Cybersecurity Engineer Jobs in Virginia
Cybersecurity Engineer jobs in Virginia are among the most active in the country, concentrated in defense contracting, federal civilian agencies, and financial services, with openings at every level from entry-level SOC analyst to senior principal engineer. The largest hiring metros are the Northern Virginia corridor including Arlington and Reston, Richmond, and Virginia Beach, where employers such as Leidos, SAIC, and Booz Allen Hamilton maintain major operations and run continuous hiring cycles. The most in-demand specialties are cloud security, network defense, and identity and access management. Find a role that fits below and apply directly.
Find Cybersecurity Engineer JobsOverview
Showing 5 of 85+ Cybersecurity Engineer jobs
Cyber Defense
Cybersecurity Operations
Information Assurance
Information Systems
Network Defense
REQ#: RQ231346
Public Trust: None
Requisition Type: Regular
Your Impact
Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.
Job Description
Meaningful Work and Personal Impact:Security & Systems Engineering for DEOS Azure Environments
- Design, document, and maintain secure architectures for DEOS services hosted in Azure and related environments (e.g., NSGs, Azure VMs supporting M365, management, monitoring, or integration services).
- Build, configure, and administer Azure Virtual Machines supporting DEOS, including OS hardening (e.g., DISA STIGs/SRGs), patching, baseline configuration, and performance tuning.
- Develop, maintain, and operate Azure Automation Runbooks to support secure operations and compliance (e.g., automated patching, configuration enforcement, log collection, backup/restore, and response actions).
- Provide consultative technical guidance to DEOS engineering and operations teams on secure design patterns, Zero Trust principles, identity and access management, and boundary protections.
- Support DISA/DoW Risk Management Framework (RMF) activities for DEOS systems, ensuring security requirements are engineered into designs and implementations from the outset.
- Contribute to and maintain RMF/ATO artifacts (SSP, SAR, POA&M, diagrams, implementation statements) specific to DEOS Azure‑hosted components.
- Map and implement DISA STIGs, DoD Cloud Computing SRG, and relevant eMASS controls across Azure VMs and associated services.
- Identify, document, and communicate security risks or compliance gaps to DEOS leadership and customer stakeholders, recommending practical mitigations.
- Coordinate incident response for security and operational incidents impacting DEOS and the Cybersecurity Threat Hunt team.
- Participate in incident triage, technical analysis, and root‑cause investigations.
- Direct technical containment, eradication, and recovery activities (e.g., isolate or revoke credentials), in coordination with the DEOS incident manager and DISA stakeholders.
- Capture lessons learned and drive assist in updates to runbooks, playbooks, detection rules, and hardening baselines to reduce recurrence.
- Engage with GDIT, DEOS and DISA security, engineering, and operations counterparts to clarify requirements, constraints, and risk posture for DEOS services.
- Provide consultancy‑style briefings and technical input to change boards, engineering reviews, and security forums on proposed changes, risks, and mitigations.
- Support responses to DISA/DoW data calls, audits, inspections, and technical reviews related to DEOS cybersecurity and system integrity.
- Develop and maintain technical documentation for DEOS Azure components, including architecture diagrams, configuration baselines, runbook catalogs, incident response playbooks, and RMF artifacts.
- Ensure activities align with GDIT Security Standard Practices, DEOS‑specific governance processes, and applicable ISO 27001 / information security management expectations.
- Identify opportunities to improve automation, monitoring, and repeatable processes that enhance DEOS security, reliability, and operational efficiency.
- Experience as a security engineer or systems engineer supporting DoW or DISA programs, including hands‑on work with production systems.
- Demonstrated Azure experience, including: Deploying and managing Azure Virtual Machines, Implementing secure configurations, patching, and monitoring, and Developing or operating Azure Automation Runbooks.
- Experience working within RMF/ATO processes (DoW RMF, DoD CC SRG, DISA STIGs, Vulnerability scanning) and producing/maintaining associated documentation.
- Experience participating in or coordinating incident response for complex systems (triage, containment, eradication, recovery, lessons learned).
- Strong consultative communication skills with the ability to explain complex security and system engineering topics to both technical and non‑technical stakeholders.
- DoW 8570/8140 baseline certification at the appropriate level (e.g., CISM, CASP+, CISSP, or equivalent).
- Microsoft Azure certifications (e.g., AZ‑104, AZ‑500, AZ‑700) and/or Microsoft 365 security/collaboration experience relevant to DEOS.
- Prior experience on DISA or enterprise DoW collaboration/cloud programs.
- Experience working with large, distributed operations teams and SOCs in a 24x7 mission environment.
At GDIT, the mission is our purpose, and our people are at the center of everything we do.
- Growth: AI-powered career tool that identifies career steps and learning opportunities.
- Support: An internal mobility team focused on helping you achieve your career goals.
- Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off.
- Community: Award-winning culture of innovation and a military-friendly workplace.
- Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.
Work Requirements
6 + years of related experience
- may vary based on technical training, certification(s), or degree
Less than 10%
U.S. Citizenship Required
Salary and Benefit Information
The likely salary range for this position is $127,500 - $172,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Our Identity Verification Process
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.
About Our Work
We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
Cyber Defense
Cybersecurity Operations
Information Assurance
Information Systems
Network Defense
REQ#: RQ231346
Public Trust: None
Requisition Type: Regular
Your Impact
Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.
Job Description
Meaningful Work and Personal Impact:Security & Systems Engineering for DEOS Azure Environments
- Design, document, and maintain secure architectures for DEOS services hosted in Azure and related environments (e.g., NSGs, Azure VMs supporting M365, management, monitoring, or integration services).
- Build, configure, and administer Azure Virtual Machines supporting DEOS, including OS hardening (e.g., DISA STIGs/SRGs), patching, baseline configuration, and performance tuning.
- Develop, maintain, and operate Azure Automation Runbooks to support secure operations and compliance (e.g., automated patching, configuration enforcement, log collection, backup/restore, and response actions).
- Provide consultative technical guidance to DEOS engineering and operations teams on secure design patterns, Zero Trust principles, identity and access management, and boundary protections.
- Support DISA/DoW Risk Management Framework (RMF) activities for DEOS systems, ensuring security requirements are engineered into designs and implementations from the outset.
- Contribute to and maintain RMF/ATO artifacts (SSP, SAR, POA&M, diagrams, implementation statements) specific to DEOS Azure‑hosted components.
- Map and implement DISA STIGs, DoD Cloud Computing SRG, and relevant eMASS controls across Azure VMs and associated services.
- Identify, document, and communicate security risks or compliance gaps to DEOS leadership and customer stakeholders, recommending practical mitigations.
- Coordinate incident response for security and operational incidents impacting DEOS and the Cybersecurity Threat Hunt team.
- Participate in incident triage, technical analysis, and root‑cause investigations.
- Direct technical containment, eradication, and recovery activities (e.g., isolate or revoke credentials), in coordination with the DEOS incident manager and DISA stakeholders.
- Capture lessons learned and drive assist in updates to runbooks, playbooks, detection rules, and hardening baselines to reduce recurrence.
- Engage with GDIT, DEOS and DISA security, engineering, and operations counterparts to clarify requirements, constraints, and risk posture for DEOS services.
- Provide consultancy‑style briefings and technical input to change boards, engineering reviews, and security forums on proposed changes, risks, and mitigations.
- Support responses to DISA/DoW data calls, audits, inspections, and technical reviews related to DEOS cybersecurity and system integrity.
- Develop and maintain technical documentation for DEOS Azure components, including architecture diagrams, configuration baselines, runbook catalogs, incident response playbooks, and RMF artifacts.
- Ensure activities align with GDIT Security Standard Practices, DEOS‑specific governance processes, and applicable ISO 27001 / information security management expectations.
- Identify opportunities to improve automation, monitoring, and repeatable processes that enhance DEOS security, reliability, and operational efficiency.
- Experience as a security engineer or systems engineer supporting DoW or DISA programs, including hands‑on work with production systems.
- Demonstrated Azure experience, including: Deploying and managing Azure Virtual Machines, Implementing secure configurations, patching, and monitoring, and Developing or operating Azure Automation Runbooks.
- Experience working within RMF/ATO processes (DoW RMF, DoD CC SRG, DISA STIGs, Vulnerability scanning) and producing/maintaining associated documentation.
- Experience participating in or coordinating incident response for complex systems (triage, containment, eradication, recovery, lessons learned).
- Strong consultative communication skills with the ability to explain complex security and system engineering topics to both technical and non‑technical stakeholders.
- DoW 8570/8140 baseline certification at the appropriate level (e.g., CISM, CASP+, CISSP, or equivalent).
- Microsoft Azure certifications (e.g., AZ‑104, AZ‑500, AZ‑700) and/or Microsoft 365 security/collaboration experience relevant to DEOS.
- Prior experience on DISA or enterprise DoW collaboration/cloud programs.
- Experience working with large, distributed operations teams and SOCs in a 24x7 mission environment.
At GDIT, the mission is our purpose, and our people are at the center of everything we do.
- Growth: AI-powered career tool that identifies career steps and learning opportunities.
- Support: An internal mobility team focused on helping you achieve your career goals.
- Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off.
- Community: Award-winning culture of innovation and a military-friendly workplace.
- Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.
Work Requirements
6 + years of related experience
- may vary based on technical training, certification(s), or degree
Less than 10%
U.S. Citizenship Required
Salary and Benefit Information
The likely salary range for this position is $127,500 - $172,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Our Identity Verification Process
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.
About Our Work
We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
See All 85 Cybersecurity Engineer Jobs in Virginia
Find roles in Virginia that match your experience and apply in just a few clicks.
Find Cybersecurity Engineer JobsCybersecurity Engineer Jobs by City in Virginia
Where Virginia roles are concentrated, by current openings.
Cybersecurity Engineer Job Market in Virginia
A snapshot from current Virginia openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Consulting & Professional Services
- Trucking
- Technology & Software
What Virginia Employers Look For
The qualifications that appear most often in cybersecurity engineer jobs across Virginia.
- Active security clearance, typically Secret or Top Secret with SCI eligibility
- Bachelor's degree in cybersecurity, computer science, or a closely related field
- Relevant certification such as CISSP, Security+, CEH, or CISM
- Hands-on experience with SIEM platforms, firewalls, and intrusion detection systems
- Familiarity with NIST, CMMC, or RMF compliance frameworks used in federal contracting
- Proficiency in scripting or automation using Python, PowerShell, or Bash
Cybersecurity Engineer Jobs in Virginia: Frequently Asked Questions
How do you become a cybersecurity engineer in Virginia?
Virginia does not require a state-issued license specifically for cybersecurity engineers, so the path runs through education and professional certification. Most employers expect at least a bachelor's degree in cybersecurity, computer science, or information systems. Industry certifications such as CompTIA Security+, CISSP, or CEH carry significant weight and are often listed as requirements in Virginia postings. Because so much of the Virginia market is tied to federal contracts, obtaining a security clearance early gives candidates a measurable competitive edge.
How much do cybersecurity engineers make in Virginia?
Cybersecurity engineers in Virginia earn a median of about $134,900 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $81,410 for the lowest 10% to over $205,750 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire cybersecurity engineers in Virginia?
Employers hiring cybersecurity engineers in Virginia right now include MITRE, Booz Allen Hamilton, and SAIC, based on current listings on Migrate Mate as of November 2026. Virginia's dense concentration of defense contractors, federal agencies, and financial institutions means hiring tends to be sustained year-round rather than seasonal.
Which Virginia cities have the most cybersecurity engineer jobs?
McLean, Chantilly, and Arlington have the most cybersecurity engineer openings in Virginia. Northern Virginia dominates because it sits at the center of federal agency headquarters and the defense contractor ecosystem, while Richmond draws demand from financial services firms and state government IT, and Virginia Beach reflects the region's large military and naval installations that require cleared security professionals.
Are there remote cybersecurity engineer jobs in Virginia?
Yes, and more than many technical roles, since much of the analytical, monitoring, and architecture work can be done off-site. About 32% of cybersecurity engineer openings tied to Virginia are remote or hybrid as of November 2026, though roles requiring active clearances or access to classified systems typically mandate on-site presence. Cloud security and threat intelligence positions are the most likely to carry full remote options.
How can I get hired as a cybersecurity engineer in Virginia with little or no experience?
The most realistic entry path is a cybersecurity analyst or SOC analyst role, which large Virginia defense contractors such as Leidos, ManTech, and SAIC regularly recruit for at the entry level, including candidates who are new graduates. Pursuing CompTIA Security+ before applying is a concrete credential that satisfies baseline requirements at many of these employers. Lateral moves from IT support, systems administration, or network operations are common and recognized. Community college programs through Northern Virginia Community College and other regional institutions also offer accelerated pathways that Virginia employers accept.
Where can I find and apply to cybersecurity engineer jobs in Virginia?
You can find and apply to cybersecurity engineer jobs in Virginia on Migrate Mate, which lists current Virginia openings updated regularly. Find roles that match your experience and specialty, then apply directly to the employer through each listing.
See All 85 Cybersecurity Engineer Jobs in Virginia
Find roles in Virginia that match your experience and apply in just a few clicks.
Find Cybersecurity Engineer Jobs