Security Engineer

Job no:
Work type: Full-Time (Salaried)
Location: Richmond (City), Virginia
Categories: Administrative Services

Title: Security Engineer

State Role Title: Salary Non-Specified

Hiring Range: $88,507- $132,760 (pay grade 9 based on a 14 grade pay structure)

Pay Band: UG

Agency: VA Workers' Compensation Comm

Location: RICHMOND HEADQUARTERS

Agency Website: https://workcomp.virginia.gov/

Recruitment Type: General Public - G

This position is being reposted. Previous applicants will need to reapply.

The Virginia Workers' Compensation Commission (VWC) is seeking an Information Security Engineer to help strengthen and evolve cybersecurity operations across the agency. This is an excellent opportunity for an information security professional who enjoys hands-on engineering, solving complex technical challenges, defending enterprise systems, and working with a broad range of modern security technologies in a collaborative, mission-driven environment.
Working closely with the Information Security Officer (ISO), Security Analyst, and Information Systems teams, you'll play an important role in protecting the Commission's technology environment while helping support the systems and services that benefit Virginia's workforce.
If you enjoy balancing technical problem-solving with continuous learning, collaborating with others, and making a meaningful impact through public service, we encourage you to apply.

What You'll Do

As an Information Security Engineer, you'll assist in the implementation, administration, monitoring, and continuous improvement of the Commission's Information Security Program by:

• Configuring, maintaining, tuning, and optimizing enterprise security technologies, including but not limited to Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Privileged Access Management (PAM), Data Loss Prevention (DLP), vulnerability management, and security monitoring platforms.
• Monitoring security events, analyzing threats and trends, troubleshooting security technologies, and supporting incident investigations and response activities.
• Assisting with vulnerability assessments, security configuration reviews, and remediation efforts to help ensure compliance with Commission and Commonwealth security standards.
• Supporting the Commission's information security governance and compliance program by assisting with Business Impact Analyses (BIA), Risk Assessments, System Security Plans, Incident Response Planning, Continuity of Operations Planning (COOP), and security policies and procedures.
• Assisting with oversight of third-party service providers to help ensure compliance with Commission and Commonwealth information security requirements.
• Collaborating with Information Systems staff and business partners to implement secure technology solutions and strengthen the Commission's overall cybersecurity posture.
• Supporting ongoing security improvements through documentation, process enhancement, and implementation of cybersecurity best practices.

Why Join Virginia Workers' Compensation Commission?

At VWC, you'll have the opportunity to build a rewarding career while helping protect the technology and information that supports Virginia's workers and employers. We foster a collaborative work environment where innovation, continuous improvement, and professional development are encouraged.

In addition to meaningful public service, employees enjoy:

• Competitive salary and comprehensive state benefits
• Virginia Retirement System (VRS) participation
• Generous paid leave and holiday schedule
• Professional development and training opportunities
• Flexible work arrangements, subject to operational needs and Commission policy
• A collaborative team dedicated to delivering exceptional public service

VWC Compensation Structure

Virginia Workers' Compensation Commission is an independent agency which allows us to have a more competitive and unique pay structure. This position is a pay grade 10 based on a 14 grade pay structure. Our positions are not classified under DHRM's pay bands.

Telework Structure

• Our agency is currently using a hybrid model for teleworking.
• Our positions currently are not 100% teleworking. However, we do have a liberal telework policy in place and all candidates would be expected to report to our Headquarters as requested.
• Telework is not guaranteed and is subject to the operational needs of the Commission. Upon hire, candidates should expect to have all training and orientation conducted at the Headquarters Office, or as required.
• Selected candidates who reside outside of Virginia will need to receive Commission approval prior to an offer being finalized.

Work Location Structure

• This position's central workplace is the Virginia Workers' Compensation Commission's Richmond Headquarters.
• Employees must be able to report to the Richmond office as required by operational needs.
• Candidates who currently reside outside of Virginia will need Commission approval of their work location prior to an offer being finalized.

Minimum Qualifications

• Experience supporting enterprise information security, cybersecurity, systems administration, or related technology environments.
• Working knowledge of information security principles, risk management, and cybersecurity best practices.
• Experience with one or more enterprise security technologies such as SIEM, EDR, IAM, vulnerability management, endpoint protection, network security, or cloud security solutions.
• Experience analyzing security events, troubleshooting technical issues, and assisting with incident response activities.
• Knowledge of information security frameworks, standards, or regulatory requirements.
• Strong analytical, problem-solving, and organizational skills.
• Excellent written and verbal communication skills with the ability to explain technical concepts to both technical and non-technical audiences.
• Ability to work independently while collaborating effectively within a team environment.

Additional Considerations

Experience and/or working knowledge of the following are preferred:

• Microsoft security technologies, including Microsoft Defender, Microsoft Entra ID, Microsoft Purview, or Microsoft Sentinel.
• CrowdStrike Falcon or similar endpoint detection and response platforms.
• Splunk or other SIEM platforms.
• Identity and Access Management (IAM) and Privileged Access Management (PAM).
• Vulnerability management and security assessment tools.
• Security governance, risk management, compliance, or audit support.
• Scripting or automation using PowerShell, Python, or similar languages.
• Experience supporting state government or other regulated environments.
• Industry certifications such as Security+, CySA+, CISSP, GIAC, Microsoft Security certifications, or equivalent.
• Commonwealth of Virginia experience preferred.

Special Instructions

You will be provided a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to "Your Application" in your account to check the status of your application for this position.

Contact Information

Name: Amy Habel

Phone: 804-205-3571

Email: [email protected]

Note: Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.

Advertised: 22 Jul 2026 Eastern Daylight Time
Applications close: 03 Aug 2026 Eastern Daylight Time

Whatsapp Facebook LinkedIn Email App