ZipRecruiter

Log In

1

Cybersecurity Risk Management Jobs in Dumfries, VA

Incatech Corp

Cyber Security Engineer

Springfield, VA · On-site

$110 - $150/hr

This role focuses on cybersecurity engineering, risk management, and compliance across cloud and on-prem systems, supporting system authorization, vulnerability management, and secure operations in ...

Management Solutions LLC

Risk Manager

Washington, DC · On-site

Job Summary Management Solutions is seeking a Risk Manager to support delivery of mission-critical services within a federal IT and cybersecurity environment. This role is client-facing and supports ...

KBR

Cybersecurity Manager

Washington, DC · On-site

$213K - $320K/yr

Title: Cybersecurity Manager Program Summary: KBR's Product and Technology Solutions Division ... Direct implementation and execution of the Risk Management Framework (RMF) process. * Oversee DoD ...

previous page

Showing results 41-60

All JobsCybersecurity Risk Management JobsCybersecurity Risk Management Jobs in Dumfries, VA

Cybersecurity Risk Management information

See Dumfries, VA salary details

$56.3K

$131.2K

$183.6K

How much do cybersecurity risk management jobs pay per year?

As of Aug 17, 2026, the average yearly pay for cybersecurity risk management in Dumfries, VA is $131,223.00, according to ZipRecruiter salary data. Most workers in this role earn between $109,500.00 and $148,000.00 per year, depending on experience, location, and employer.

What is cybersecurity risk management?

Cybersecurity risk management is the process of identifying, assessing, and prioritizing risks to an organization's digital assets and information systems. It involves implementing strategies and controls to minimize the impact of potential cyber threats, such as data breaches, malware, and unauthorized access. The goal is to balance security measures with business needs, ensuring sensitive information remains protected while maintaining operational efficiency. Effective risk management is ongoing, adapting to new threats and changes within the organization.

What are the key skills and qualifications needed to thrive in cybersecurity risk management, and why are they important?

To thrive in Cybersecurity Risk Management, you need a solid understanding of information security principles, risk assessment methodologies, compliance standards, and typically a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), security tools, and professional certifications like CISSP or CRISC is highly valued. Strong analytical thinking, effective communication, and problem-solving skills help professionals translate technical risks for non-technical stakeholders and foster collaboration. These competencies are crucial to proactively identifying threats, managing vulnerabilities, and ensuring organizational resilience in a rapidly evolving digital landscape.

What are some common challenges faced by professionals in cybersecurity risk management, and how can they be addressed?

Professionals in Cybersecurity Risk Management often encounter challenges such as keeping up with rapidly evolving cyber threats, balancing security needs with business objectives, and ensuring compliance with industry regulations. Addressing these challenges requires continuous learning, effective communication with stakeholders, and close collaboration with IT, legal, and business teams. Building strong partnerships across departments and investing in ongoing training can help mitigate these obstacles and support proactive risk management.

What is the difference between Cybersecurity Risk Management vs Cybersecurity Analyst?

AspectCybersecurity Risk ManagementCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CEH, CISSP
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageFinancial, healthcare, government, large enterprisesIT departments, cybersecurity firms, corporate security teams

Cybersecurity Risk Management focuses on identifying, assessing, and mitigating security risks at an organizational level, often involving policy creation and strategic planning. In contrast, a Cybersecurity Analyst primarily monitors security systems, responds to incidents, and analyzes vulnerabilities. Both roles require similar certifications but serve different functions within cybersecurity teams.

What job categories do people searching Cybersecurity Risk Management jobs in Dumfries, VA look for?

The top searched job categories for Cybersecurity Risk Management jobs in Dumfries, VA are:

What cities near Dumfries, VA are hiring for Cybersecurity Risk Management jobs?

Cities near Dumfries, VA with the most Cybersecurity Risk Management job openings:

Cybersecurity Risk Management jobs near you
Infographic showing various Cybersecurity Risk Management job openings in Dumfries, VA as of August 2026, with employment types broken down into 1% As Needed, 81% Full Time, 16% Part Time, and 2% Contract. Highlights an 84% Physical, 2% Hybrid, and 14% Remote job distribution, with an average salary of $131,223 per year, or $63.1 per hour.

Cyber Security Engineer

Incatech Corp

Springfield, VA • On-site

$110 - $150/hr

Other

Medical, Dental, Vision, Life, Retirement, PTO

This job post has expired today. Applications are no longer accepted.

Job description

LOCATION: Springfield VA, Vienna, VA St. Louis, MO, potentially other locations. ALL work will be onsite.

Clearance: MUST possess active Top Secret clearance

INCATech is URGENTLY searching for a Cyber Security Engineer. A Cyber Security Engineer supports critical DoD and Intel missions and programs. This role focuses on cybersecurity engineering, risk management, and compliance across cloud and on-prem systems, supporting system authorization, vulnerability management, and secure operations in classified environments.

Responsibilities
  • Applying RMF processes to support system Assessment & Authorization (A&A), including control selection, implementation, assessment, and continuous monitoring
  • Developing, reviewing, and maintaining security documentation such as SSPs, POA&Ms, SARs, and ATO artifacts in tools such as XACTA or eMASS
  • Conducting vulnerability assessments and compliance scans (e.g., ACAS) and tracking remediation of findings and IAVM requirements
  • Implementing and validating security controls aligned with NIST 800-53, CNSSI 1253, and related DoD guidance
  • Supporting system hardening, patching, and configuration management in compliance with STIGs for Linux, Windows, and network devices
  • Monitoring systems for security events and supporting incident response and risk mitigation activities
  • Assessing security impacts of system changes and supporting configuration control boards (CCBs)
  • Collaborating with system engineers, administrators, and DevSecOps teams to integrate security throughout the system lifecycle
  • Providing cybersecurity risk input to program leadership, Authorizing Officials (AOs), and stakeholders
Requirements Qualifications
  • Bachelor's degree with 5+ years of experience (or equivalent experience)
  • DoD 8570 IAT Level II or higher certification (e.g., Security+, CySA+, CISSP)
  • Experience with RMF, A&A, POA&M, and ATO documentation (XACTA/eMASS)
  • Hands‑on vulnerability scanning and compliance tracking (ACAS, IAVM)
  • Experience securing Linux and Windows systems, STIGs, patching, and system hardening
  • Knowledge of NIST 800-series publications and incident response processes
  • Strong analytical, communication, and collaboration skills
Preferred
  • Scripting or development experience (Python, Java, React)
  • DevSecOps tools and pipeline experience
  • Experience with Linux (Red Hat/CentOS), databases, web apps, or big data platforms
  • Familiarity with Agile environments and tools (Jira, Confluence)
  • Experience with NIST SP 800-171 and System Security Engineering (SSE)
About INCATech LLC

INCATech is an award-winning small business that has over 14 years of experience supporting the US Government. We provide both Professional Services as well as Transformational Software Solutions for our customers. Our deep technical expertise in Geospatial Information Systems, Enterprise Data Management, User‑Centered Design, Cloud & Platform Services, and a wide range of Acquisition Support Services will provide your career the boost you have been looking for. Our culture is based on empowering our staff and customers with knowledge and tools to achieve mission success and career advancement.

Benefits

INCATech offers a competitive comprehensive benefits package. Our most valuable asset at INCATech is our people. Our benefits package is designed to help and safeguard our employees and their families. We provide a variety of life and family benefits to meet a variety of demands. Benefits include: Health, Dental, 401K, Vision, Paid Time Off, Life Insurance etc.

INCATech is an Equal Opportunity Employer.

Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.

#J-18808-Ljbffr

Apply