Security Analyst Jobs in Virginia
Security Analyst jobs in Virginia are among the most active in the country, concentrated in defense contracting, federal civilian agencies, and financial services, with openings at every level from entry-level SOC analyst through senior threat intelligence lead. The densest hiring is in Northern Virginia, Richmond, and the Hampton Roads area, where employers like Booz Allen Hamilton, Leidos, and Northrop Grumman maintain large and ongoing security workforces. The most in-demand specialties right now are cloud security, vulnerability management, and compliance-focused roles tied to federal frameworks like NIST and FedRAMP. Find a role that fits below and apply directly.
Find Security Analyst JobsOverview
Showing 5 of 104+ Security Analyst jobs
Purpose & Scope:
Member of a team that manages and monitors the safety of information systems assets and protects systems from intentional or inadvertent access or destruction. Has a specific focus on the Epic system. Coordinates security efforts between Epic application teams. Ensures that authorized users are able to successfully log in to Hyperspace with the appropriate security to complete their job in the system. Responds to, analyzes, and resolves Information Security issues, concerns, questions, incidents and events. Identifies and evaluates risks and threats. Makes resourceful, practical decisions and addresses unexpected problems. Conducts evaluations of current information security posture and recommends approaches to strengthen as appropriate.
Education:
Bachelor's degree in computer engineering, computer science, or information systems management or approved equivalent combination of education and experience. Three years of additional related experience may be substituted in lieu of educational requirement.
Experience:
- Minimum three years of experience in the information technology field, preferably concentrated in information security.
- Experience with and knowledge of UNIX operating systems desired and Microsoft operating systems required; risk and threat assessment process and practices; project planning and management; business continuity planning, documentation and evaluation
- Experience with vulnerability scanning tools (e.g., Qualys, Nessus, Nexpose, Saint)
- Experience with web application vulnerability scanning tools (e.g., IBM AppScan, HP Webinspect, Accunetix, NTO Spider, Burpsuite Pro)
- Experience with static analysis tools (e.g., IBM Appscan Source, HP Fortify)
- Experience with high level programming languages (e.g., Java, C, C++, .NET (C#, VB))
- Experience with web application development (e.g., ASP.NET, ASP, PHP, J2EE, JSP)
- Experience with Epic application security a plus
Certification/Licensure:
None.
Additional Job Description:
At VHC Health, every role contributes to exceptional care, better outcomes, and stronger communities.
In addition to your base compensation, VHC Health offers a comprehensive benefits package, including medical, dental, and vision coverage (subject to eligibility requirements), as well as additional wellness and retirement benefits designed to support our employees and their families.
VHC Health is committed to wage transparency and equitable pay practices. The compensation offered for this position—whether expressed as an annual salary or hourly rate—is determined based on a variety of legitimate, non-discriminatory factors. These factors include, but are not limited to, a candidate’s qualifications, relevant training and experience, skill level, shift differentials (where applicable), internal equity, and current market conditions.
The posted hiring range reflects the range VHC Health, in good faith, believes is appropriate for this role at the time of posting. This range may be adjusted in the future based on business needs or market changes. No portion of compensation is considered earned until it is vested and determined in accordance with the terms of applicable policies and benefit plans. The availability and amount of any bonuses, incentives, or other benefits are subject to the terms of those plans and may be modified at the sole discretion of VHC Health, in accordance with applicable law.
VHC Health is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to age, color, disability, gender identity or expression, marital status, national or ethnic origin, political affiliation, pregnancy (including childbirth, pregnancy-related conditions and lactation), race, religion, sex, sexual orientation, veteran status, genetic information, or any other characteristics protected by law.
VHC Health maintains a drug-free workplace. The unlawful manufacture, distribution, dispensing, possession, or use of a controlled substance is prohibited at all VHC Health locations.
Purpose & Scope:
Member of a team that manages and monitors the safety of information systems assets and protects systems from intentional or inadvertent access or destruction. Has a specific focus on the Epic system. Coordinates security efforts between Epic application teams. Ensures that authorized users are able to successfully log in to Hyperspace with the appropriate security to complete their job in the system. Responds to, analyzes, and resolves Information Security issues, concerns, questions, incidents and events. Identifies and evaluates risks and threats. Makes resourceful, practical decisions and addresses unexpected problems. Conducts evaluations of current information security posture and recommends approaches to strengthen as appropriate.
Education:
Bachelor's degree in computer engineering, computer science, or information systems management or approved equivalent combination of education and experience. Three years of additional related experience may be substituted in lieu of educational requirement.
Experience:
- Minimum three years of experience in the information technology field, preferably concentrated in information security.
- Experience with and knowledge of UNIX operating systems desired and Microsoft operating systems required; risk and threat assessment process and practices; project planning and management; business continuity planning, documentation and evaluation
- Experience with vulnerability scanning tools (e.g., Qualys, Nessus, Nexpose, Saint)
- Experience with web application vulnerability scanning tools (e.g., IBM AppScan, HP Webinspect, Accunetix, NTO Spider, Burpsuite Pro)
- Experience with static analysis tools (e.g., IBM Appscan Source, HP Fortify)
- Experience with high level programming languages (e.g., Java, C, C++, .NET (C#, VB))
- Experience with web application development (e.g., ASP.NET, ASP, PHP, J2EE, JSP)
- Experience with Epic application security a plus
Certification/Licensure:
None.
Additional Job Description:
At VHC Health, every role contributes to exceptional care, better outcomes, and stronger communities.
In addition to your base compensation, VHC Health offers a comprehensive benefits package, including medical, dental, and vision coverage (subject to eligibility requirements), as well as additional wellness and retirement benefits designed to support our employees and their families.
VHC Health is committed to wage transparency and equitable pay practices. The compensation offered for this position—whether expressed as an annual salary or hourly rate—is determined based on a variety of legitimate, non-discriminatory factors. These factors include, but are not limited to, a candidate’s qualifications, relevant training and experience, skill level, shift differentials (where applicable), internal equity, and current market conditions.
The posted hiring range reflects the range VHC Health, in good faith, believes is appropriate for this role at the time of posting. This range may be adjusted in the future based on business needs or market changes. No portion of compensation is considered earned until it is vested and determined in accordance with the terms of applicable policies and benefit plans. The availability and amount of any bonuses, incentives, or other benefits are subject to the terms of those plans and may be modified at the sole discretion of VHC Health, in accordance with applicable law.
VHC Health is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to age, color, disability, gender identity or expression, marital status, national or ethnic origin, political affiliation, pregnancy (including childbirth, pregnancy-related conditions and lactation), race, religion, sex, sexual orientation, veteran status, genetic information, or any other characteristics protected by law.
VHC Health maintains a drug-free workplace. The unlawful manufacture, distribution, dispensing, possession, or use of a controlled substance is prohibited at all VHC Health locations.
See All 104+ Security Analyst Jobs in Virginia
Find roles in Virginia that match your experience and apply in just a few clicks.
Find Security Analyst JobsSecurity Analyst Jobs by City in Virginia
Where Virginia roles are concentrated, by current openings.
Security Analyst Job Market in Virginia
A snapshot from current Virginia openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Telecommunications
- Consulting & Professional Services
What Virginia Employers Look For
The qualifications that appear most often in security analyst jobs across Virginia.
- Active CompTIA Security+, CISSP, or equivalent certification recognized by Virginia federal contractors
- Bachelor's degree in cybersecurity, information technology, computer science, or a related field
- Hands-on experience with SIEM tools such as Splunk, Microsoft Sentinel, or IBM QRadar
- Familiarity with NIST, FedRAMP, or CMMC compliance frameworks common in Virginia government contracts
- Ability to obtain or hold an active U.S. security clearance, often required by Northern Virginia employers
- Experience with network monitoring, intrusion detection systems, and incident response procedures
Security Analyst Jobs in Virginia: Frequently Asked Questions
How do you become a security analyst in Virginia?
Virginia does not require a state-issued license to work as a security analyst, so the path starts with a relevant bachelor's degree in cybersecurity or information technology combined with an industry certification like CompTIA Security+ or CISSP. Given the dominance of federal contracting in the Virginia market, obtaining or being eligible for a security clearance significantly strengthens your candidacy. Most employers in Northern Virginia and Richmond prioritize hands-on lab experience and certifications alongside formal education.
Which companies hire security analysts in Virginia?
Employers hiring security analysts in Virginia right now include Booz Allen Hamilton, SAIC, and Dominion Energy, based on current listings on Migrate Mate as of September 2026. Virginia's dense concentration of federal agencies and defense contractors means that many of the largest and most consistent security analyst employers operate out of the Northern Virginia corridor, with additional hiring activity in Richmond and Hampton Roads.
Which Virginia cities have the most security analyst jobs?
Arlington, Vienna, and Alexandria have the most security analyst openings in Virginia. Northern Virginia dominates because of its proximity to federal agencies, the Department of Defense, and the large defense contracting firms headquartered or regionally based there, while Richmond draws hiring from state government and financial institutions, and Hampton Roads supports significant military and defense-related cybersecurity demand.
Are there remote security analyst jobs in Virginia?
Yes, and more than most fields. About 34% of security analyst openings tied to Virginia are remote or hybrid as of September 2026, reflecting how desk-based and tool-driven the work is. Roles focused on cloud security monitoring, vulnerability scanning, and compliance documentation tend to be the most remote-friendly, while positions requiring access to classified networks or secure government facilities remain predominantly on-site.
How can I get hired as a security analyst in Virginia with little or no experience?
The most realistic entry path is starting as a SOC analyst tier one or IT help desk technician, roles that large Virginia federal contractors like Booz Allen Hamilton and Leidos regularly fill with candidates who hold a CompTIA Security+ certification but limited professional experience. Community colleges across Northern Virginia offer cybersecurity associate programs that feed directly into these entry roles. Building a home lab, earning a foundational certification, and targeting cleared-facility positions that include on-the-job training can accelerate the transition considerably.
Where can I find and apply to security analyst jobs in Virginia?
You can find and apply to security analyst jobs in Virginia on Migrate Mate, which lists current Virginia openings across Northern Virginia, Richmond, Hampton Roads, and the rest of the state. Find roles that fit your experience and credentials and apply directly to the ones that match.
See All 104+ Security Analyst Jobs in Virginia
Find roles in Virginia that match your experience and apply in just a few clicks.
Find Security Analyst Jobs