ZipRecruiter

Log In

1

Associate Information Security Engineer Jobs in Washington, DC

VTG

Information Systems Security Engineer

Herndon, VA · On-site

Overview VTG is seeking a highly skilled Information Systems Security Engineer (ISSE) to design, implement, and maintain security controls across enterprise systems and networks. This role ensures ...

VTG

Information Systems Security Engineer

Mclean, VA · On-site

Overview VTG is seeking a highly skilled Information Systems Security Engineer (ISSE) to design, implement, and maintain security controls across enterprise systems and networks. This role ensures ...

previous page

Showing results 41-60

All JobsAssociate Information Security Engineer JobsAssociate Information Security Engineer Jobs in Washington, DC

Associate Information Security Engineer information

See Washington, DC salary details

$41.3K

$93.8K

$183.4K

How much do associate information security engineer jobs pay per year?

As of Sep 4, 2026, the average yearly pay for associate information security engineer in Washington, DC is $93,764.00, according to ZipRecruiter salary data. Most workers in this role earn between $61,100.00 and $108,100.00 per year, depending on experience, location, and employer.

What does an associate information security engineer do?

An Associate Information Security Engineer supports the design, implementation, and maintenance of an organization’s information security systems. They assist in monitoring networks and systems for security breaches, help perform vulnerability assessments, and respond to security incidents. Their responsibilities often include configuring security tools, creating reports, and staying updated on the latest threats. This entry-level role is typically supervised by more experienced security engineers and provides foundational experience in cybersecurity practices.

What are the key skills and qualifications needed to thrive as an associate information security engineer?

To thrive as an Associate Information Security Engineer, you need a strong understanding of network security, vulnerability assessment, and cybersecurity principles, often backed by a degree in computer science or related field. Familiarity with security tools such as firewalls, intrusion detection/prevention systems, and certifications like CompTIA Security+ or CISSP are commonly expected. Strong analytical thinking, problem-solving abilities, and effective communication skills help you identify threats and collaborate with teams. These competencies are crucial for protecting organizational data and mitigating evolving cyber threats.

What are some common challenges faced by an associate information security engineer when starting in the field?

As an Associate Information Security Engineer, newcomers often face challenges such as quickly learning complex security tools, staying updated with evolving threats, and understanding how security integrates with broader IT operations. Collaborating with various teams—like IT, development, and compliance—can also require strong communication skills and adaptability. It's normal to feel overwhelmed initially, but with mentorship, hands-on experience, and continuous learning, you'll gain confidence and proficiency in protecting organizational assets.

What is the difference between Associate Information Security Engineer vs Security Analyst?

AspectAssociate Information Security EngineerSecurity Analyst
CertificationsCompTIA Security+, CISSP (entry-level), CEH (preferred)CompTIA Security+, CISSP (entry-level), CEH (preferred)
Work EnvironmentSupport security infrastructure, assist in implementing security measures, collaborate with engineering teamsMonitor security systems, analyze threats, respond to incidents
Employer & Industry UsageTech companies, financial institutions, government agenciesVarious industries including finance, healthcare, and tech

The Associate Information Security Engineer and Security Analyst roles share similar certifications and work environments, often collaborating within cybersecurity teams. While the engineer focuses on supporting security infrastructure and implementing measures, the analyst primarily monitors and responds to security threats. Both roles are essential in maintaining organizational security and are frequently searched together by professionals entering or advancing in cybersecurity careers.

Associate Information Security Engineer jobs near you
Infographic showing various Associate Information Security Engineer job openings in Washington, DC as of August 2026, with employment types broken down into 1% As Needed, 67% Full Time, 30% Part Time, and 2% Contract. Highlights an 88% Physical, 2% Hybrid, and 10% Remote job distribution, with an average salary of $93,799 per year, or $45.1 per hour.

Principal Information Security Engineer - Governance, Risk & Security Awareness

Ferguson Enterprises, LLC

Springfield, VA • On-site, Remote

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Re-posted 3 days ago

Ferguson Waterworks rating

9.3

Company rating: 9.3 out of 10

Based on 14 frontline employees who took The Breakroom Quiz

14th of 428 rated retail wholesalers

Job description

Job Posting:
Since 1953, Ferguson has been a source of quality supplies for a variety of industries. Together We Build Better infrastructure, better homes and better businesses. We exist to make our customers' complex projects simple, successful, and sustainable. We proactively solve problems, adapt and grow to continuously serve our customers, communities and each other. Ferguson, a Fortune 500 company, is proud to provide best-in-class products, service and capabilities across the following industries: Commercial/Mechanical, Facilities Supply, Fire and Fabrication, HVAC, Industrial, Residential Trade, Residential Building and Remodel, Waterworks and Residential Digital Commerce. Ferguson has approximately 36,000 associates across 1,700 locations. Ferguson is a community of proud associates who operate with the shared purpose of building something meaningful. You will build a career that you are proud of, at a company you can believe in.
Principal Information Security Engineer - Governance, Risk & Security Awareness
The Principal Information Security Engineer - Governance, Risk & Security Awareness is an experienced cybersecurity leader responsible for strengthening Ferguson's security posture through enterprise risk management, security governance, third-party risk oversight, and security awareness initiatives. This role serves as a trusted advisor across the organization, helping identify, assess, communicate, and reduce cybersecurity risks while advancing security maturity and risk management practices.
A primary focus of this role is leading Ferguson's phishing simulation and security awareness program, driving a proactive approach to human risk management. This includes developing and executing risk-informed phishing campaigns, measuring program effectiveness, analyzing user behavior trends, and implementing targeted awareness strategies that strengthen cybersecurity knowledge and behavior across the enterprise. The role also leads enterprise risk assessments, third-party security reviews, governance initiatives, and executive reporting that support informed decision-making and risk-based prioritization.
Partnering closely with peers across Information Security, Technology, Internal Audit, Procurement, Legal, HR, Communications, and business leadership, the Principal Information Security Engineer translates complex cybersecurity risks into actionable business insights and recommendations. The ideal candidate brings deep expertise in cybersecurity governance, enterprise risk management, security awareness, and threat mitigation, combined with strong communication, stakeholder influence, and program leadership skills.
Location: This role is approved to be fully remote and can be based anywhere in the continental United States.
Duties & Responsibilities:
  • Lead cybersecurity risk assessments and security maturity evaluations using industry frameworks, including NIST CSF, identifying control gaps, emerging risks, and opportunities to strengthen Ferguson's security posture.
  • Develop risk mitigation strategies, remediation plans, and governance recommendations, partnering with business and technology teams to drive sustainable risk reduction.
  • Support the development and continuous improvement of cybersecurity governance processes, security roadmaps, risk registers, and program performance metrics.
  • Coordinate and support internal and external audits, independent security assessments, regulatory reviews, and risk management initiatives.
  • Lead Ferguson's enterprise simulated phishing exercises and cybersecurity education program, developing risk-based campaigns and targeted training initiatives that improve employee awareness and cyber resilience.
  • Analyze phishing simulation results, reporting trends, and awareness metrics to identify risks, measure efficiency, and drive ongoing improvement of security culture.
  • Partner with business leaders, Human Resources, Corporate Communications, and Information Security teams to reduce phishing susceptibility and increase employee engagement in security procedures.
  • Conduct security assessments of vendors, suppliers, and technology partners as part of Ferguson's third-party risk management program.
  • Review security questionnaires, SOC reports, penetration test results, compliance certifications, and other security documentation to evaluate vendor risk.
  • Identify, assess, and communicate third-party security risks, providing recommendations to support informed business decisions and remediation efforts.
  • Collaborate with Procurement, Legal, and business customers to help ensure appropriate security requirements are incorporated into third-party engagements.
  • Develop and maintain cybersecurity dashboards, scorecards, important metrics, KRIs, and executive reporting that provide access to risk, compliance, and program performance.
  • Apply reporting and automation tools to improve the efficiency, effectiveness, and scalability of Governance, Risk, and Compliance (GRC) activities.
  • Translate technical risks into business-focused insights, helping leaders understand risk exposure, prioritize remediation efforts, and make informed decisions.
  • Serve as a trusted advisor on cybersecurity governance, risk management, and compliance matters, building strong partnerships across business and technology teams.
  • Communicate security risks, recommendations, and program outcomes effectively to both technical and non-technical audiences, including senior leadership.

Qualifications & Requirements:
  • Bachelor's degree in Information Security, Cybersecurity, Information Systems, Computer Science, Business Administration, or a related field; equivalent combination of education and experience will be considered.
  • 5+ years of experience in Information Security, Cybersecurity, IT Risk Management, IT Audit, Governance, Risk & Compliance (GRC), or related disciplines.
  • Experience conducting security risk assessments and evaluating security controls across on-premises, cloud, and third-party environments.
  • Solid understanding of cybersecurity governance, risk management, compliance frameworks, and third-party risk management practices.
  • Extensive knowledge of industry frameworks and standards, including NIST CSF, ISO 27001, COBIT, COSO, and IT General Controls (ITGCs).
  • Experience developing and maintaining security policies, standards, controls, and governance processes.
  • Experience supporting audits, regulatory compliance initiatives, risk assessments, and remediation activities.
  • Ability to identify, assess, prioritize, and communicate risk across applications, infrastructure, cloud services, and vendors.
  • Strong analytical, problem-solving, and critical thinking skills, with the ability to translate sophisticated risks into actionable recommendations.
  • Excellent written, verbal, presentation, and customer management skills, with experience presenting findings and recommendations to technical and business leaders.
  • Experience working with Microsoft technologies, cloud platforms, and security governance or reporting tools preferred.
  • Proven ability to lead complex initiatives, influence interested parties, and drive outcomes through multi-functional collaboration.

Preferred Certifications
  • CISSP, CISM, CRISC, CISA, and/or ISO 27001 Lead Auditor/Lead Implementer certification.

At Ferguson, we care for each other. We value our well-being just as much as our hard work. We are committed to a holistic approach towards benefits plans and programs that support the mental, physical and financial well-being of our associates. Our competitive offering not only includes benefits like health, dental, vision, paid time off, life insurance and a 401(k) with a company match, but our associates also enjoy additional meaningful and inclusive enhancements that are adaptable to their diverse situations and needs, including mental health coverage, gender affirming and family building benefits, paid parental leave, associate discounts, community involvement opportunities and more!
#LI-REMOTE
Pay Range:
Actual pay rate may vary depending upon location. The estimated pay range for this position is below. The specific rate will depend on a candidate's qualifications and prior experience.
$8,470.59 - $14,834.37
Estimated Ranges displayed are Monthly for Salaried roles OR Hourly for all other roles.
This role is Bonus or Incentive Plan eligible.
Ferguson complies with all wage regulations. The starting wage may be higher in certain locations based on local or state wage requirements.
The Company is an equal opportunity employer as well as a government contractor that shall abide by the requirements of 41 CFR 60-300.5(a), which prohibits discrimination against qualified protected Veterans and the requirements of 41 CFR 60-741.5(A), which prohibits discrimination against qualified individuals on the basis of disability.
Ferguson Enterprises, LLC. is an equal employment employer F/M/Disability/Vet/Sexual Orientation/Gender Identity.
Equal Employment Opportunity and Reasonable Accommodation Information

What Ferguson Waterworks employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply