ZipRecruiter

Log In

1

Cato Jobs in Virginia (NOW HIRING)

Steampunk

Cyber Risk Management Specialist

Mclean, VA · On-site

Support ATO, cATO, and continuous monitoring activities to include security documentation, audit log, security incidents, and risk assessment. * Review and manage Plan of Action & Milestones (POA&M ...

Steampunk

Cyber Risk Management Specialist

Mclean, VA · On-site

Support ATO, cATO, and continuous monitoring activities to include security documentation, audit log, security incidents, and risk assessment. * Review and manage Plan of Action & Milestones (POA&M ...

next page

Showing results 1-20

All JobsCato JobsCato Jobs in Virginia

Cato information

See Virginia salary details

$27.8K

$59.5K

$85.8K

How much do cato jobs pay per year?

As of Aug 7, 2026, the average yearly pay for cato in Virginia is $59,478.00, according to ZipRecruiter salary data. Most workers in this role earn between $44,600.00 and $72,400.00 per year, depending on experience, location, and employer.

What is the difference between Cato vs Network Security Specialist?

AspectCatoNetwork Security Specialist
CertificationsTypically Cisco, CompTIA Security+, or vendor-specificSame as Cato, often including CISSP, CCNA, or Security+
Work EnvironmentCloud-based security platform, remote or officeCorporate networks, data centers, or cloud environments
Industry UsageNetworking, cybersecurity, cloud servicesCybersecurity, network administration, IT security
Job FocusManaging Cato's security platform and policiesImplementing and maintaining network security measures

Both Cato and Network Security Specialists require similar certifications and work in cybersecurity environments. While Cato focuses on managing a cloud-based security platform, Network Security Specialists often handle broader network security tasks across various infrastructures. Understanding these differences helps in choosing the right career path or job role.

What are some common challenges faced by Cato Networks Security Engineers and how can they be addressed?

CATO Network Security Engineers often encounter challenges such as staying updated with rapidly evolving cyber threats, managing complex network architectures, and ensuring seamless integration of security solutions. To address these, engineers regularly participate in professional training, collaborate closely with cross-functional teams, and leverage CATO’s cloud-native platform for streamlined deployment and monitoring. Proactive communication and adoption of automation tools also help manage workloads and maintain high security standards.

What is a Cato?

Cato typically refers to Cato Networks, a company specializing in secure access service edge (SASE) solutions for enterprise networking and security. In a job context, a 'Cato' may refer to a professional working with the Cato Networks platform, managing cloud-based security, network optimization, and secure remote access for organizations. Their role often involves configuring and monitoring network security policies, troubleshooting connectivity issues, and ensuring secure access to company resources. This job is essential in modern IT environments that rely on cloud infrastructure and remote workforce connectivity.

What are the key skills and qualifications needed to thrive as a Cato Networks Security Engineer?

To thrive as a Cato Networks Security Engineer, you need a solid background in network security, cloud technologies, and troubleshooting, supported by relevant degrees or certifications like CCNP or CISSP. Familiarity with security tools such as firewalls, VPNs, SIEM systems, and hands-on experience with Cato Cloud platforms are typically required. Strong problem-solving skills, effective communication, and the ability to work well in a team are vital soft skills in this position. These competencies are crucial for ensuring robust cybersecurity, seamless cloud integration, and effective collaboration in protecting organizational assets.
What are popular job titles related to Cato jobs in Virginia? For Cato jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Cato jobs in Virginia look for? The top searched job categories for Cato jobs in Virginia are:
Cato jobs near you
Infographic showing various Cato job openings in Virginia as of August 2026, with employment types broken down into 87% Full Time, 9% Part Time, and 4% Contract. Highlights an 75% Physical, 5% Hybrid, and 20% Remote job distribution, with an average salary of $59,478 per year, or $28.6 per hour.

cATO TECHNICAL PROJECT MANAGER (PM)

Hiring Our Heroes

Arlington, VA • On-site, Remote

Full-time

Re-posted 15 days ago

Job description

cATO TECHNICAL PROJECT MANAGER (PM)

MILITARY FRIENDLY & PREFERRED - HOH SPONSOR

SUMMARY: The cATO Technical PM plans and drives delivery of cybersecurity architecture and engineering initiatives such as enterprise security and Continuous Authorization to Operate (cATO). This role coordinates cross-functional teams to deliver secure cloud and hybrid solutions, automate controls and evidence collection (including OSCAL), and improve risk management outcomes through repeatable standards, roadmaps, and Agile execution.

KEY RESPONSIBILITIES

  • Lead planning and execution across cybersecurity architecture and engineering workstreams to support the agency cybersecurity mission.
  • Develop, maintain, and evolve the Enterprise Security Reference Architecture (ESRA), security patterns, and standards for cloud and on prem environments.
  • Provide architectural input to the Cybersecurity Roadmap and Strategy, including cATO maturity, automated control testing, and improvements to ATO timelines.
  • Design and operationalize continuous monitoring and automated evidence collection pipelines (e.g., SIEM/XDR, scanners, cloud APIs, CI/CD) and integrate outputs into AO grade dashboards.
  • Develop and manage OSCAL artifacts (profiles, inheritance models) and evidence data contracts to support scalable, repeatable assessments.
  • Oversee and quality assure security architecture reviews (SAR), technical risk assessments/threat modeling, secure design reviews, and High Value Asset (HVA) assessments; ensure findings include practical mitigations and recommendations.
  • Support ATO intake and assessment workflows and vulnerability scanning programs (vulnerability, compliance, configuration, database, web application, continuous monitoring, and ad hoc) aligned to RMF and federal guidance.
  • Provide security architecture leadership for DevSecOps strategy and implementation, including integrating security scanning into pipelines and implementing security controls in accordance with RMF/CSF/FISMA/FedRAMP.
  • Design and deploy native cloud security services and reference implementations across AWS, Azure, and GCP, including security in Infrastructure as Code (IaC) templates/blueprints.
  • Evaluate and conduct proofs of value for cloud native, COTS, third party, and open source security tools; recommend improvements for coverage, efficacy, and efficiency.
  • Partner with operations teams to improve cloud monitoring, detection, and response (e.g., log ingestion/analysis, alert tuning, SOC visibility) and to identify/contain/remediate SDLC vulnerabilities.
  • Lead and mentor a team of security architects/engineers; coordinate cross functional stakeholders; provide briefings/presentations to technical and executive audiences.
  • Own delivery management: facilitate requirements gathering, backlog refinement, sprint planning, capacity planning, and retrospectives; ensure teams deliver high value increments meeting the Definition of Done.
  • Develop and maintain supporting documentation (e.g., SOPs, policies, procedures, review guides, and checklists) as required.
  • May be required to perform other tasks and activities associated with the Cybersecurity Architecture and Engineering contract or requested by Executive Leadership to assist with other solutions to support clients or teams.

REQUIRED QUALIFICATIONS

  • Excellent written and verbal communication skills; high attention to detail; able to work with minimal guidance.
  • Demonstrated ability to operate at both the strategic and hands on technical level; able to explain technical risks and options to executive audiences.
  • Proven project leadership experience coordinating cross functional teams and stakeholders; able to manage changing priorities and deliver to schedule.
  • Experience leading delivery in Agile environments (e.g., Scrum/Kanban), including backlog refinement, sprint planning, capacity planning, and retrospectives.
  • 5+ years (10+ preferred) experience across network, systems, and application security domains (e.g., LAN/WAN, WAF/CDN/DDoS, firewalls, IDS/IPS, virtualization, containers, CI/CD, microservices, serverless).
  • 5+ years designing and/or implementing security in cloud environments (AWS required; Azure strongly preferred; GCP a plus), including shared responsibility model and hybrid/multi cloud concepts.
  • Working knowledge/experience with cloud security services and tooling such as:
    • AWS: Security Hub, Config, GuardDuty, CloudTrail, CloudWatch, Lambda, IAM/KMS (or equivalent services).
    • Azure: Entra ID/AD, Key Vault, Monitor/Log Analytics, Policy, Defender for Cloud (or equivalent services).
  • Experience with DevSecOps security strategy and implementation, including integrating automated security assessments/scanning and evidence collection into CI/CD pipelines.
  • Experience designing and assessing architectures in accordance with RMF and federal security guidance (e.g., NIST, FISMA, FedRAMP); familiarity with CSF preferred.
  • Familiarity with Zero Trust (EO 14028), SCRM, ICAM, SASE/CASB/SWG/TIC 3.0 concepts and enterprise security operations (SIEM/SOC) preferred.
  • Strong analytical and problem solving skills; ability to research, evaluate, and recommend mitigations for threats and vulnerabilities.
  • Experience developing security documentation such as SOPs, procedures, guidelines, and assessment reports.

EDUCATION

  • Bachelor of Science (or higher) in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical field.

CERTIFICATIONS

  • CISSP is required. In addition, at least one of the following are also required CCSP; AWS Certified Solutions Architect (Associate or higher); AWS Certified Security - Specialty; Microsoft Certified: Azure Solutions Architect Expert; Google Professional Cloud Architect (or equivalent).

CLEARANCE

  • Minimum of an active Secret clearance.

LOCATION

  • Primary locations are Arlington and Alexandria, VA. Remote work is authorized. Occasional travel to the primary locations will be required.
  • Hours: 6:00 am ET – 6:00 pm ET.

Apply