> Markdown version of [/jobs/ext/1424519-security-engineer](https://www.wearedevelopers.com/jobs/ext/1424519-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - **Company:** VA Workers' Compensation Comm - **Location:** Richmond, VA, United States (Remote available) - **Salary:** $88,507.0 - $132,760.0 - **Contract:** Permanent contract - **Skills:** Cloud Computing Security, Cyber Security, Information Systems, System Configuration, Information Leak Prevention, Identity and Access Management, Information Security Management, Python (Programming Language), Network Security, Microsoft Security Essentials, Windows PowerShell, Azure Active Directory, Security Information and Event Management, Software Vulnerability Management, Scripting, Microsoft Sentinel, Splunk, Vulnerability Analysis - **Published:** July 24, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=9a2589bbaa4b1bbc ## About the Role * Experience supporting enterprise information security, cybersecurity, systems administration, or related technology environments. * Working knowledge of information security principles, risk management, and cybersecurity best practices. * Experience with one or more enterprise security technologies such as SIEM, EDR, IAM, vulnerability management, endpoint protection, network security, or cloud security solutions. * Experience analyzing security events, troubleshooting technical issues, and assisting with incident response activities. * Knowledge of information security frameworks, standards, or regulatory requirements. * Strong analytical, problem-solving, and organizational skills. * Excellent written and verbal communication skills with the ability to explain technical concepts to both technical and non-technical audiences. * Ability to work independently while collaborating effectively within a team environment. Additional Considerations Experience and/or working knowledge of the following are preferred: * Microsoft security technologies, including Microsoft Defender, Microsoft Entra ID, Microsoft Purview, or Microsoft Sentinel. * CrowdStrike Falcon or similar endpoint detection and response platforms. * Splunk or other SIEM platforms. * Identity and Access Management (IAM) and Privileged Access Management (PAM). * Vulnerability management and security assessment tools. * Security governance, risk management, compliance, or audit support. * Scripting or automation using PowerShell, Python, or similar languages. * Experience supporting state government or other regulated environments. * Industry certifications such as Security+, CySA+, CISSP, GIAC, Microsoft Security certifications, or equivalent. * Commonwealth of Virginia experience preferred. ## Description Working closely with the Information Security Officer (ISO), Security Analyst, and Information Systems teams, you'll play an important role in protecting the Commission's technology environment while helping support the systems and services that benefit Virginia's workforce. If you enjoy balancing technical problem-solving with continuous learning, collaborating with others, and making a meaningful impact through public service, we encourage you to apply. What You'll Do As an Information Security Engineer, you'll assist in the implementation, administration, monitoring, and continuous improvement of the Commission's Information Security Program by: * Configuring, maintaining, tuning, and optimizing enterprise security technologies, including but not limited to Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Privileged Access Management (PAM), Data Loss Prevention (DLP), vulnerability management, and security monitoring platforms. * Monitoring security events, analyzing threats and trends, troubleshooting security technologies, and supporting incident investigations and response activities. * Assisting with vulnerability assessments, security configuration reviews, and remediation efforts to help ensure compliance with Commission and Commonwealth security standards. * Supporting the Commission's information security governance and compliance program by assisting with Business Impact Analyses (BIA), Risk Assessments, System Security Plans, Incident Response Planning, Continuity of Operations Planning (COOP), and security policies and procedures. * Assisting with oversight of third-party service providers to help ensure compliance with Commission and Commonwealth information security requirements. * Collaborating with Information Systems staff and business partners to implement secure technology solutions and strengthen the Commission's overall cybersecurity posture. * Supporting ongoing security improvements through documentation, process enhancement, and implementation of cybersecurity best practices., * Our positions currently are not 100% teleworking. However, we do have a liberal telework policy in place and all candidates would be expected to report to our Headquarters as requested. * Telework is not guaranteed and is subject to the operational needs of the Commission. Upon hire, candidates should expect to have all training and orientation conducted at the Headquarters Office, or as required. * Selected candidates who reside outside of Virginia will need to receive Commission approval prior to an offer being finalized. Work Location Structure * This position's central workplace is the Virginia Workers' Compensation Commission's Richmond Headquarters. * Employees must be able to report to the Richmond office as required by operational needs. * Candidates who currently reside outside of Virginia will need Commission approval of their work location prior to an offer being finalized. ## Related Videos - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)