Winchester, VA

Cybersecurity Jobs in Winchester, VA

3 jobs found

Include remote jobs

1mo ago

Security Engineer (Linux Systems Engineer)

Navy Federal Credit Union Winchester, VA

Winchester, VA

1mo ago Closed

$99k - $156k/yr Full time Cloud Platforms Configuration Management Engineer

This position is no longer accepting applications (closed Oct 25, 2026).

Job Description

The Security Engineer role supports Navy Federal Credit Union’s Advanced Cyber Initiatives team by maintaining, deploying, remediating, and monitoring IT and enterprise security applications and systems. This Linux Systems Engineering-focused position includes troubleshooting Linux and Windows environments, renewing TLS certificates, supporting audit and hardening work, and participating in daily operations and on-call rotations.

Location

Winchester, VA 22602 (Onsite)

Compensation

USD 99,400 - 155,850 per year

Education

Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline, or equivalent combination of education and experience.

Responsibilities

Support Navy Federal Credit Union in the maintenance of IT and enterprise class security applications and systems
Troubleshoot Linux and/or Windows server operating systems and the enterprise applications running on those servers
Deploy, optimize, and maintain enterprise security applications across on prem, SaaS, and IaaS environments
Remediate vulnerabilities on Windows and/or Linux systems while monitoring, maintaining, patching, and administering platforms to support stability and sustainability
Deploy and configure SaaS enterprise applications
Deploy AI, Agentic solutions, and ML/LLM solutions to address modern security threats
Contribute to and maintain internal engineering documentation, including tool documentation, lessons learned, procedures, and status updates
Renew and update TLS certificates on appliances and enterprise applications
Respond to audit and enterprise hardening requests
Update stories and subtasks work items in flight
Provide updates during Daily Operations briefings
Monitor the daily ticket queue for incidents and work ingestion, and assign as required
Complete quarterly access reviews
Participate in on-call and after-hours rotation
Perform other duties as assigned

Required Skills and Qualifications

Extensive hands-on experience automating or scripting server configurations and deployments
Extensive hands-on experience patching and upgrading Linux and Windows operating systems, packages, and applications
Enterprise high security systems engineering experience or a similar role, with enterprise best practices for security and hardening (PCI-DSS and NCUA focus is ideal)
Experience implementing AI, Agentic solutions, and ML/LLM technologies in practice and/or deployment
Scripting experience in one or more: Ansible, Python, Bash, PowerShell, Ruby, etc. to automate routine tasks
Experience and thorough understanding of SSO/SAML/OAuth integration for enterprise applications
Strong ability to troubleshoot common Linux operating systems (CentOS, Red Hat, Ubuntu, and/or Cisco derivative OSes) OR strong ability to troubleshoot Windows server operating systems
Experience working within infrastructure management processes including change management, problem management, configuration management, and project management
Hands-on experience with Agile in particular Kanban workflow
Experience using and integrating tools with SIEMs
Experience in large enterprise processes, including working in a siloed environment with ticketing, coordination, and detailed change management controls
Knowledge of core network concepts including firewall, routing, switching, load balancing, and proxy principles, with troubleshooting from a server deployment and maintenance perspective

Technologies

Linux, Windows
Ansible, Python, Bash, PowerShell, Ruby
SSO, SAML, OAUTH
Centos, Red hat, Ubuntu, Cisco derivative OS’s
SIEM, TLS
AI, Agentic solutions, ML/LLM’s
SaaS, IaaS, on prem
Kanban

Desired Qualifications

Experience with cybersecurity applications
Experience with Linux-based Java/Tomcat COTS web applications in a clustered environment
Experience with Windows .NET-based IIS COTS applications in a clustered environment
Experience with physical or virtual appliances with limited Linux-based OS CLI interfaces
Ability to read and understand packet captures
Experience using or integrating Jira/Confluence

Schedule and Additional Information

Hours: Monday - Friday, flexible within core office hours of 7:00AM-6:00PM ET
Onsite address (Winchester): 141 Security Drive, Winchester, VA 22602

View full job page →

2mo ago

Principal Product Security Engineer

Navy Federal Credit Union Winchester, VA

Winchester, VA

2mo ago Closed

Full time Senior Application Security Application Security Engineering

This position is no longer accepting applications (closed Sep 20, 2026).

Job Description

Navy Federal Credit Union is seeking a senior individual contributor to define and integrate Secure Software Development Lifecycle (Secure SDLC) practices into software delivery workflows. This onsite role in Winchester, VA focuses on improving risk-informed release decisions, reducing security friction for engineering teams, and strengthening product integrity across the full lifecycle.

What you’ll do

Define and mature Secure SDLC practices aligned to Navy Federal software delivery processes, operating models, and secure development practices.
Own and support a pre-production product security scorecard to enable risk-informed release decisions, communicating product security posture, open risks, exceptions, and required remediation actions to business and technology stakeholders.
Act as the integration lead for embedding Secure Development Practice capabilities into engineering workflows, governance forums, and lifecycle activities.
Map product security activities across software delivery, including intake, planning, architecture review, design, development, testing, release, exception management, and operational handoff.
Create repeatable process patterns for integrating threat modeling, secure coding, application security testing, software composition analysis, API security, software supply chain security, product integrity testing, and risk-based exception handling into day-to-day engineering work.
Reduce redundant reviews, unclear handoffs, late-stage security friction, and legacy process steps that do not align with Navy Federal delivery practices.
Develop Secure SDLC operating models, workflow diagrams, playbooks, process documentation, RACI models, control integration points, and implementation guidance.
Translate security standards, objectives, and risk expectations into practical engineering requirements and developer-consumable guidance.
Partner with software engineering, architecture, DevSecOps, Information Security, governance, and risk stakeholders to align secure development practices with enterprise delivery processes.
Support integration of secure development expectations into architecture governance, delivery boards, exception processes, and lifecycle risk decision points.
Recommend process improvements that strengthen security outcomes, improve developer experience, increase risk visibility, and enable secure delivery at scale.
Establish adoption and effectiveness measures to demonstrate Secure SDLC maturity, control integration, developer enablement, reduced friction, and improved product security outcomes.
Lead cross-functional working sessions and develop executive-ready recommendations, influencing process decisions across security and engineering stakeholders without direct authority.

What you bring

Bachelor’s degree in information technology, Cybersecurity, Computer Science, Software Engineering, Information Systems, Engineering, or related field, or the equivalent combination of education, training, and experience.
Experience defining, improving, or integrating secure development lifecycle practices into enterprise software delivery processes.
Strong understanding of secure development practices including threat modeling, secure coding, application security testing, software composition analysis, API security, software supply chain security, vulnerability management, and risk-based exception handling.
Extensive hands-on experience translating security requirements, control objectives, or risk expectations into practical engineering processes, workflow guidance, and delivery requirements.
Demonstrated experience developing process documentation, operating models, workflow diagrams, playbooks, standards, RACI models, implementation guidance, or executive-level recommendations.
Strong facilitation, analytical thinking, systems thinking, problem-solving, communication, and stakeholder influence skills.
Ability to operate independently as a senior individual contributor and lead complex cross-functional initiatives without direct reporting authority.

Frameworks and tools you’ll work with

Secure Software Development Lifecycle
Threat modeling, secure coding, application security testing
Software composition analysis, API security, software supply chain security
Vulnerability management, DevSecOps
NIST Secure Software Development Framework, OWASP SAMM, OWASP ASVS, OWASP Top 10, BSIMM, ISO 27001, NIST Cybersecurity Framework
Agile, SAFe, DevOps, CI/CD, product-oriented delivery
Architecture governance, release management
CISSP, CISM, CSSLP, CCSP, GIAC

Desired qualifications

Extensive hands-on experience in application security, secure SDLC, software engineering, DevSecOps, enterprise architecture, technology risk, or software delivery governance.
Strong understanding of software delivery practices including Agile, SAFe, DevOps, DevSecOps, CI/CD, product-oriented delivery, architecture governance, and release management.
Advanced degree in Information Technology, Cybersecurity, Computer Science, Software Engineering, Information Systems, Engineering, Business Administration, or related field.
Experience with industry frameworks or models such as NIST Secure Software Development Framework, OWASP SAMM, OWASP ASVS, OWASP Top 10, BSIMM, ISO 27001, NIST Cybersecurity Framework, or similar security and software assurance practices.
CISSP, CISM, CSSLP, CCSP, GIAC, cloud security, architecture, Agile, SAFe, or related professional certifications.

Schedule and location

Hours: Monday - Friday, 8:00AM - 4:30PM

Onsite locations: 820 Follin Lane, Vienna, VA 22180; 5510 Heritage Oaks Drive, Pensacola, FL 32526; 141 Security Drive, Winchester, VA 22602

Compliance

Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.

View full job page →

2mo ago

Principal Security Engineer (Palo Alto Strata Cloud)

Navy Federal Credit Union Winchester, VA

Winchester, VA

2mo ago Closed

$132k - $206k/yr Full time Senior Analytics Cloud Platforms

This position is no longer accepting applications (closed Sep 1, 2026).

Job Description

The Principal Security Engineer will oversee the operation and support of Palo Alto Prisma Access through Strata Cloud Manager, delivering cybersecurity engineering expertise and guiding the design and deployment of security solutions across Navy Federal Credit Union.

Responsibilities

Provide on call support for major outage issues related to the Palo Alto Strata Cloud Manager.
Maintain the Palo Alto Prisma Access environment using Strata Cloud Manager.
Develop integrations of Prisma Access with other cybersecurity solutions.
Serve as a liaison between Navy Federal Credit Union and Palo Alto Support.
Engage in technical design of solutions based on use cases and business requirements.
Participate in proofs of concept and technical evaluations of technologies, designs and solutions, providing recommendations.
Stay current with emerging technologies and threats, proactively assessing their adoption into the organization.
Support the development of cybersecurity requirements, design and architecture artifacts, plans and policies.
Assist in defining security development and testing efforts.
Implement security controls across networking devices, databases, operating systems and software components.
Understand and integrate cybersecurity development activities.
Analyze cybersecurity data and test results to drive improvements.
Join a team that designs, protects and manages security services for the organization’s global security infrastructure.
Communicate complex technical concepts effectively to audiences ranging from IT administrators to executive leaders.
Collaborate with stakeholders to capture requirements and position security tools to meet those needs.
Lead discussions on engineering solutions and provide clear, strategic recommendations on direction.
Operate with a self-motivated, self-educating mindset while remaining collaborative with peers.

Requirements

Bachelor's Degree in Computer Science, Information Technology or the equivalent combination of training, education and experience.
At least 10+ years of total experience in cybersecurity engineering, encompassing on premise and cloud architectures, proxy management, cloud governance and security controls.
At least 5+ years of direct hands-on experience with Palo Alto Strata Cloud Manager or Panorama and related leading technology.
At least 3+ years of direct hands-on experience tuning network sensors such as IDS/IPS, DDoS protections, and cloud security services.
Domain expertise in network security sensors including IDS, CASB, virtual network security, DDoS protections, and DNS.
Solid understanding of virtual network technologies such as routers, switches, load balancers, firewalls and proxies.
Minimum 3 years of related work experience.

Technologies

Palo Alto Strata Cloud Manager
Palo Alto Prisma Access
Palo Alto Panorama
Splunk
Linux
PowerShell
Python
Azure Cloud
Cloud Proxy
SASE
SD-WAN
Web Isolation
Zero Trust Network Access
PKI
SSL
SSH
HTTPS
IDS/IPS
CASB
DNS

Compensation

Salary range is USD 131,700 to 206,450 per year.

Additional Information

Hours: Monday through Friday, 8:00 AM to 4:30 PM
Location: Onsite in Winchester, VA
Office addresses: 820 Follin Lane, Vienna, VA 22180; 5510 Heritage Oaks Drive, Pensacola, FL 32526; 141 Security Drive, Winchester, VA 22602

View full job page →

Cybersecurity Jobs in Winchester, VA

Security Engineer (Linux Systems Engineer)

Principal Product Security Engineer

Principal Security Engineer (Palo Alto Strata Cloud)

Get Cybersecurity Jobs in Winchester, VA alerts