Security Engineer

Virginia Information Technologies Agency•Richmond, VA

7d•$88,507•Onsite

About The Position

Are you looking for the opportunity to naturally dig deeper, question what others miss, and solve complex security problems before they become real threats? At the Virginia Workers’ Compensation Commission, you’ll join a collaborative cybersecurity team where your work directly supports and protects critical systems serving the Commonwealth of Virginia. If you stay curious about evolving cyber risks, enjoy working hands-on with security tools and systems, and take pride in building secure, resilient environments that people can depend on, this could be the position for you. This role is ideal for someone who thrives in both technical problem-solving and continuous improvement and someone who enjoys balancing engineering, security operations, threat analysis, and strategic security initiatives in a mission-driven environment. The Virginia Workers’ Compensation Commission (VWC), an independent state agency, is seeking an Information Security Engineer to help strengthen and evolve cybersecurity operations across the agency. This is an exciting opportunity for a security professional who enjoys hands-on engineering, problem-solving, threat defense, and working across a broad range of modern security technologies in a collaborative, mission-driven environment. In this role, you will partner closely with the Information Security Officer (ISO), Security Analyst, and IS/IT teams to support and improve the Commission’s Information Security Program. You’ll play a key role in securing systems and data that support Virginia’s workforce while contributing to initiatives focused on security engineering, threat monitoring, vulnerability management, incident response, governance, and continuous improvement. This position is ideal for someone who enjoys balancing technical depth with strategic thinking, thrives in a collaborative environment, and wants to make a meaningful impact through public service while maintaining strong work-life balance and flexibility.

Requirements

Experience in information security, network engineering, systems administration, security operations, or a related technical field.
Working knowledge of enterprise security technologies such as SIEM, EDR, IAM/PAM, vulnerability management, IDS/IPS, and system monitoring tools.
Experience with scripting or automation using tools such as Python, PowerShell, or Bash.
Knowledge of cybersecurity principles, threat detection, incident response, and security best practices.
Knowledge of and network/security concepts including TCP/IP protocols.
Familiarity with security frameworks and standards such as NIST 800-53 and Commonwealth of Virginia SEC501/SEC530 standards.
Strong analytical, troubleshooting, and problem-solving skills.
Ability to communicate effectively both verbally and in writing.
Knowledge of cloud computing.
Knowledge of Artificial Intelligence (AI) integration.

Nice To Haves

Splunk management experience
physical routers
firewall configurations
Microsoft Purview administration
other network infrastructure
Cloud security controls (AWS, Azure, GCP)
experience in managing and configuring Microsoft Entra ID security features.

Responsibilities

Configure, maintain, tune, and optimize enterprise security technologies including SIEM, EDR, vulnerability management, IAM/PAM, DLP, and monitoring platforms.
Design, implement, and support security tools and controls that align with Commonwealth security standards and industry best practices.
Monitor system and network activity to identify threats, suspicious behavior, vulnerabilities, and security risks.
Support threat detection and incident response efforts through alert tuning, threat intelligence integration, analysis, and remediation activities.
Automate security tasks and operational processes using scripting languages such as Python, PowerShell, or Bash.
Research, recommend, and implement security technologies and solutions that improve operational security and efficiency.
Perform vulnerability and configuration assessments across systems, infrastructure, and security platforms.
Assist with governance, compliance, risk management, incident response planning, and third-party security oversight activities.
Maintain documentation related to systems, security configurations, operational procedures, and security processes.
Collaborate with internal business units and external partners to support secure, resilient agency operations.