Virginia Commonwealth University operates in downtown Richmond, Virginia, as a public research institution with roots stretching back to 1838. The university enrolls more than 28,000 students and employs approximately 22,000 faculty and staff across over 200 degree and certificate programs. That scale means the attack surface is real: a sprawling network of academic departments, research labs, student systems, and administrative infrastructure spanning a major urban campus.
For cybersecurity professionals, the threat model here isn't theoretical. Universities are persistent targets - credential stuffing against student portals, ransomware aimed at research data, phishing campaigns that exploit the open, collaborative culture of higher education. VCU's security teams are defending systems that handle sensitive research data, HIPAA-protected health information tied to its medical programs, financial aid records, and the identity sprawl that comes with a population of 28,000 students cycling through every few years. The work spans endpoint protection, network segmentation, incident response, and compliance with frameworks like FERPA, HIPAA, and PCI-DSS.
VCU emphasizes a mission-driven workforce and offers competitive benefits alongside career advancement opportunities. The university's broader culture is described as one that thrives on doing things differently - relevant context for security teams that need buy-in from researchers and faculty who may resist controls that slow them down. Over 188,000 alumni worldwide attest to the institution's longevity and reach; protecting that infrastructure is ongoing, unglamorous, and essential work.
