Hybrid InfoSec Engineer – SDLC & App Security (Richmond)

Cybersecurity Jobs; Richmond (VA); Hybrid; USD 95,000 - 120,000; Full time

Benefits offered by this job

Job stability

Flexible schedule

Hybrid work

Health benefits

PSLF program

Job summary

Virginia Tax in Richmond, VA is hiring for a hybrid security role focused on protecting applications across the Software Development Life Cycle. The job offers flexibility with up to two days of telework and a schedule of three days in the office.

You will guide engineering teams on secure development, review architectures, and manage vulnerability remediation using SAST/DAST/IAST tools, WAFs, and AWS security services, while complying with NIST and PCI-DSS standards.

Qualifications

• Experience providing information security guidance and training.
• Knowledge of application development and security architecture.
• Knowledge of secure coding standards and guidelines and ability to identify security flaws in source code.
• Knowledge of vulnerability remediation and patch management for applications.

Responsibilities

• Protect confidentiality, integrity, and availability of Virginia Tax information technology resources.
• Champion security across the Software Development Life Cycle for application security.
• Act as a connection point between application and engineering teams and the broader joint security operations teams.
• Proactively document, identify, assess, and help mitigate vulnerabilities before they can be exploited, ensuring applications and environments are built and maintained with strong security controls.
• Review system architectures.
• Develop and maintain system security plans.
• Guide teams on secure development practices and support a security-first culture through influence on engineering practices.
• Ensure adherence to security policies and standards and empower application teams to design, deliver, and operate secure applications and environments.

Skills

Application development

Security architecture

Vulnerability remediation

SAST/DAST/IAST

Web Application Firewalls

AWS Security Groups

SIEM

NIST 800-53

IRS Pub 1075

PCI-DSS

MITRE ATT&CK

Tools

Accunetix

Veracode

Jenkins

Splunk

Rapid7

Tenable

Job description

Virginia Tax in Richmond, VA is hiring for a hybrid security role focused on protecting applications across the Software Development Life Cycle. The job offers flexibility with up to two days of telework and a schedule of three days in the office.

You will guide engineering teams on secure development, review architectures, and manage vulnerability remediation using SAST/DAST/IAST tools, WAFs, and AWS security services, while complying with NIST and PCI-DSS standards.