Security Engineer

Security Engineer

The Virginia Workers' Compensation Commission (VWC) is seeking an Information Security Engineer to help strengthen and evolve cybersecurity operations across the agency. This is an excellent opportunity for an information security professional who enjoys hands-on engineering, solving complex technical challenges, defending enterprise systems, and working with a broad range of modern security technologies in a collaborative, mission-driven environment. Working closely with the Information Security Officer (ISO), Security Analyst, and Information Systems teams, you'll play an important role in protecting the Commission's technology environment while helping support the systems and services that benefit Virginia's workforce. If you enjoy balancing technical problem-solving with continuous learning, collaborating with others, and making a meaningful impact through public service, we encourage you to apply.

As an Information Security Engineer, you'll assist in the implementation, administration, monitoring, and continuous improvement of the Commission's Information Security Program by:

• Configuring, maintaining, tuning, and optimizing enterprise security technologies, including but not limited to Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Privileged Access Management (PAM), Data Loss Prevention (DLP), vulnerability management, and security monitoring platforms.
• Monitoring security events, analyzing threats and trends, troubleshooting security technologies, and supporting incident investigations and response activities.
• Assisting with vulnerability assessments, security configuration reviews, and remediation efforts to help ensure compliance with Commission and Commonwealth security standards.
• Supporting the Commission's information security governance and compliance program by assisting with Business Impact Analyses (BIA), Risk Assessments, System Security Plans, Incident Response Planning, Continuity of Operations Planning (COOP), and security policies and procedures.
• Assisting with oversight of third-party service providers to help ensure compliance with Commission and Commonwealth information security requirements.
• Collaborating with Information Systems staff and business partners to implement secure technology solutions and strengthen the Commission's overall cybersecurity posture.
• Supporting ongoing security improvements through documentation, process enhancement, and implementation of cybersecurity best practices.

At VWC, you'll have the opportunity to build a rewarding career while helping protect the technology and information that supports Virginia's workers and employers. We foster a collaborative work environment where innovation, continuous improvement, and professional development are encouraged.

In addition to meaningful public service, employees enjoy:

• Competitive salary and comprehensive state benefits
• Virginia Retirement System (VRS) participation
• Generous paid leave and holiday schedule
• Professional development and training opportunities
• Flexible work arrangements, subject to operational needs and Commission policy
• A collaborative team dedicated to delivering exceptional public service

Led by a Senior Leadership team consisting of three Commissioners, an Executive Director, and a Chief Deputy Commissioner. Our mission is to serve injured workers, victims of crimes, employers, and related industries by providing exceptional services, resolving disputes, and faithfully executing the duties entrusted to us by the Commonwealth of Virginia. Our vision is to lead the nation as the most effective and innovative state agency. VWC demonstrate seven core values: innovation, respect, accountability, reliability, impartiality, integrity, and effectiveness.

We are a "Virginia Values Veterans" (V3) official certified state agency that supports Veterans and Members of the Reserves and/or National Guard. If you are a Veteran or Spouse of a Veteran or Active Military Member, we urge you to respond accordingly on your state application. Virginia Workers' Compensation Commission is an Equal Opportunity Employer, and we encourage diversity within our workforce. Virginia Workers' Compensation Commission does not provide sponsorship for employment.

VWC has been recognized as a Top Workplace for the past several years in the Richmond Region and in the country. It is the recipient of the following awards:

• 2022 - 2026 Top USA Workplace
• 2021 - 2026 Top Workplace Richmond Region
• 2023 - 2025 Top Award for Mid-Sized Companies
• 2022 - 2023 Doers Award
• 2024 Manager's Award
• 2025 Leadership Award, McGill

Minimum Qualifications:

• Experience supporting enterprise information security, cybersecurity, systems administration, or related technology environments.
• Working knowledge of information security principles, risk management, and cybersecurity best practices.
• Experience with one or more enterprise security technologies such as SIEM, EDR, IAM, vulnerability management, endpoint protection, network security, or cloud security solutions.
• Experience analyzing security events, troubleshooting technical issues, and assisting with incident response activities.
• Knowledge of information security frameworks, standards, or regulatory requirements.
• Strong analytical, problem-solving, and organizational skills.
• Excellent written and verbal communication skills with the ability to explain technical concepts to both technical and non-technical audiences.
• Ability to work independently while collaborating effectively within a team environment.

Additional Considerations:

• Experience and/or working knowledge of the following are preferred:
• Microsoft security technologies, including Microsoft Defender, Microsoft Entra ID, Microsoft Purview, or Microsoft Sentinel.
• CrowdStrike Falcon or similar endpoint detection and response platforms.
• Splunk or other SIEM platforms.
• Identity and Access Management (IAM) and Privileged Access Management (PAM).
• Vulnerability management and security assessment tools.
• Security governance, risk management, compliance, or audit support.
• Scripting or automation using PowerShell, Python, or similar languages.
• Experience supporting state government or other regulated environments.
• Industry certifications such as Security+, CySA+, CISSP, GIAC, Microsoft Security certifications, or equivalent.
• Commonwealth of Virginia experience preferred.

You will be provided a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to "Your Application" in your account to check the status of your application for this position.

In support of the Commonwealth's commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter. Requesting an AHP Letter can be found at AHP Letter or by calling DARS at View phone number on click.appcast.io.

Note: Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.

Each agency within the Commonwealth of Virginia is dedicated to recruiting, supporting, and maintaining a competent and diverse work force. Equal Opportunity Employer