Security Engineer

Title: Security Engineer

State Role Title: Salary Non-Specified

Hiring Range: $88,507- $132,760 (pay grade 9 based on a 14 grade pay structure)

Pay Band: UG

Agency: VA Workers' Compensation Comm

Location: RICHMOND HEADQUARTERS

Agency Website: https://workcomp.virginia.gov/

Recruitment Type: General Public - G

This position is being reposted. Previous applicants will need to reapply. 

The Virginia Workers' Compensation Commission (VWC) is seeking an Information Security Engineer to help strengthen and evolve cybersecurity operations across the agency. This is an excellent opportunity for an information security professional who enjoys hands-on engineering, solving complex technical challenges, defending enterprise systems, and working with a broad range of modern security technologies in a collaborative, mission-driven environment.

Working closely with the Information Security Officer (ISO), Security Analyst, and Information Systems teams, you'll play an important role in protecting the Commission's technology environment while helping support the systems and services that benefit Virginia's workforce.

If you enjoy balancing technical problem-solving with continuous learning, collaborating with others, and making a meaningful impact through public service, we encourage you to apply.

What You'll Do

As an Information Security Engineer, you'll assist in the implementation, administration, monitoring, and continuous improvement of the Commission's Information Security Program by:

• Configuring, maintaining, tuning, and optimizing enterprise security technologies, including but not limited to Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Privileged Access Management (PAM), Data Loss Prevention (DLP), vulnerability management, and security monitoring platforms.
• Monitoring security events, analyzing threats and trends, troubleshooting security technologies, and supporting incident investigations and response activities.
• Assisting with vulnerability assessments, security configuration reviews, and remediation efforts to help ensure compliance with Commission and Commonwealth security standards.
• Supporting the Commission's information security governance and compliance program by assisting with Business Impact Analyses (BIA), Risk Assessments, System Security Plans, Incident Response Planning, Continuity of Operations Planning (COOP), and security policies and procedures.
• Assisting with oversight of third-party service providers to help ensure compliance with Commission and Commonwealth information security requirements.
• Collaborating with Information Systems staff and business partners to implement secure technology solutions and strengthen the Commission's overall cybersecurity posture.
• Supporting ongoing security improvements through documentation, process enhancement, and implementation of cybersecurity best practices.

Why Join Virginia Workers' Compensation Commission?

At VWC, you'll have the opportunity to build a rewarding career while helping protect the technology and information that supports Virginia's workers and employers. We foster a collaborative work environment where innovation, continuous improvement, and professional development are encouraged.

In addition to meaningful public service, employees enjoy:

• Competitive salary and comprehensive state benefits
• Virginia Retirement System (VRS) participation
• Generous paid leave and holiday schedule
• Professional development and training opportunities
• Flexible work arrangements, subject to operational needs and Commission policy
• A collaborative team dedicated to delivering exceptional public service

VWC Compensation Structure

Virginia Workers' Compensation Commission is an independent agency which allows us to have a more competitive and unique pay structure. This position is a pay grade 10 based on a 14 grade pay structure. Our positions are not classified under DHRM's pay bands.

Telework Structure

• Our agency is currently using a hybrid model for teleworking.
• Our positions currently are not 100% teleworking. However, we do have a liberal telework policy in place and all candidates would be expected to report to our Headquarters as requested.
• Telework is not guaranteed and is subject to the operational needs of the Commission. Upon hire, candidates should expect to have all training and orientation conducted at the Headquarters Office, or as required.
• Selected candidates who reside outside of Virginia will need to receive Commission approval prior to an offer being finalized.

Work Location Structure

• This position's central workplace is the Virginia Workers' Compensation Commission's Richmond Headquarters.
• Employees must be able to report to the Richmond office as required by operational needs.
• Candidates who currently reside outside of Virginia will need Commission approval of their work location prior to an offer being finalized.

Virginia Workers' Compensation Commissioner Overview

Led by a Senior Leadership team consisting of three Commissioners, an Executive Director, and a Chief Deputy Commissioner. Our mission is to serve injured workers, victims of crimes, employers, and related industries by providing exceptional services, resolving disputes, and faithfully executing the duties entrusted to us by the Commonwealth of Virginia. Our vision is to lead the nation as the most effective and innovative state agency.  VWC demonstrate seven core values: innovation, respect, accountability, reliability, impartiality, integrity, and effectiveness.

We are a “Virginia Values Veterans” (V3) official certified state agency that supports Veterans and Members of the Reserves and/or National Guard.  If you are a Veteran or Spouse of a Veteran or Active Military Member, we urge you to respond accordingly on your state application.  Virginia Workers’ Compensation Commission is an Equal Opportunity Employer, and we encourage diversity within our workforce.  Virginia Workers’ Compensation Commission does not provide sponsorship for employment.

VWC has been recognized as a Top Workplace for the past several years in the Richmond Region and in the country. It is the recipient of the following awards:

• 2022 - 2026 Top USA Workplace
• 2021 - 2026 Top Workplace Richmond Region
• 2023 - 2025 Top Award for Mid-Sized Companies
• 2022 - 2023 Doers Award
• 2024 Manager’s Award
• 2025 Leadership Award, McGill 

Minimum Qualifications

• Experience supporting enterprise information security, cybersecurity, systems administration, or related technology environments.
• Working knowledge of information security principles, risk management, and cybersecurity best practices.
• Experience with one or more enterprise security technologies such as SIEM, EDR, IAM, vulnerability management, endpoint protection, network security, or cloud security solutions.
• Experience analyzing security events, troubleshooting technical issues, and assisting with incident response activities.
• Knowledge of information security frameworks, standards, or regulatory requirements.
• Strong analytical, problem-solving, and organizational skills.
• Excellent written and verbal communication skills with the ability to explain technical concepts to both technical and non-technical audiences.
• Ability to work independently while collaborating effectively within a team environment.

Additional Considerations

Experience and/or working knowledge of the following are preferred:

• Microsoft security technologies, including Microsoft Defender, Microsoft Entra ID, Microsoft Purview, or Microsoft Sentinel.
• CrowdStrike Falcon or similar endpoint detection and response platforms.
• Splunk or other SIEM platforms.
• Identity and Access Management (IAM) and Privileged Access Management (PAM).
• Vulnerability management and security assessment tools.
• Security governance, risk management, compliance, or audit support.
• Scripting or automation using PowerShell, Python, or similar languages.
• Experience supporting state government or other regulated environments.
• Industry certifications such as Security+, CySA+, CISSP, GIAC, Microsoft Security certifications, or equivalent.
• Commonwealth of Virginia experience preferred.

Special Instructions

You will be provided a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to “Your Application” in your account to check the status of your application for this position.

Contact Information

Name: Amy Habel

Phone: 804-205-3571

Email: amy.habel@workcomp.virginia.gov

In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter. Requesting an AHP Letter can be found at AHP Letter or by calling DARS at 800-552-5019.

Note: Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1, 2022- February 29, 2024, can still use that COD as applicable documentation for the Alternative Hiring Process.