
Knowledge of network architecture, protocols, and techniques (e.g., tunneling)
Hands-on offensive security experience in red teaming, purple teaming, or adversary simulation
Strong command of enterprise attack techniques across Windows, Active Directory, Linux, cloud, and identity environments
Experience with command and control frameworks, privilege escalation, lateral movement, and evasion techniques
Proficiency with Cobalt Strike, Mythic, Metasploit, BloodHound, Burp Suite, Nmap, plus PowerShell or Python
Experience mapping activities to MITRE ATT&CK and performing threat emulation
Ability to write high-quality reports linking technical findings to business risk
CRTO (Certified Red Team Operator) or OSCP (Offensive Security Certified Professional)
Ability to travel 20% on average based on client needs and served industries/sectors
Legally authorized to work in the United States without employer sponsorship now or in the future

Technologies

Cobalt Strike
Mythic
Metasploit
BloodHound
Burp Suite
Nmap
PowerShell
Python
MITRE ATT&CK

Team and Work

Red Team Operator role on the Cyber Defense & Resilience team focused on adversary emulation and improving defensive readiness
Deloitte Cyber Defense & Resilience supports clients by transforming security operations, monitoring technology, data analytics, and threat intelligence
Helps manage and protect dynamic attack surfaces and provides rapid crisis and cyber incident response to support readiness, response, and recovery from business disruptions

Preferred

Experience with C2 frameworks such as Cobalt Strike, Havoc, Mythic, Sliver
Cloud red teaming experience in AWS, Azure, or GCP
Familiarity with detection engineering, SIEM, EDR, and purple team exercises
Experience developing custom tooling or modifying public offensive tools
Knowledge of malware analysis, reverse engineering, or exploit development

Compensation

Estimated wage range: $110,700 - $218,300 USD per year
May be eligible for a discretionary annual incentive program based on applicable rules, individual performance, and organizational performance