ZipRecruiter

Log In

1

Cyber Director Jobs in Virginia (NOW HIRING)

Beyond SOF

Red Cyber Operator

Fort Belvoir, VA · On-site

Develop courses of action an adversary could employ in and through cyberspace directed against customer personnel, equipment, facilities, networks, information and information systems, infrastructure ...

BWM Outcomes

Cyber Analyst

Manassas Park, VA · Hybrid

Provide direct support to client through multi-source analysis of cyber threats, identify trends and patterns within complex networks, employ analytical methods to isolate and resolve complex problem ...

Technomics, Inc.

Director of Cyber Analysis

Arlington, VA · On-site

$105K - $200K/yr

Experience: 10+ years direct cybersecurity work, 7+ years of experience evaluating the cyber compliance of a system against current RMF and DoW Cybersecurity policies * Education: Bachelor's Degree ...

Actalent

Cyber Engineer

Manassas, VA

$65 - $85/hr

Direct experience developing and debugging applications on Kubernetes (beyond managed platforms such as AWS or OpenShift). * Knowledge of network reconnaissance techniques and their use in cyber ...

Leidos

Cyber Analytics Team Lead

Alexandria, VA · Hybrid

The Cyber Analysis Lead will direct the team responsible for identifying cyber threats, analyzing vulnerabilities, assessing enterprise risk, and developing actionable mitigation recommendations that ...

next page

Showing results 1-20

All JobsCyber JobsCyber Director JobsCyber Director Jobs in Virginia

Cyber Director information

What is a cyber director?

Cyber Directors are senior-level professionals responsible for overseeing an organization's cybersecurity strategy, policies, and operations. They lead teams that defend against cyber threats, manage incident response, and ensure compliance with security regulations. Cyber Directors collaborate with executive leadership to align cybersecurity initiatives with business goals and often communicate risks and best practices to stakeholders. Their role is critical in protecting sensitive information and maintaining the integrity of an organization's digital infrastructure.

How does a cyber director typically collaborate with other departments to ensure organization-wide cybersecurity?

A Cyber Director works closely with departments such as IT, legal, compliance, and executive leadership to develop and implement comprehensive cybersecurity strategies. They often lead cross-functional meetings to assess risks, coordinate incident response plans, and ensure that security policies align with business objectives. Effective communication and collaboration are essential, as the Cyber Director must translate technical risks into actionable recommendations for non-technical stakeholders while ensuring all teams are aware of their roles in maintaining cybersecurity. This collaborative approach helps create a unified security culture and minimizes organizational vulnerabilities.

What are the key skills and qualifications needed to thrive as a cyber director, and why are they important?

To thrive as a Cyber Director, you need extensive expertise in cybersecurity strategies, risk management, and compliance, usually backed by a degree in computer science or a related field and significant industry experience. Familiarity with security frameworks (like NIST or ISO 27001), advanced threat detection tools, and certifications such as CISSP or CISM is typically required. Strong leadership, strategic thinking, and effective communication are essential soft skills for guiding teams and aligning security initiatives with business objectives. These skills ensure robust protection against cyber threats, regulatory compliance, and the successful integration of cybersecurity into organizational strategy.

What is the difference between Cyber Director vs Cyber Security Manager?

AspectCyber DirectorCyber Security Manager
CredentialsBachelor's or Master's in Cybersecurity, IT, or related fields; often requires industry certifications like CISSP, CISMBachelor's in Cybersecurity, IT, or related fields; often requires certifications like CISSP, CISM, or Security+
Work EnvironmentStrategic leadership, executive meetings, policy development, overseeing multiple teamsOperational management, team oversight, implementing security measures, incident response
Employer & Industry UsageUsed in large organizations, government agencies, and corporations with complex security needsCommon in mid to large organizations, focusing on day-to-day security operations

The main difference between a Cyber Director and a Cyber Security Manager lies in scope and focus. The Cyber Director typically handles strategic planning and high-level policies, while the Cyber Security Manager focuses on operational security and team management. Both roles require similar credentials and certifications, but the Cyber Director operates at a higher, more strategic level within the organization.

How much do cybersecurity directors make?

Cybersecurity directors typically earn between $120,000 and $200,000 annually, depending on experience, industry, and location. They often hold advanced certifications like CISSP or CISM and oversee security teams, policies, and incident response strategies within organizations.

What are the most commonly searched types of Cyber jobs in Virginia?

The most popular types of Cyber jobs in Virginia are:

What cities in Virginia are hiring for Cyber Director jobs?

Cities in Virginia with the most Cyber Director job openings:

Cyber Director jobs near you
Infographic showing various Cyber Director job openings in Virginia as of August 2026, with employment types broken down into 1% As Needed, 83% Full Time, 13% Part Time, and 3% Contract. Highlights an 90% Physical, 3% Hybrid, and 7% Remote job distribution.

Red Cyber Operator

Beyond SOF

Fort Belvoir, VA • On-site

Full-time

Re-posted 8 days ago

Key responsibilities

  • Research and characterize adversary structures, tactics, and capabilities to develop threat characterizations.

  • Identify information requirements, develop assessment strategies, and conduct research of publicly available information to determine adversary courses of action.

  • Support field assessments by conducting cyber operations from an adversary perspective and synthesizing findings to support vulnerability and risk analysis.

Job description

Background
The DTRA Cyber Red Team is an applicant DoD Cyber Red Team looking for motivated, self-starters to help build the organization's red cyber capability and capacity in support of the Certification and Accreditation (C&A) process. The candidate's contributions will play an important role in the C&A process.
Red Cyber Operators (RCO) emulate a potential adversary's offensive cyberspace operations and exploitation techniques against a targeted mission, system, network, component, or capability.
Red Cyber Operators action information gathered from readily available open-source internet resources to identify exposed or compromised information, vulnerabilities, and misconfigurations. The RCOs employ tools against these compromises, to demonstrate a loss of confidence in the target's functional and security posture forcing the target to operate in a degraded, disrupted, or denied cyber environment.Red Cyber Operators will be assigned to both White and Red Cells.
Prior to physical assessment operations, the Red Cyber Operators will work closely with Red Cyber Analysts to identify targets, research, scan, and map networks.During these components of the assessment, Red Cyber Operators will not deliver effects that could be categorized as anything but Reconnaissance or collecting technical targeting data. The purpose of reconnaissance is to gather information for network and information system characterization, identifying and gathering information on organizations through users that are determined to be of high value in answering PIRs or in the development of follow-on Red Team operations.
When authorized by the customer, asset owner, or other stakeholder, the Red Cyber Operator will demonstrate a potential adversary's offensive based cyberspace operations or intelligence collection capabilities against a targeted mission or capability.Demonstrations will be performed under a "White Card" and conform to ethical, aka white hat hacking principles.All activities performed by Red Cyber Operators will comply with all US Cyber Command Standing Ground Rules.
Responsibilities
  • Characterize the adversary - Research the structure, ideology, intentions, tactics, and capabilities of adversarial organizations to develop threat characterization using a combination of both classified and unclassified sources.
  • Contribute to threat emulation - Identify information requirements, develop assessment strategies and collection plans, identify information sources, and develop and conduct research of publicly available information (PAI) to determine adversary courses of action and relevant information requirements (IR).
  • Analyze and characterize targeted mission, system, network, component, or capability and conduct analysis appropriate to the program, identify essential functions/tasks and critical assets necessary to perform them as determined by the program leader.
  • Contribute to developing adversary courses of action (CoA).Develop courses of action an adversary could employ in and through cyberspace directed against customer personnel, equipment, facilities, networks, information and information systems, infrastructure, and supply chains.
  • Support field assessments from an adversary perspective.In conjunction with DoD Red Team Partners, conduct field assessments and demonstrate cyber courses of actions in accordance with Program Plans, operations orders, ground rules, and other directives.
  • Synthesize findings to support vulnerability identification, course of action development, protection studies, trend analyses, risk analysis, and mitigation strategies.
  • Develop a comprehensive understanding of the implications of vulnerabilities discovered by the other specialists and fuse those findings with the systems analysis and determine impacts to the national and military missions they support.
  • Prepare activity reports including out briefs, senior leader briefs, interim progress reports (IPRs) and briefs, white papers, after action reviews, final reports, risk analysis products, and other documents necessary to convey assessment findings to customers, partners, and other stakeholders.

Required Skills/Qualifications
  • Education:
    • 6 years in lieu of a degree, OR
    • 4 years of experience with Bachelor's degree, OR
    • 2 years of experience with Master's degree.

Field of study: Computer Science, Computer Forensics, Computer Engineering, Electrical Engineering, or a related technical discipline.
  • Experience:
    • Demonstrated operational experience in the military, other Federal Government, or comparable civilian position in Cyberspace Operations (Offensive Cyberspace Operations, Defensive Cyberspace Operations, and Cyberspace Exploitation) Cyber Red Team, Penetration Testing, and/or Information Operations (IO).
    • Demonstrated experience with at least one automation scripting language (Powershell, Python, Perl, Ruby, Java, etc)
    • Current active TS SCI clearance

  • Certifications:
    • Possess at least ONE (1) of the following certifications or obtain within 180 days of hire:
      • Offensive-Security Certified Professional (OSCP)
      • Offensive-Security Certified Expert (OSCE)
      • Offensive-Security Exploitation Expert (OSEE)
      • GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
      • GIAC Penetration Tester (GPEN)
      • GIAC Web Application Penetration Tester (GWAPT)
      • Possess at least ONE (1) of the following certifications based on DoD 8570.1-M requirements at a minimum IAT Level III:
        • CASP+CE
        • CCNP Security
        • CISA
        • CISSP
        • GCED
        • GCIH
  • Possess at least ONE (1) of the following certifications
    • CEH
    • CySA
    • CISA
    • GSNA
    • CFR
    • PenTest+

Desired Skills/Qualifications
  • Knowledge, Training, or experience working with ICS/SCADA or IoT devices. GICSP, GCIP, GRID or ISA/IEC desirable.
  • Have at least five demonstrated years of using open-source tools and operating systems or hold a comparable Linux certification
  • Possess working knowledge of Department of Defense's Cybersecurity Vulnerability Alert and Incident Response process.
  • Possess excellent written and verbal communication skills.
  • Possess a working knowledge of Computer Network vulnerability/compliance analysis software.
  • Possess working knowledge of RMF processes Possess a working knowledge of Microsoft Office Suite to include an ability to prepare PowerPoint presentations, reports, and white papers

Apply