Cybersecurity Engineer

Are you a cybersecurity professional with a sharp eye for threats and a passion for protecting data and infrastructure? The City of Chesapeake is seeking a Cybersecurity Engineer to join our security team and help defend critical systems across the enterprise.

In this role, you’ll be on the front lines of our cybersecurity operations - identifying, investigating, and responding to security threats, while also helping to assess and improve our overall security posture. You’ll work with cutting-edge tools and take part in the City’s push to securely modernize its technology landscape. What You’ll Do:

Security Architecture

• Design, implement and maintain enterprise security architectures spanning hybrid cloud, virtualization, network infrastructure, and AI systems.
• Develop Zero Trust security practices including micro-segmentation, least privilege, identity-driven access, and defense-in-depth controls.
• Create and maintain reference architectures, security standards, and architectural design documentation.
• Conduct threat modeling and architectural risk assessments aligned with NIST, CIS, ISO 27001, HIPAA, CJIS, PCI, and related frameworks.

AI Security

• Define and govern security requirements for AI/ML platforms, data pipelines, and model interfaces.
• Implement controls to mitigate threats such as prompt injection, model theft, data poisoning, and unauthorized API access.

Cloud Security

• Design secure Azure and AWS environments including segmentation, identity integration, private access, and firewalling.
• Oversee cloud-native security controls (Azure Firewall, NSGs/ASGs, Security Groups, Network Firewall, CSPM, secrets management).

Security Engineering Oversight

• Provide security principles and oversight for firewalls, network devices, endpoint security/XDR, email security, SIEM telemetry, and vulnerability management.
• Coordinate penetration testing and drive remediation efforts.

Network Security

• Define secure network design patterns for on-premises, hybrid, and cloud networks, including segmentation and perimeter architectures.
• Establish standards for firewall policies, TLS decryption, IPS, URL filtering, and SD-WAN/wireless security.

Virtualization & Operating System Security

• Define secure configuration for VMware/Hyper-V, virtual switches, hardened templates, and workload segmentation.
• Define secure configuration guidelines for Windows, Linux, IoT, OT, and SCADA environments.

Threat Detection & Incident Response

• Define detection engineering requirements for SIEM/XDR and guide threat-hunting activities.
• Support incident response architecture, forensics needs, and containment strategies.

Governance, Risk & Compliance

• Participate in risk assessments and define mitigation strategies.
• Support audit requirements, policy development, compliance documentation, and third-party risk reviews.

Documentation & Collaboration

• Produce clear documentation, diagrams, and executive-level reports.
• Collaborate with networking, systems, cloud, and application teams on architectural reviews and implementation, Overall Physical Strength Demands S=Sedentary - Exerting up to 10 lbs. occasionally or small weights frequently; sitting most of the time. Physical Demands

C = Continuously- 2/3 or more of the time. F = Frequently- From 1/3 to 2/3 of the time. O = Occasionally- Up to 1/3 of the time. R = Rarely- Less than 1 hour per week. N = Never- Never occurs. Standing Frequently- From 1/3 to 2/3 of the time. Sitting Frequently- From 1/3 to 2/3 of the time. Walking Frequently- From 1/3 to 2/3 of the time. Lifting Rarely- Less than 1 hour per week. Lifting Amount Exerting up to 10 lbs Carrying Rarely- Less than 1 hour per week. Carrying Weight Exerting up to 10 lbs Pushing/Pulling Rarely- Less than 1 hour per week. Pushing/Pulling Weight Exerting up to 10 lbs Reaching Occasionally- Up to 1/3 of the time. Handling Frequently- From 1/3 to 2/3 of the time. Fine Dexterity Continuously- 2/3 or more of the time. Kneeling Rarely- Less than 1 hour per week. Crouching Rarely- Less than 1 hour per week. Crawling Rarely- Less than 1 hour per week. Bending Occasionally- Up to 1/3 of the time. Twisting Rarely- Less than 1 hour per week. Climbing Rarely- Less than 1 hour per week. Balancing Rarely- Less than 1 hour per week. Vision Continuously- 2/3 or more of the time. Hearing Continuously- 2/3 or more of the time. Talking Continuously- 2/3 or more of the time. Foot Controls N = Never Machines, Tools, Equipment and Work Aids Used Computers and peripherals Protective Equipment Required Health and Safety

Vocational/Educational Requirement: Requires any combination of education and experience equivalent to a bachelor’s degree in computer science, cybersecurity, or a closely related field.

Experience: In addition to satisfying the vocational/education standards, this job class requires a minimum of four years of related, full-time equivalent experience, preferably in a broad range computer security role. Strong technical knowledge of IT infrastructure and vulnerability patch management preferred. Must have good knowledge of commercial compliance and regulatory standards (e.g. Payment Card Industry [PCI], Health Insurance Portability and Accountability Act [HIPAA]).

Special Certifications and Licenses: Requires a valid driver’s license and a driving record that is in compliance with City Driving Standards. Industry-related certifications (e.g. (ISC)2 Certified Information Systems Security Professional [CISSP], , CompTIA CySA+, GIAC CSEC) are preferred but not required., * Experience with information system security and network security practices - Identity and Access Management, Privileged Access Management, Incident Management, Security baseline, and configurations

• Experience with next-generation firewalls, network security configurations, endpoint/XDR, and cloud architectures
• Strong understanding of Zero Trust principles and NIST/CIS hardening standards
• Experience with cybersecurity risk management, threat analysis and incident response
• Working knowledge of security frameworks and compliance regulations; NIST CSF, PCI, HIPAA
• 3 years of experience configuring, managing, and securing servers and network devices to ensure system and network security safeguards are in place and meet security policy and compliance requirements
• 3 years of experience with evaluating internal and external security posture to review and make recommendations for improving organizational security posture
• 1 year of application security experience with vulnerability management tools to conduct application vulnerability scanning and remediation
• 1 year of experience working with Enterprise Applications to ensure applications are meeting security standards as part of an SDLC or OWASP principles
• Experience designing, implementing and securing cloud environments (Google, Microsoft, Amazon)
• Experience architecting hybrid on-prem/cloud security models.
• Knowledge of IoT/OT/SCADA security.
• Experience with CASB, SaaS posture management, DLP, and email security platforms.
• Strong understanding of regulatory requirements and industry standards.
• Proven analytical and problem-solving abilities
• Ability to effectively prioritize and execute tasks in a high-pressure environment
• Good written, oral, and interpersonal communication skills
• Ability to conduct research into IT security issues and products as required
• Ability to present ideas in business-friendly and user-friendly language
• Highly self-motivated and directed
• Keen attention to detail
• Experience with third-party, vendor supply chain security management practices

Posting Detail Information, C = Continuously- 2/3 or more of the time. F = Frequently- From 1/3 to 2/3 of the time. O = Occasionally- Up to 1/3 of the time. R = Rarely- Less than 1 hour per week. N = Never- Never occurs. Time Pressures Continuously- 2/3 or more of the time. Emergency Situations Occasionally- Up to 1/3 of the time. Frequent Change of Tasks Continuously- 2/3 or more of the time. Irregular Work Schedule/Overtime Occasionally- Up to 1/3 of the time. Performing Multiple Tasks Simultaneously Continuously- 2/3 or more of the time. Working Closely with Others as Part of a Team Continuously- 2/3 or more of the time., 1. * Do you possess a valid driver’s license and a driving record that is in compliance with the City’s Driving Standards? Please review position requirements for details.

• Yes
• No

Tedious or Exacting Work Frequently- From 1/3 to 2/3 of the time. Noisy/Distracting Environment Rarely- Less than 1 hour per week. Other N = Never If Other, Description Can anyone assist the employee in performing the primary tasks assigned to this position? If yes, identify the eligible task(s) Yes, Security Analyst