Information Security Engineer II

Virginia Information Technologies Agency • Chesterfield, VA

7d • $135,000 - $150,000 • Onsite

About The Position

Commonwealth Savers is seeking an Information Security Engineer II to join its Security Engineering & Architecture Team. The role helps build and implement security solutions that protect critical systems, data, and services while strengthening the agency’s security posture. The engineer will contribute to initiatives involving cloud security, automation, artificial intelligence, and DevSecOps, and will help advance the organization’s cybersecurity program.

Requirements

• A degree, technical certification, or equivalent experience in cybersecurity, information technology, computer science, or a related field.
• At least 5 years of experience in secure network and system configuration, security architecture, risk management, and/or security operations.
• Extensive hands-on experience designing and implementing security controls, leading complex threat-response efforts, and mentoring others in advanced security practices.
• Knowledge of system, application, and network vulnerabilities and associated countermeasures.
• Knowledge of current network technologies, architectures, protocols, and standards; encryption; and security products and tools.
• Knowledge of current information security trends and technologies, including artificial intelligence.
• Excellent oral and written communication skills.
• Strong project management and documentation skills.
• Ability to work independently, adjust to shifting priorities, and meet critical deadlines.
• Strong problem-solving skills and attention to detail.
• Ability to facilitate cooperation among staff, vendors, and other partners.
• Analytical ability to evaluate processes, procedures, and data and make recommendations.
• Ability to write automation code, manage code with version control, and collaborate using GitHub.
• Occasional travel is required.

Nice To Haves

• Relevant industry certifications such as Security+, Network+, GIAC, or CISSP.
• Vendor security certifications such as AWS Certified Security.

Responsibilities

• Design, implement, and manage enterprise security solutions and controls.
• Investigate and respond to security incidents, threats, and vulnerabilities.
• Deploy and enhance SIEM, SOAR, EDR, DLP, and cloud security technologies.
• Collaborate with IT and development teams to integrate security throughout the system lifecycle.
• Advance automation, AI-driven security capabilities, and DevSecOps practices.
• Research emerging threats and recommend innovative solutions to improve security and resilience.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed