> Markdown version of [/jobs/ext/3709435-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/3709435-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Engineer - **Company:** Chesapeake - **Location:** Chesapeake, VA, United States - **Salary:** $87,075.0 - $120,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Audit Trail, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Data Security, Software Design Patterns, Desktop Computing, Linux, Supervisory Control and Data Acquisition (SCADA), Network Topologies, Hyper-V, Identity and Access Management, Networking Hardware, Intrusion Detection and Prevention, Virtual Private Networks (VPN), Information Systems Security Architecture Professional, Key Management, Network Security, Network Segmentation, Zero Trust Network Access, Azure Machine Learning, Security Information and Event Management, Virtualization Technology, Software Vulnerability Management, Network Routers, Cloud-native Network Functions (CNF), Cloud Platform System, Software Security, Data Poisoning, Cyber Threat Analysis, HybridCloud, Firewalls (Computer Science), National Institute of Standards and Technology Cybersecurity Framework, AI Platforms, Information Technology, Patch Management, Operating System Security, Data Pipelines, Vulnerability Analysis, Vmware - **Published:** October 13, 2026 - **Apply:** https://jobs.cityofchesapeake.net/postings/18306/pre_apply ## About the Role Vocational/Educational Requirement: Requires any combination of education and experience equivalent to a bachelor's degree in computer science, cybersecurity, or a closely related field. Experience: In addition to satisfying the vocational/education standards, this job class requires a minimum of four years of related, full-time equivalent experience, preferably in a broad range computer security role. Strong technical knowledge of IT infrastructure and vulnerability patch management preferred. Must have good knowledge of commercial compliance and regulatory standards (e.g. Payment Card Industry [PCI], Health Insurance Portability and Accountability Act [HIPAA]). Special Certifications and Licenses: Requires a valid driver's license and a driving record that is in compliance with City Driving Standards. Industry-related certifications (e.g. (ISC)2 Certified Information Systems Security Professional [CISSP], , CompTIA CySA+, GIAC CSEC) are preferred but not required., * Experience with information system security and network security practices - Identity and Access Management, Privileged Access Management, Incident Management, Security baseline, and configurations * Experience with next-generation firewalls, network security configurations, endpoint/XDR, and cloud architectures * Strong understanding of Zero Trust principles and NIST/CIS hardening standards * Experience with cybersecurity risk management, threat analysis and incident response * Working knowledge of security frameworks and compliance regulations; NIST CSF, PCI, HIPAA * 3 years of experience configuring, managing, and securing servers and network devices to ensure system and network security safeguards are in place and meet security policy and compliance requirements * 3 years of experience with evaluating internal and external security posture to review and make recommendations for improving organizational security posture * 1 year of application security experience with vulnerability management tools to conduct application vulnerability scanning and remediation * 1 year of experience designing, implementing and securing cloud environments (Google, Microsoft, Amazon) * Experience architecting hybrid on-prem/cloud security models. * Knowledge of IoT/OT/SCADA security. * Experience with CASB, SaaS posture management, DLP, and email security platforms. * Strong understanding of regulatory requirements and industry standards. * Experience with third-party, vendor supply chain security management practices Posting Detail Information, C = Continuously- 2/3 or more of the time. F = Frequently- From 1/3 to 2/3 of the time. O = Occasionally- Up to 1/3 of the time. R = Rarely- Less than 1 hour per week. N = Never- Never occurs. Time Pressures Continuously- 2/3 or more of the time. Emergency Situations Occasionally- Up to 1/3 of the time. Frequent Change of Tasks Continuously- 2/3 or more of the time. Irregular Work Schedule/Overtime Occasionally- Up to 1/3 of the time. Performing Multiple Tasks Simultaneously Continuously- 2/3 or more of the time. Working Closely with Others as Part of a Team Continuously- 2/3 or more of the time., 1. * Do you possess a valid driver's license and a driving record that is in compliance with the City's Driving Standards? Please review position requirements for details. + Yes + No ## Description Are you a cybersecurity professional with a sharp eye for threats and a passion for protecting data and infrastructure? The City of Chesapeake is seeking a Cybersecurity Engineer to join our security team and help defend critical systems across the enterprise. In this role, you'll play a critical part in strengthening our cybersecurity capabilities - proactively identifying, analyzing, and responding to threats, engineering secure solutions, and driving improvements that enhance the resilience and effectiveness of our security program. What You'll Do: Security Architecture & Network Security * Design, implement, and maintain enterprise security architectures with a strong emphasis on network security, including hybrid cloud networking, virtualization, secure routing, segmentation, and modern perimeter designs. * Define and enforce Zero Trust security principles centered on network micro-segmentation, identity-aware access control, secure connectivity patterns, and layered network defenses. * Create and maintain security reference architectures, standards, and design documentation covering network topology, firewalling, secure connectivity, encryption strategies, and inter-system communication paths. * Provide architectural oversight for firewalls, routers, switches, VPNs, endpoint security/XDR, email security, SIEM telemetry, and vulnerability management, ensuring consistent and effective network security control implementation. * Conduct threat modeling and architectural risk assessments prioritizing network attack surfaces, segmentation gaps, lateral-movement risks, and protocol vulnerabilities aligned with NIST, CIS, ISO 27001, HIPAA, CJIS, PCI, and related frameworks. * Coordinate penetration testing with focus on network exploitation paths, segmentation enforcement, firewall rule validation, secure remote access, and drive remediation activities. * Define secure network design patterns for on-premises, hybrid, and cloud networks, including segmentation and perimeter architectures. AI Security * Define and govern security requirements for AI/ML platforms, data pipelines, and model interfaces. * Implement controls to mitigate threats such as prompt injections, model theft, data poisoning, and unauthorized API access. * Establish security requirements for AI workloads handling sensitive data, including secure connectivity, encrypted endpoints, audit logging, and compliance-aligned data-access governance. * Govern secure data-sharing patterns between AI platforms and inter-agency partners (law enforcement, city utilities, health departments) by defining trusted networks, cross-domain access controls. Cloud Security * Design secure Azure and AWS environments including segmentation, identity integration, private access, and firewalling. * Oversee cloud-native security controls (Azure Firewall, NSGs/ASGs, Security Groups, Network Firewall, CSPM, secrets management). * Ensure cloud environments supporting critical infrastructure utilize hardened network controls, secure OT/IT cloud connectors, and monitored integration points. Virtualization & Operating System Security * Define secure configuration for VMware/Hyper-V, virtual switches, hardened templates, and workload segmentation. * Provide guidance for securing Windows, Linux, IoT, OT, and SCADA environments. Threat Detection & Response * Triage, analyze, and respond to threats, ensuring timely escalation and coordinated remediation actions. * Continuously monitor security alerts and telemetry to identify anomalous behavior, potential intrusions, and emerging threats. * Define detection engineering requirements for SIEM/XDR platforms and guide proactive threat-hunting activities. * Leverage threat intelligence to enrich detections, validate findings, and improve visibility into adversary tactics and techniques. * Support incident response architecture, forensics needs, containment strategies, and recovery efforts to minimize impact and strengthen resilience., Overall Physical Strength Demands S=Sedentary - Exerting up to 10 lbs. occasionally or small weights frequently; sitting most of the time. Physical Demands C = Continuously- 2/3 or more of the time. F = Frequently- From 1/3 to 2/3 of the time. O = Occasionally- Up to 1/3 of the time. R = Rarely- Less than 1 hour per week. N = Never- Never occurs. Standing Frequently- From 1/3 to 2/3 of the time. Sitting Frequently- From 1/3 to 2/3 of the time. Walking Frequently- From 1/3 to 2/3 of the time. Lifting Rarely- Less than 1 hour per week. Lifting Amount Exerting up to 10 lbs Carrying Rarely- Less than 1 hour per week. Carrying Weight Exerting up to 10 lbs Pushing/Pulling Rarely- Less than 1 hour per week. Pushing/Pulling Weight Exerting up to 10 lbs Reaching Occasionally- Up to 1/3 of the time. Handling Frequently- From 1/3 to 2/3 of the time. Fine Dexterity Continuously- 2/3 or more of the time. Kneeling Rarely- Less than 1 hour per week. Crouching Rarely- Less than 1 hour per week. Crawling Rarely- Less than 1 hour per week. Bending Occasionally- Up to 1/3 of the time. Twisting Rarely- Less than 1 hour per week. Climbing Rarely- Less than 1 hour per week. Balancing Rarely- Less than 1 hour per week. Vision Continuously- 2/3 or more of the time. Hearing Continuously- 2/3 or more of the time. Talking Continuously- 2/3 or more of the time. Foot Controls N = Never Machines, Tools, Equipment and Work Aids Used Computers and peripherals Protective Equipment Required Health and Safety