Cybersecurity Jobs in Virginia
Cybersecurity jobs in Virginia rank among the most active in the country, concentrated in defense contracting, federal civilian agencies, and financial services, with openings at every level from entry-level analyst to senior architect. The heaviest hiring is in the Northern Virginia corridor, Richmond, and Hampton Roads, where employers like Booz Allen Hamilton, Leidos, and Northrop Grumman maintain major operations. The most in-demand specialties include cloud security, penetration testing, and security operations center analysis. Find a role that fits below and apply directly.
Find Cybersecurity JobsOverview
Showing 5 of 234+ Cybersecurity jobs
Cyber Defense
Cybersecurity Operations
Information Assurance
Information Systems
Network Defense
REQ#: RQ231346
Public Trust: None
Requisition Type: Regular
Your Impact
Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.
Job Description
Meaningful Work and Personal Impact:Security & Systems Engineering for DEOS Azure Environments
- Design, document, and maintain secure architectures for DEOS services hosted in Azure and related environments (e.g., NSGs, Azure VMs supporting M365, management, monitoring, or integration services).
- Build, configure, and administer Azure Virtual Machines supporting DEOS, including OS hardening (e.g., DISA STIGs/SRGs), patching, baseline configuration, and performance tuning.
- Develop, maintain, and operate Azure Automation Runbooks to support secure operations and compliance (e.g., automated patching, configuration enforcement, log collection, backup/restore, and response actions).
- Provide consultative technical guidance to DEOS engineering and operations teams on secure design patterns, Zero Trust principles, identity and access management, and boundary protections.
- Support DISA/DoW Risk Management Framework (RMF) activities for DEOS systems, ensuring security requirements are engineered into designs and implementations from the outset.
- Contribute to and maintain RMF/ATO artifacts (SSP, SAR, POA&M, diagrams, implementation statements) specific to DEOS Azure‑hosted components.
- Map and implement DISA STIGs, DoD Cloud Computing SRG, and relevant eMASS controls across Azure VMs and associated services.
- Identify, document, and communicate security risks or compliance gaps to DEOS leadership and customer stakeholders, recommending practical mitigations.
- Coordinate incident response for security and operational incidents impacting DEOS and the Cybersecurity Threat Hunt team.
- Participate in incident triage, technical analysis, and root‑cause investigations.
- Direct technical containment, eradication, and recovery activities (e.g., isolate or revoke credentials), in coordination with the DEOS incident manager and DISA stakeholders.
- Capture lessons learned and drive assist in updates to runbooks, playbooks, detection rules, and hardening baselines to reduce recurrence.
- Engage with GDIT, DEOS and DISA security, engineering, and operations counterparts to clarify requirements, constraints, and risk posture for DEOS services.
- Provide consultancy‑style briefings and technical input to change boards, engineering reviews, and security forums on proposed changes, risks, and mitigations.
- Support responses to DISA/DoW data calls, audits, inspections, and technical reviews related to DEOS cybersecurity and system integrity.
- Develop and maintain technical documentation for DEOS Azure components, including architecture diagrams, configuration baselines, runbook catalogs, incident response playbooks, and RMF artifacts.
- Ensure activities align with GDIT Security Standard Practices, DEOS‑specific governance processes, and applicable ISO 27001 / information security management expectations.
- Identify opportunities to improve automation, monitoring, and repeatable processes that enhance DEOS security, reliability, and operational efficiency.
- Experience as a security engineer or systems engineer supporting DoW or DISA programs, including hands‑on work with production systems.
- Demonstrated Azure experience, including: Deploying and managing Azure Virtual Machines, Implementing secure configurations, patching, and monitoring, and Developing or operating Azure Automation Runbooks.
- Experience working within RMF/ATO processes (DoW RMF, DoD CC SRG, DISA STIGs, Vulnerability scanning) and producing/maintaining associated documentation.
- Experience participating in or coordinating incident response for complex systems (triage, containment, eradication, recovery, lessons learned).
- Strong consultative communication skills with the ability to explain complex security and system engineering topics to both technical and non‑technical stakeholders.
- DoW 8570/8140 baseline certification at the appropriate level (e.g., CISM, CASP+, CISSP, or equivalent).
- Microsoft Azure certifications (e.g., AZ‑104, AZ‑500, AZ‑700) and/or Microsoft 365 security/collaboration experience relevant to DEOS.
- Prior experience on DISA or enterprise DoW collaboration/cloud programs.
- Experience working with large, distributed operations teams and SOCs in a 24x7 mission environment.
At GDIT, the mission is our purpose, and our people are at the center of everything we do.
- Growth: AI-powered career tool that identifies career steps and learning opportunities.
- Support: An internal mobility team focused on helping you achieve your career goals.
- Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off.
- Community: Award-winning culture of innovation and a military-friendly workplace.
- Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.
Work Requirements
6 + years of related experience
- may vary based on technical training, certification(s), or degree
Less than 10%
U.S. Citizenship Required
Salary and Benefit Information
The likely salary range for this position is $127,500 - $172,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Our Identity Verification Process
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.
About Our Work
We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
Cyber Defense
Cybersecurity Operations
Information Assurance
Information Systems
Network Defense
REQ#: RQ231346
Public Trust: None
Requisition Type: Regular
Your Impact
Own your opportunity to support our nation's defense. Make an impact by connecting and securing critical operations across the globe, keeping our country safe and secure.
Job Description
Meaningful Work and Personal Impact:Security & Systems Engineering for DEOS Azure Environments
- Design, document, and maintain secure architectures for DEOS services hosted in Azure and related environments (e.g., NSGs, Azure VMs supporting M365, management, monitoring, or integration services).
- Build, configure, and administer Azure Virtual Machines supporting DEOS, including OS hardening (e.g., DISA STIGs/SRGs), patching, baseline configuration, and performance tuning.
- Develop, maintain, and operate Azure Automation Runbooks to support secure operations and compliance (e.g., automated patching, configuration enforcement, log collection, backup/restore, and response actions).
- Provide consultative technical guidance to DEOS engineering and operations teams on secure design patterns, Zero Trust principles, identity and access management, and boundary protections.
- Support DISA/DoW Risk Management Framework (RMF) activities for DEOS systems, ensuring security requirements are engineered into designs and implementations from the outset.
- Contribute to and maintain RMF/ATO artifacts (SSP, SAR, POA&M, diagrams, implementation statements) specific to DEOS Azure‑hosted components.
- Map and implement DISA STIGs, DoD Cloud Computing SRG, and relevant eMASS controls across Azure VMs and associated services.
- Identify, document, and communicate security risks or compliance gaps to DEOS leadership and customer stakeholders, recommending practical mitigations.
- Coordinate incident response for security and operational incidents impacting DEOS and the Cybersecurity Threat Hunt team.
- Participate in incident triage, technical analysis, and root‑cause investigations.
- Direct technical containment, eradication, and recovery activities (e.g., isolate or revoke credentials), in coordination with the DEOS incident manager and DISA stakeholders.
- Capture lessons learned and drive assist in updates to runbooks, playbooks, detection rules, and hardening baselines to reduce recurrence.
- Engage with GDIT, DEOS and DISA security, engineering, and operations counterparts to clarify requirements, constraints, and risk posture for DEOS services.
- Provide consultancy‑style briefings and technical input to change boards, engineering reviews, and security forums on proposed changes, risks, and mitigations.
- Support responses to DISA/DoW data calls, audits, inspections, and technical reviews related to DEOS cybersecurity and system integrity.
- Develop and maintain technical documentation for DEOS Azure components, including architecture diagrams, configuration baselines, runbook catalogs, incident response playbooks, and RMF artifacts.
- Ensure activities align with GDIT Security Standard Practices, DEOS‑specific governance processes, and applicable ISO 27001 / information security management expectations.
- Identify opportunities to improve automation, monitoring, and repeatable processes that enhance DEOS security, reliability, and operational efficiency.
- Experience as a security engineer or systems engineer supporting DoW or DISA programs, including hands‑on work with production systems.
- Demonstrated Azure experience, including: Deploying and managing Azure Virtual Machines, Implementing secure configurations, patching, and monitoring, and Developing or operating Azure Automation Runbooks.
- Experience working within RMF/ATO processes (DoW RMF, DoD CC SRG, DISA STIGs, Vulnerability scanning) and producing/maintaining associated documentation.
- Experience participating in or coordinating incident response for complex systems (triage, containment, eradication, recovery, lessons learned).
- Strong consultative communication skills with the ability to explain complex security and system engineering topics to both technical and non‑technical stakeholders.
- DoW 8570/8140 baseline certification at the appropriate level (e.g., CISM, CASP+, CISSP, or equivalent).
- Microsoft Azure certifications (e.g., AZ‑104, AZ‑500, AZ‑700) and/or Microsoft 365 security/collaboration experience relevant to DEOS.
- Prior experience on DISA or enterprise DoW collaboration/cloud programs.
- Experience working with large, distributed operations teams and SOCs in a 24x7 mission environment.
At GDIT, the mission is our purpose, and our people are at the center of everything we do.
- Growth: AI-powered career tool that identifies career steps and learning opportunities.
- Support: An internal mobility team focused on helping you achieve your career goals.
- Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off.
- Community: Award-winning culture of innovation and a military-friendly workplace.
- Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.
Work Requirements
6 + years of related experience
- may vary based on technical training, certification(s), or degree
Less than 10%
U.S. Citizenship Required
Salary and Benefit Information
The likely salary range for this position is $127,500 - $172,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Our Identity Verification Process
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.
About Our Work
We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
See All 234+ Cybersecurity Jobs in Virginia
Find roles in Virginia that match your experience and apply in just a few clicks.
Find Cybersecurity JobsCybersecurity Jobs by City in Virginia
Where Virginia roles are concentrated, by current openings.
Cybersecurity Job Market in Virginia
A snapshot from current Virginia openings, updated as new roles post.
Who's Hiring
- Booz Allen Hamilton18
- Invictus International Consulting8
- MITRE6
- Saalex6
- Lafayette5
Top Industries Hiring
- Consulting & Professional Services
- Trucking
- Technology & Software
What Virginia Employers Look For
The qualifications that appear most often in cybersecurity jobs across Virginia.
- Active DoD security clearance, at minimum Secret level, commonly required
- Industry certification such as CISSP, Security+, or CEH strongly preferred
- Experience with NIST, CMMC, or FedRAMP compliance frameworks
- Hands-on proficiency with SIEM tools such as Splunk or Microsoft Sentinel
- Bachelor's degree in cybersecurity, computer science, or a related technical field
- Familiarity with cloud security platforms including AWS, Azure, or Google Cloud
Cybersecurity Jobs in Virginia: Frequently Asked Questions
How do you become a cybersecurity professional in Virginia?
Virginia does not require a state-issued license to work in cybersecurity, so the path runs through education and industry credentials. Most employers in the state expect at least a bachelor's degree in cybersecurity, information technology, or computer science. Certifications like CompTIA Security+, CISSP, or CEH carry significant weight with Virginia hiring managers, particularly those in the defense and federal contracting sectors. Many roles also require the ability to obtain a federal security clearance.
How much do cybersecurities make in Virginia?
Cybersecurities in Virginia earn a median of about $134,900 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $81,410 for the lowest 10% to over $205,750 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire cybersecurity professionals in Virginia?
Employers hiring cybersecurity professionals in Virginia right now include Booz Allen Hamilton, Invictus International Consulting, and MITRE, based on current listings on Migrate Mate as of November 2026. Virginia's dense concentration of defense contractors and federal agency support firms means the market is especially deep for cleared and compliance-focused cybersecurity roles.
Which Virginia cities have the most cybersecurity jobs?
McLean, Arlington, and Chantilly have the most cybersecurity openings in Virginia right now. Northern Virginia dominates the market because of its proximity to the Pentagon, NSA, and dozens of federal agencies, while Richmond draws demand from state government and financial institutions and Hampton Roads benefits from large Navy and defense contractor footprints.
Are there remote cybersecurity jobs in Virginia?
Yes, and more than most technical fields. About 52% of cybersecurity openings tied to Virginia are remote or hybrid as of November 2026, reflecting how much of the work involves monitoring systems, analyzing data, and writing policy rather than on-site equipment access. Roles in governance, risk, and compliance tend to be the most consistently remote, while positions requiring access to classified networks or physical infrastructure typically require on-site presence.
How can I get hired as a cybersecurity professional in Virginia with little or no experience?
The most realistic entry path is through a help desk or IT support role, which many large Virginia defense contractors and federal agencies use as a pipeline into security teams. Employers like Leidos and Booz Allen Hamilton run early-career programs and associate analyst tracks that explicitly target candidates without prior security experience. Earning a CompTIA Security+ before applying gives candidates a measurable edge, and Virginia community colleges offer accelerated cybersecurity certificate programs that align with those exams.
Where can I find and apply to cybersecurity jobs in Virginia?
You can find and apply to cybersecurity jobs in Virginia on Migrate Mate, which lists current Virginia openings across the state's major hiring markets. Find roles that fit your experience and apply directly to the employers posting them.
See All 234+ Cybersecurity Jobs in Virginia
Find roles in Virginia that match your experience and apply in just a few clicks.
Find Cybersecurity Jobs