IT Security Engineer Jobs in Virginia
IT Security Engineer jobs in Virginia are among the most active in the country, concentrated in defense contracting, federal civilian agencies, and financial services, with openings at every level from junior analysts to senior architects. The heaviest hiring is in Northern Virginia, Richmond, and the Hampton Roads region, where major employers like Booz Allen Hamilton, Leidos, and Northrop Grumman maintain deep IT security workforces. Cloud security, zero-trust architecture, and threat intelligence are the specialties drawing the most consistent demand. Find a role that fits below and apply directly.
Find IT Security Engineer JobsOverview
Showing 5 of 18+ IT Security Engineer jobs
Job Family:
IT Risk & Controls Consulting, Management Consulting
Travel Required:
Clearance Required:
What You Will Do:
Our Defense & Security IT Controls Consulting Analysts help our federal clients within Defense & Security optimize the reliability of their financial systems. Our new consultants will also build their professional and personal consulting skillsets while gaining a strong understanding of consulting.
This entry-level role will be responsible for technical delivery of efforts supporting Defense & Security clients with IT risk and controls assessments, remediation, and other related support. The clients are responsible for coordinating and monitoring internal controls for their organizations, including performing assessments in accordance with OMB Circular A-123 and assisting other program offices with remediation and other related internal controls tasks.
The IT Controls Consulting Analyst will have a role in working directly with clients and other organizational stakeholders to support IT internal control efforts, including assessments, remediation, and other ad-hoc efforts.
Day-to-day tasks include overseeing/performing some or all of the following:
- Performing rigorous assessments of IT controls using industry-standard guidance and leading practices
- Performing walkthrough interviews and maintaining communication with a variety of client stakeholders, including system personnel such as system and database administrators
- Requesting, obtaining, reviewing, and analyzing a variety of artifacts to assist in executing IT controls testing such as security plans, SOPs, system screenshots, and system configuration settings
- Evaluating the design and operating effectiveness of IT controls using provided artifacts, industry-standard guidance, leading practices, and professional judgement
- Professionally documenting the results of IT controls test work in a consistent and high-quality manner that would allow a reviewer to repeat the test and reach the same conclusion
- Summarizing and communicating IT controls assessment results to a variety of client stakeholders, including senior leadership personnel
- Planning and executing day-to-day activities of IT controls assessments individually and for the team
- Working with client personnel to understand and analyze known IT control weaknesses, identify root causes, and develop detailed, robust remediation plans
- Providing subject matter expertise to client personnel on all matters relating to IT controls and responding to ad-hoc IT controls requests from client personnel
In addition to client-facing responsibilities, this entry-level role will support important activities that contribute to the growth of our business, strengthen internal Guidehouse operations, and create a positive work environment for all Guidehouse employees. Some of these activities include but are not limited to:
- Assisting in business development activities, such as identifying potential client needs and ways Guidehouse can assist, developing proposals and white papers, participating in client and internal account meetings, and more
- Participating in Guidehouse’s programs for coaching and mentoring staff
- Assisting in the development of learning and development materials, courses, and presentations to help Guidehouse employees expand and strengthen their skills
- Supporting Guidehouse programs and initiatives for recruiting top talent to the company
What You Will Need:
- Minimum Years of Experience: 0 years
- Minimum Degree Status: Bachelor's degree (Must still be enrolled in an accredited undergraduate degree program through Fall 2026 and graduate by December 2026)
- Must be able to obtain and maintain a Public Trust, Secret, or higher level of federal/government security clearance. US Citizenship is required for security clearance.
What Would Be Nice To Have:
- Degrees and backgrounds preferred: Information Systems, Information Technology, Computer Information Systems, Business Information Technology, Computer Science, Accounting
- Knowledge of cybersecurity and privacy controls and regulations (e.g., NIST, FISMA, FISCAM, etc.)
- Familiarity with operating systems (e.g., Windows or UNIX), databases (e.g., Oracle, SQL) vulnerability management tools (e.g., Nessus), configuration management tools, and other tools that support a successful cyber security program for an organization
- Knowledge and understanding of project management principles and the phases of project management (Initiation, Planning, Execution, Monitoring, Closure)
- Experience working in teams to produce high-impact work products, reports, and other deliverables in a fast-paced environment
- Heightened attention to detail, and the ability to create and edit technical and non-technical written work products and graphical presentations
- Ability to view problems from multiple angles and apply a variety of solutions to solving them
- Ability to participate in client-facing discussions and meetings
- Ability to synthesize information quickly and learn new skills
- Desire to support public sector clients with a national security mission
- Passionate about reinvesting in the company you work for and representing the company’s brand
- Previous related Internship experience
-
Active US Security Clearance:
- SECRET
- TOP SECRET
- TOP SECRET/SCI
- TS/SCI CI Poly
- TS/SCI FS Poly
- Strong organizational and communication skills
- Interest in growing a career in consulting, preferably federal government consulting
- Strong oral and written communication skills
What We Offer:
Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.
Benefits include:
Medical, Rx, Dental & Vision Insurance
Personal and Family Sick Time & Company Paid Holidays
Position may be eligible for a discretionary variable incentive bonus
Parental Leave and Adoption Assistance
401(k) Retirement Plan
Basic Life & Supplemental Life
Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
Short-Term & Long-Term Disability
Student Loan PayDown
Tuition Reimbursement, Personal Development & Learning Opportunities
Skills Development & Certifications
Employee Referral Program
Corporate Sponsored Events & Community Outreach
Emergency Back-Up Childcare Program
Mobility Stipend
About Guidehouse
Guidehouse is an Equal Opportunity Employer–Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.
Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.
If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.
All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or guidehouse@myworkday.com. Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.
If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse’s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact recruiting@guidehouse.com. Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant’s dealings with unauthorized third parties.
Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.
Job Family:
IT Risk & Controls Consulting, Management Consulting
Travel Required:
Clearance Required:
What You Will Do:
Our Defense & Security IT Controls Consulting Analysts help our federal clients within Defense & Security optimize the reliability of their financial systems. Our new consultants will also build their professional and personal consulting skillsets while gaining a strong understanding of consulting.
This entry-level role will be responsible for technical delivery of efforts supporting Defense & Security clients with IT risk and controls assessments, remediation, and other related support. The clients are responsible for coordinating and monitoring internal controls for their organizations, including performing assessments in accordance with OMB Circular A-123 and assisting other program offices with remediation and other related internal controls tasks.
The IT Controls Consulting Analyst will have a role in working directly with clients and other organizational stakeholders to support IT internal control efforts, including assessments, remediation, and other ad-hoc efforts.
Day-to-day tasks include overseeing/performing some or all of the following:
- Performing rigorous assessments of IT controls using industry-standard guidance and leading practices
- Performing walkthrough interviews and maintaining communication with a variety of client stakeholders, including system personnel such as system and database administrators
- Requesting, obtaining, reviewing, and analyzing a variety of artifacts to assist in executing IT controls testing such as security plans, SOPs, system screenshots, and system configuration settings
- Evaluating the design and operating effectiveness of IT controls using provided artifacts, industry-standard guidance, leading practices, and professional judgement
- Professionally documenting the results of IT controls test work in a consistent and high-quality manner that would allow a reviewer to repeat the test and reach the same conclusion
- Summarizing and communicating IT controls assessment results to a variety of client stakeholders, including senior leadership personnel
- Planning and executing day-to-day activities of IT controls assessments individually and for the team
- Working with client personnel to understand and analyze known IT control weaknesses, identify root causes, and develop detailed, robust remediation plans
- Providing subject matter expertise to client personnel on all matters relating to IT controls and responding to ad-hoc IT controls requests from client personnel
In addition to client-facing responsibilities, this entry-level role will support important activities that contribute to the growth of our business, strengthen internal Guidehouse operations, and create a positive work environment for all Guidehouse employees. Some of these activities include but are not limited to:
- Assisting in business development activities, such as identifying potential client needs and ways Guidehouse can assist, developing proposals and white papers, participating in client and internal account meetings, and more
- Participating in Guidehouse’s programs for coaching and mentoring staff
- Assisting in the development of learning and development materials, courses, and presentations to help Guidehouse employees expand and strengthen their skills
- Supporting Guidehouse programs and initiatives for recruiting top talent to the company
What You Will Need:
- Minimum Years of Experience: 0 years
- Minimum Degree Status: Bachelor's degree (Must still be enrolled in an accredited undergraduate degree program through Fall 2026 and graduate by December 2026)
- Must be able to obtain and maintain a Public Trust, Secret, or higher level of federal/government security clearance. US Citizenship is required for security clearance.
What Would Be Nice To Have:
- Degrees and backgrounds preferred: Information Systems, Information Technology, Computer Information Systems, Business Information Technology, Computer Science, Accounting
- Knowledge of cybersecurity and privacy controls and regulations (e.g., NIST, FISMA, FISCAM, etc.)
- Familiarity with operating systems (e.g., Windows or UNIX), databases (e.g., Oracle, SQL) vulnerability management tools (e.g., Nessus), configuration management tools, and other tools that support a successful cyber security program for an organization
- Knowledge and understanding of project management principles and the phases of project management (Initiation, Planning, Execution, Monitoring, Closure)
- Experience working in teams to produce high-impact work products, reports, and other deliverables in a fast-paced environment
- Heightened attention to detail, and the ability to create and edit technical and non-technical written work products and graphical presentations
- Ability to view problems from multiple angles and apply a variety of solutions to solving them
- Ability to participate in client-facing discussions and meetings
- Ability to synthesize information quickly and learn new skills
- Desire to support public sector clients with a national security mission
- Passionate about reinvesting in the company you work for and representing the company’s brand
- Previous related Internship experience
-
Active US Security Clearance:
- SECRET
- TOP SECRET
- TOP SECRET/SCI
- TS/SCI CI Poly
- TS/SCI FS Poly
- Strong organizational and communication skills
- Interest in growing a career in consulting, preferably federal government consulting
- Strong oral and written communication skills
What We Offer:
Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.
Benefits include:
Medical, Rx, Dental & Vision Insurance
Personal and Family Sick Time & Company Paid Holidays
Position may be eligible for a discretionary variable incentive bonus
Parental Leave and Adoption Assistance
401(k) Retirement Plan
Basic Life & Supplemental Life
Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
Short-Term & Long-Term Disability
Student Loan PayDown
Tuition Reimbursement, Personal Development & Learning Opportunities
Skills Development & Certifications
Employee Referral Program
Corporate Sponsored Events & Community Outreach
Emergency Back-Up Childcare Program
Mobility Stipend
About Guidehouse
Guidehouse is an Equal Opportunity Employer–Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.
Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.
If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.
All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or guidehouse@myworkday.com. Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.
If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse’s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact recruiting@guidehouse.com. Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant’s dealings with unauthorized third parties.
Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.
See All 18 IT Security Engineer Jobs in Virginia
Find roles in Virginia that match your experience and apply in just a few clicks.
Find IT Security Engineer JobsIT Security Engineer Jobs by City in Virginia
Where Virginia roles are concentrated, by current openings.
IT Security Engineer Job Market in Virginia
A snapshot from current Virginia openings, updated as new roles post.
Who's Hiring
What Virginia Employers Look For
The qualifications that appear most often in IT security engineer jobs across Virginia.
- Active Security+ or CISSP certification required or preferred by most Virginia employers
- Bachelor's degree in cybersecurity, computer science, or a closely related technical field
- Experience with NIST frameworks, FedRAMP, or DoD STIG compliance standards
- Ability to obtain or hold a U.S. DoD security clearance, often Secret or Top Secret
- Hands-on experience with SIEM platforms, endpoint detection tools, or vulnerability management systems
- Familiarity with cloud security across AWS, Azure, or Google Cloud environments
IT Security Engineer Jobs in Virginia: Frequently Asked Questions
How do you become a it security engineer in Virginia?
Virginia does not require a state-issued license for IT security engineers, so the path runs through education and certifications recognized by hiring employers. Most Virginia employers expect a bachelor's degree in cybersecurity, information technology, or computer science alongside industry credentials like CompTIA Security+, CISSP, or CEH. Because Northern Virginia's market is heavily defense-oriented, pursuing a DoD security clearance early significantly strengthens a candidate's standing with the region's largest employers.
How much do IT security engineers make in Virginia?
IT security engineers in Virginia earn a median of about $134,900 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $81,410 for the lowest 10% to over $205,750 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire it security engineers in Virginia?
Employers hiring it security engineers in Virginia right now include Guidehouse, Apollo Technology Solutions, and Federal Reserve Bank of Richmond, based on current listings on Migrate Mate as of November 2026. Virginia's concentration of federal contractors and intelligence-community prime contractors makes it one of the most consistently active hiring markets in the country for this role.
Which Virginia cities have the most it security engineer jobs?
Richmond, McLean, and Suffolk have the most it security engineer openings in Virginia. Northern Virginia dominates because of its proximity to federal agencies, the Pentagon, and a dense cluster of defense and intelligence contractors, while Richmond draws demand from financial services firms and state government, and Hampton Roads benefits from significant Navy and military IT infrastructure.
Are there remote it security engineer jobs in Virginia?
Yes, and more than most technical fields. About 67% of it security engineer openings tied to Virginia are remote or hybrid as of November 2026, reflecting how much of the role centers on monitoring dashboards, configuring cloud tools, and policy work that travels well. Roles involving classified systems or on-site network infrastructure remain predominantly on-site, so clearance-required positions are far less likely to offer remote flexibility.
How can I get hired as a it security engineer in Virginia with little or no experience?
The most realistic entry path is through an IT helpdesk, systems administrator, or network technician role at a Virginia federal contractor, then moving into a junior security analyst position once you hold CompTIA Security+. Booz Allen Hamilton, SAIC, and Leidos all run early-career and new-graduate hiring programs in Northern Virginia that explicitly consider candidates without deep security experience. Building a home lab, earning the Google Cybersecurity Certificate, and applying for cleared intern programs at Virginia-based defense firms gives candidates a concrete edge.
Where can I find and apply to it security engineer jobs in Virginia?
You can find and apply to it security engineer jobs in Virginia on Migrate Mate, which lists current Virginia openings across Northern Virginia, Richmond, Hampton Roads, and beyond. Search the listings for roles that match your experience level and specialty, then apply directly to the ones that fit.
See All 18 IT Security Engineer Jobs in Virginia
Find roles in Virginia that match your experience and apply in just a few clicks.
Find IT Security Engineer Jobs