ZipRecruiter

Log In

1

Information Security Engineer Jobs in Virginia (NOW HIRING)

Babel Street

Information Security Engineer

Reston, VA · On-site

Position overview The Information Security Engineer is responsible for supporting and advancing the organization's information security program through security operations, incident response ...

Exostar

Information Security Engineer

Herndon, VA · On-site

This individual will serve as an Information Security Engineer and member of the Exostar Information Security Office. This individual will report to the Intelligence & Operations Manager and be ...

Exostar

Information Security Engineer

Herndon, VA · On-site

This position will serve as a member of the Exostar Information Security Office and will report to the Manager of Governance & Engineering. This role is responsible for designing and implementing ...

Nightwing

Information Security Engineer

Arlington, VA · On-site

They are seeking an Information Security Engineer to ensure the security, compliance, and resilience of cloud engagement kits, managing vulnerabilities and implementing security controls to protect ...

Nightwing

Information Security Engineer

Arlington, VA · On-site

$122K - $253K/yr

The Information Security Engineer will ensure the security, compliance, and resilience of Bespin cloud engagement kits throughout their lifecycle. This position is responsible for implementing ...

Nwis

Information Security Engineer

Arlington, VA · On-site

$122K - $253K/yr

The Information Security Engineer will ensure the security, compliance, and resilience of Bespin cloud engagement kits throughout their lifecycle. This position is responsible for implementing ...

Exostar

Sr Information Security Engineer

Herndon, VA · On-site

$109K - $148K/yr

This position will serve as a member of the Exostar Information Security Office and will report to the Manager of Governance & Engineering. This role is responsible for designing and implementing ...

next page

Showing results 1-20

All JobsInformation Security Engineer JobsInformation Security Engineer Jobs in Virginia

Information Security Engineer information

See Virginia salary details

$67.4K

$125.7K

$189.9K

How much do information security engineer jobs pay per year?

As of Jul 26, 2026, the average yearly pay for information security engineer in Virginia is $125,745.00, according to ZipRecruiter salary data. Most workers in this role earn between $104,100.00 and $143,800.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as an Information Security Engineer, and why are they important?

To thrive as an Information Security Engineer, you need a solid understanding of network security, risk assessment, cryptography, and incident response, usually backed by a degree in computer science or a related field. Familiarity with security tools such as SIEM platforms, firewalls, intrusion detection systems, and certifications like CISSP or CEH are typically required. Strong problem-solving abilities, attention to detail, and effective communication skills help you collaborate with teams and manage threats proactively. These skills and qualifications are vital to protecting organizational assets, ensuring compliance, and minimizing security risks in an ever-evolving threat landscape.

What are Information Security Engineers?

Information Security Engineers are professionals responsible for protecting an organization’s computer systems, networks, and data from security threats and cyberattacks. They design, implement, and maintain security protocols, monitor systems for vulnerabilities, and respond to security incidents. Their work often involves conducting risk assessments, developing security policies, and ensuring compliance with industry standards and regulations. Information Security Engineers play a critical role in maintaining the confidentiality, integrity, and availability of information assets.

What are some common challenges Information Security Engineers face when collaborating with other departments?

Information Security Engineers often work closely with teams like IT, software development, and compliance. A common challenge is balancing security protocols with business needs, as other departments may prioritize speed or user experience over stringent security measures. Effective communication and the ability to explain technical risks in business terms are crucial for gaining buy-in and implementing robust security solutions. Additionally, keeping up with evolving threats while ensuring that all teams follow security best practices can be demanding but is key to organizational safety.

What Does an Information Security Engineer Do?

An information security engineer works closely with information security specialists to analyze an organization’s computer and network system and identify and fix any potential issues related to fraud, cyber attacks, leaked data, or other security breaches. Your security engineering duties include performing routine maintenance and upgrades on security systems and programs, fixing issues brought to you by information security specialists, and researching solutions to improve current systems. You carry out your responsibilities in the information technology department of an organization, but you may also report to other departments to update management on the organization’s security status.

What engineers make $500,000?

Senior-level information security engineers with extensive experience, advanced certifications (such as CISSP or CISM), and expertise in areas like threat management or security architecture can earn salaries approaching or exceeding $500,000 annually, especially in high-demand industries or senior leadership roles. Compensation often includes bonuses, stock options, or other incentives. Such roles typically require strong technical skills, leadership ability, and a track record of managing complex security programs.

Can you make $500,000 a year in cyber security?

Information Security Engineers with extensive experience, advanced certifications, and specialized skills in areas like penetration testing or security architecture can potentially earn salaries approaching or exceeding $500,000 annually, especially in high-cost-of-living regions or senior leadership roles. However, such compensation levels are uncommon and typically require many years of expertise, leadership responsibilities, or executive positions within large organizations. Most cybersecurity professionals earn significantly less, with salaries varying based on location, experience, and industry.

What is the difference between Information Security Engineer vs Network Security Engineer?

AspectInformation Security EngineerNetwork Security Engineer
CertificationsCompTIA Security+, CISSP, CEHCCNA Security, CISSP, CompTIA Security+
Work EnvironmentDesigns security systems, analyzes threats, implements security protocolsConfigures and manages network security devices, monitors network traffic
Employer & Industry UsageTech companies, finance, government agenciesTelecom, enterprise IT, cybersecurity firms

While both roles focus on protecting digital assets, the Information Security Engineer develops comprehensive security strategies and policies, whereas the Network Security Engineer primarily manages network defenses and infrastructure. Understanding these distinctions helps organizations assign the right security responsibilities and professionals.

Can I make $200,000 a year in cyber security?

Information Security Engineers with extensive experience, advanced certifications, and specialized skills such as penetration testing or security architecture can potentially earn $200,000 or more annually. Salaries vary based on location, industry, and company size, with senior roles and those in high-demand areas typically commanding higher compensation.

What does an information security engineer do?

An information security engineer designs, implements, and manages security measures to protect an organization’s computer systems and networks from cyber threats. They analyze vulnerabilities, develop security protocols, and use tools like firewalls and intrusion detection systems to safeguard data. Certification such as CISSP or CEH and knowledge of security frameworks are often important in this role.
More about Information Security Engineer jobs
What are the most commonly searched types of Information Security Engineer jobs in Virginia? The most popular types of Information Security Engineer jobs in Virginia are:
What are popular job titles related to Information Security Engineer jobs in Virginia? For Information Security Engineer jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Information Security Engineer jobs in Virginia look for? The top searched job categories for Information Security Engineer jobs in Virginia are:
What cities in Virginia are hiring for Information Security Engineer jobs? Cities in Virginia with the most Information Security Engineer job openings:
What are popular job titles related to Information Security Engineer jobs in VA? For Information Security Engineer jobs in VA, the most frequently searched job titles are:
Information Security Engineer jobs near you
Infographic showing various Information Security Engineer job openings in Virginia as of July 2026, with employment types broken down into 100% Full Time. Highlights an 100% In-person job distribution, with an average salary of $125,745 per year, or $60.5 per hour.
Information Security Engineer

Information Security Engineer

Babel Street

Reston, VA

Other

Medical, Dental, Vision, Life, Retirement

Posted 16 days ago

Job description

Position overview

The Information Security Engineer is responsible for supporting and advancing the organization's information security program through security operations, incident response, automation, and continuous improvement initiatives. Working directly with the Information Security Manager, this role helps protect the organization's users, systems, applications, and data by monitoring security events, investigating incidents, administering security technologies, and improving operational capabilities.

This position is highly technical and hands-on. Successful candidates possess a strong understanding of enterprise technologies, enjoy solving complex technical problems, and are driven to improve systems through engineering, automation, and process optimization.

The ideal candidate is intellectually curious, communicates effectively, learns new technologies rapidly, and takes ownership of problems from initial investigation through implementation of practical, long-term solutions. They are comfortable working across infrastructure, cloud, identity, and endpoint technologies while collaborating with multiple technical teams to strengthen the organization's overall security posture.

Responsibilities
  • Monitor, investigate, and respond to security alerts and incidents.
  • Administer Microsoft XDR, CrowdStrike Falcon, and Microsoft Entra ID.
  • Investigate phishing, identity attacks, endpoint detections, account compromise activity, and other security events.
  • Develop scripts, automations, and operational workflows to improve efficiency and reduce manual effort.
  • Create, maintain, and improve security run books, Standard Operating Procedures (SOPs), and incident response playbooks.
  • Document investigations, findings, technical procedures, and operational processes.
  • Assist with vulnerability management and remediation efforts.
  • Coordinate with Infrastructure, Cloud, IT, and Engineering teams to resolve security findings.
  • Research emerging threats, attack techniques, and security technologies.
  • Utilize AI tools to improve research, scripting, documentation, troubleshooting, and engineering productivity.
  • Recommend and implement improvements to security processes, detections, workflows, and automations.
  • Participate in security projects and perform additional duties as assigned.
Required Qualifications
  • Bachelor's degree in Cybersecurity, Cyber Operations, Systems Security Engineering, Computer Science, Information Assurance, or a related technical discipline.
  • Three (3) or more years of experience in Information Security, Security Operations, or Security Engineering.
  • Experience with Microsoft XDR.
  • Experience with CrowdStrike Falcon.
  • Experience with Microsoft Entra ID, including Risky Users and Identity Protection.
  • Working knowledge of AWS, Microsoft Azure, and Google Cloud Platform (GCP).
  • Experience investigating security incidents.
  • Experience writing PowerShell, Python, or similar scripting languages.
  • Experience developing automations and operational workflows.
  • Experience creating, maintaining, and improving security run books, Standard Operating Procedures (SOPs), and incident response playbooks.
Technical Competencies

The ideal candidate should have experience with, or the ability to quickly become proficient in, the following:

  • Security incident response and investigation.
  • Endpoint Detection and Response (EDR/XDR) platforms.
  • Security Information and Event Management (SIEM) platforms.
  • Log analysis, event correlation, and threat hunting.
  • Detection engineering and alert tuning.
  • Identity and authentication investigations.
  • Microsoft 365 and Microsoft Entra ID security investigations.
  • Email security and phishing investigations.
  • Vulnerability management and remediation workflows.
  • PowerShell, Python, or similar scripting languages.
  • Kusto Query Language (KQL) and/or Splunk Processing Language (SPL).
  • Microsoft Graph API, REST APIs, and security automation.
  • Cloud security investigations across AWS, Azure, and GCP.
  • Developing and maintaining security run books, Standard Operating Procedures (SOPs), and incident response playbooks.
  • Working knowledge of the NIST Cybersecurity Framework (CSF).
  • Familiarity with the MITRE ATT&CK Framework and common adversary tactics, techniques, and procedures (TTPs).
  • Strong understanding of enterprise technology, including Windows, Linux, networking fundamentals, identity systems, cloud infrastructure, and common enterprise architectures.
What We're Looking For

We're looking for an engineer. The ideal candidate is naturally curious and enjoys solving difficult technical problems. They don't stop at identifying an issue or escalating it to someone else. They take ownership, investigate thoroughly, and work toward implementing practical, long-term solutions.

You do not need to know everything. What matters is the ability to learn quickly, research effectively, experiment, and solve problems that don't already have documented answers.

Successful candidates will:
  • Take ownership of complex technical challenges and drive them through resolution.
  • Think critically, identify root causes, and solve problems rather than treating symptoms.
  • Independently research unfamiliar technologies, products, APIs, and attack techniques.
  • Build scripts, automations, and workflows that improve security operations.
  • Develop practical solutions when existing tools or processes are insufficient.
  • Continuously identify opportunities to improve security operations and business processes.
  • Learn new technologies exceptionally quickly and apply them with minimal supervision.
  • Be comfortable working through ambiguity, incomplete documentation, and unfamiliar technical environments.
  • Leverage AI tools such as OpenCode, Claude, Gemini, GitHub Copilot, ChatGPT, or similar platforms to accelerate research, scripting, engineering, documentation, and troubleshooting while maintaining sound technical judgment.
  • Demonstrate persistence and resourcefulness when solving problems that have no obvious solution.

If you're the type of engineer who enjoys figuring things out, building new capabilities, and leaving systems better than you found them, you'll fit in well on this team.

Desired Characteristics
  • Excellent verbal and written communication skills.
  • Highly proactive with a strong sense of ownership and accountability.
  • Strong analytical, troubleshooting, and critical thinking skills.
  • Exceptional organizational and documentation skills.
  • Ability to communicate effectively with both technical and non-technical audiences.
  • Comfortable collaborating across multiple technical teams.
  • Positive attitude and continuous improvement mindset.
  • High attention to detail and commitment to operational excellence.

Benefits at Babel Street (just to name a few...)

  • Health Benefits: Babel Street covers 85-100% monthly premium costs for Medical, Dental, Vision, Life & Disability insurances - for you and your family!
  • Retirement Plans: Babel Street offers both a Traditional and Roth 401(K) with a very competitive match.
  • Unlimited Flexible Leave: We trust our employees to manage their own time and balance their personal and work lives.
  • Holidays: Babel Street provides employees with 12 paid Federal Holidays
  • Tuition Reimbursement: We are committed to investing in our employees. One way we do that is with our Tuition Reimbursement Program for continuing education.                 

Babel Street is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. Further, Babel Street will not discriminate against applicants for inquiring about, discussing or disclosing their pay or, in certain circumstances, the pay of their coworker, Pay Transparency Nondiscrimination. In addition, Babel Street's policy is to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations and ordinances where a particular employee works. Upon request, we will provide you with more information about such accommodations.

Apply