ZipRecruiter

Log In

1

Epic Security Analyst Jobs in Virginia (NOW HIRING)

Cvent

Senior Engineer, Application Security

Tysons, VA · On-site

$59.50 - $79.25/hr

Architect and own AI-first security automation - design agentic systems and skills that take security work from intake (e.g., a Jira epic or design doc) through analysis to logged risk and published ...

Valley Health

Senior Data Architect

Winchester, VA · On-site

$120 - $180/hr

... analytics, reporting, and operational workflows and integrate EHR/EMR systems (e.g., Epic, Cerner ... Security & Compliance: Implements data security protocols, access controls, and compliance measures ...

Valley Health

Senior Data Architect

Winchester, VA · On-site

$57.50 - $86.25/hr

... analytics, reporting, and operational workflows and integrate EHR/EMR systems (e.g., Epic, Cerner ... Security & Compliance: Implements data security protocols, access controls, and compliance measures ...

Valley Health

Senior Data Architect

Winchester, VA

$57.50 - $86.25/hr

... analytics, reporting, and operational workflows and integrate EHR/EMR systems (e.g., Epic, Cerner ... Security & Compliance: Implements data security protocols, access controls, and compliance measures ...

IC-CAP LLC

Senior Systems Engineer 112-141

Chantilly, VA · On-site

$107K - $146K/yr

Guides the planning, analysis/traceability of user requirements, architectures traceability ... Experience tracing requirements to Solution Epic and Program Epic levels. * Ability to coordinate ...

previous pagenext page

Showing results 21-40

All JobsEpic Security Analyst JobsEpic Security Analyst Jobs in Virginia

Epic Security Analyst information

See Virginia salary details

$39.2K

$106.4K

$139.8K

How much do epic security analyst jobs pay per year?

As of Sep 5, 2026, the average yearly pay for epic security analyst in Virginia is $106,413.00, according to ZipRecruiter salary data. Most workers in this role earn between $90,700.00 and $128,900.00 per year, depending on experience, location, and employer.

What is an Epic Security Analyst?

An Epic Security Analyst is responsible for managing user access and security within the Epic electronic health record (EHR) system. They configure security settings, assign system roles, and ensure compliance with healthcare regulations. Analysts collaborate with IT teams, compliance officers, and clinical staff to maintain data integrity and protect sensitive patient information. They also troubleshoot access issues, conduct audits, and implement security best practices to safeguard the system.

What are the key skills and qualifications needed to thrive as an Epic Security Analyst?

To thrive as an Epic Security Analyst, you need a strong understanding of information security principles, healthcare compliance, and experience with Epic's electronic health record (EHR) system, typically supported by relevant degrees and certifications such as Epic Security certification or HITRUST. Familiarity with technical tools like Epic UserWeb, security auditing software, and identity access management systems is crucial. Strong analytical thinking, attention to detail, and effective communication skills help you collaborate with clinicians, IT teams, and stakeholders. These skills are essential to ensure the protection of sensitive patient data, regulatory compliance, and the seamless functioning of the EHR system.

What are some common challenges Epic Security Analysts face in their role?

Epic Security Analysts often navigate complex regulatory requirements such as HIPAA, while ensuring that users have appropriate access without exposing sensitive patient data. They may encounter challenges in balancing security measures with the operational needs of clinical staff and adapting quickly to frequent updates or changes within the Epic system. Collaboration across departments to manage user permissions and respond to audit findings is a routine part of the role. Overcoming these challenges requires both technical expertise and strong interpersonal skills, making the role both dynamic and impactful within healthcare organizations.

How to become an Epic Security Analyst?

To become an Epic Security Analyst, candidates typically need a bachelor's degree in cybersecurity, information technology, or a related field. Relevant skills include knowledge of healthcare IT systems, security protocols, and experience with Epic software security features; certifications like CISSP or CISA can also enhance prospects. Gaining experience in healthcare security environments and staying current with industry best practices are important for this role.

Is Epic Security Analyst in demand?

Epic Security Analysts are in high demand due to the increasing need for healthcare cybersecurity, especially as hospitals and health systems adopt Epic electronic health record systems. Professionals with skills in security protocols, compliance, and experience with Epic platforms are sought after, often commanding competitive salaries and job stability.

What does an Epic Security Analyst do?

An Epic Security Analyst is responsible for monitoring, analyzing, and responding to security threats within healthcare IT systems that use Epic software. They implement security measures, conduct vulnerability assessments, and ensure compliance with data protection standards, often using security tools and certifications like CISSP or CISA. Their role helps safeguard sensitive patient information and maintain system integrity.

What are the most commonly searched types of Epic Security Analyst jobs in Virginia?

The most popular types of Epic Security Analyst jobs in Virginia are:

What are popular job titles related to Epic Security Analyst jobs in Virginia?

For Epic Security Analyst jobs in Virginia, the most frequently searched job titles are:

What job categories do people searching Epic Security Analyst jobs in Virginia look for?

The top searched job categories for Epic Security Analyst jobs in Virginia are:

What cities in Virginia are hiring for Epic Security Analyst jobs?

Cities in Virginia with the most Epic Security Analyst job openings:

Epic Security Analyst jobs near you
Infographic showing various Epic Security Analyst job openings in Virginia as of August 2026, with employment types broken down into 85% Full Time, 13% Part Time, and 2% Contract. Highlights an 91% Physical, 2% Hybrid, and 7% Remote job distribution, with an average salary of $106,413 per year, or $51.2 per hour.

Senior Engineer, Application Security

Cvent

Tysons, VA • On-site

$59.50 - $79.25/hr

Full-time

Re-posted 8 days ago

Job description

Overview:
Our Culture and Impact
Cvent is a leading meetings, events, and hospitality technology provider with more than 5,500+ employees and ~30,000 customers worldwide, including 60% of the Fortune 500. Founded in 1999, Cvent delivers a comprehensive event marketing and management platform for marketers and event professionals and offers software solutions to hotels, special event venues and destinations to help them grow their group/MICE and corporate travel business. Our technology brings millions of people together at events around the world. In short, we're transforming the meetings and events industry through innovative technology that powers the human connection.
Cvent's strength lies in its people, fostering a culture where everyone is encouraged to think like entrepreneurs, taking risks and making decisions confidently. We value diverse perspectives and celebrate differences, working together with colleagues and clients to build strong connections.
AI at Cvent: Leading the Future
Are you ready to shape the future of work at the intersection of human expertise and AI innovation? At Cvent, we're committed to continuous learning and adaptation-AI isn't just a tool for us, it's part of our DNA. We're looking for candidates who are eager to evolve alongside technology. If you love to experiment boldly, share your discoveries, and help define best practices for AI-augmented work, you'll thrive here. Our team values professionals who thoughtfully integrate AI into their daily work, delivering exceptional results while relying on the human judgment and creativity that drive real innovation.
Throughout our interview process, you'll have the chance to demonstrate how you use AI to learn, iterate, and amplify your impact. If you're excited to be part of a team that's leading the way in AI-powered collaboration, we'd love to meet you.
We're seeking a senior, builder-minded Application Security Engineer who can go deep on hard technical problems while setting the direction for how AI reshapes a security program. This isn't someone who just uses AI tooling - it's someone who architects it: agentic systems that automate threat modeling end to end, AI-assisted vulnerability management, and self-serve security capabilities that change how an engineering org works. The ideal candidate is equally credible doing a rigorous design review, writing the automation that scales it, and communicating the resulting risk decisions to leadership. This role owns product security for the teams it partners with - they look to this person as the accountable security voice for their roadmap.
In This Role, You Will:
  • Architect and own AI-first security automation - design agentic systems and skills that take security work from intake (e.g., a Jira epic or design doc) through analysis to logged risk and published findings, with minimal manual handoff.
  • Lead the development of security agents and AI tooling - define the architecture for LLM-integrated workflows (via APIs and MCP connectors), set patterns for tool/function design, and decide build-vs-buy across the toolchain.
  • Drive AI-assisted threat modeling at scale - benchmark custom solutions against off-the-shelf agents, embed methodologies (STRIDE, PASTA, LINDDUN, MITRE ATT&CK) into automation, and make pentest scoping decisions defensible and repeatable.
  • Set the standard for AI feature security - define coverage models and assessment criteria for GenAI and AI/ML features, applying the OWASP LLM Top 10, OWASP AI Testing Guide, and MITRE ATLAS to real product risk.
  • Own integration and scaling of SAST, DAST, and SCA across CI/CD, including AI-assisted triage layers that cut noise and accelerate remediation.
  • Perform and lead deep secure design reviews, code reviews, threat modeling, and penetration testing for complex and high-risk systems, including cloud-native and AI-driven architectures.
  • Own product security for an assigned product area or portfolio - serve as the accountable security partner for those teams, drive their threat modeling, design reviews, and risk decisions end to end, and own the security posture and remediation outcomes for that scope.
  • Mentor Engineer II and mid-level teammates, review their automation and findings, and grow the team's AI and AppSec capability.
  • Communicate risk clearly to both engineering and leadership audiences, and support compliance efforts across ISO 27001, SOC 2, and PCI.

Here's What You Need:
  • 5+ years of hands-on experience in application security or secure software development, with demonstrated technical ownership.
  • Strong scripting/programming skills - the ability to design and build non-trivial internal tools and automation in Python, JavaScript/TypeScript, or Bash.
  • Proven experience integrating security tooling into CI/CD and the SDLC, and improving it over time.
  • Strong familiarity with cloud platforms (AWS preferred; GCP or Azure acceptable) and cloud-native security, including securing applications built with AWS CDK / IaC.
  • Proficiency with security testing and cloud security tools (e.g., Burp Suite, Checkmarx, Mend, Veracode, Fortify, ZAP, Wiz) and the judgment to know when manual testing beats automation.
  • Deep understanding of the OWASP Top 10, CWE, SANS Top 25, secure coding practices, and web/API vulnerability classes.
  • Demonstrated end-to-end ownership of at least one security tool, automation, or agentic/LLM-integrated workflow that is used in production or relied on by a team - designed, shipped, and depended on by others. This is the primary, screenable differentiator from the Engineer II role.

Bonus If You Have:
  • Experience securing AI/ML pipelines and a working understanding of adversarial ML, prompt injection, and agent-misuse risk.
  • DevSecOps, IaC security, or supply-chain depth, and senior-relevant certifications (e.g., OSWE, OSCP, AWS Security - Specialty, CISSP).

Why You'll Love This Role
  • You'll define how AI transforms Application Security at scale - architecting automation and agents that change how an entire engineering org ships secure software.
  • You'll join the ASRE team to innovate at the forefront of AI-assisted AppSec, with the autonomy to set technical direction.
  • You'll work with teams who take security seriously and back you to drive meaningful, lasting change.
  • You'll have both technical depth and leadership impact, with a path to grow into staff-level or lead roles.

This job posting is intended to comply with all applicable laws. If we learn during the course of our recruitment process that, due to an applicant's location, further information about the position is required, including certain salary information, this information in this posting will be supplemented accordingly.
The estimated base salary range for new hires into this role is $120,000 - $160,000 annually + bonus depending on factors such as job-related knowledge, relevant experience, and location. We also offer a competitive benefits package, details of which can be found here.
Hybrid: 2 days in office
We are not able to offer sponsorship for this position
Physical Demands

Apply