Cybersecurity Engineer

Position Details

Position Information

Working Title of Vacant Position Cybersecurity Engineer Job Type Full Time Posting Type Public Number of Vacancies 1 Department INFORMATION TECHNOLOGY Division IT CYBER SECURITY SVCS Requisition Number 2026361 Number of hours worked per week 40+ Work Schedule

8:00 AM to 5:00 PM; Monday - Friday.

Employees may be expected to work hours in excess of their normally scheduled hours in response to short-term department needs and/or City-wide emergencies.

Work Site Location Chesapeake, VA Position Driving Requirement O - Occasional Pay Grade GE20 Pay Basis Semi-Monthly Advertised Salary

$87,075-$120,000; Depending on qualifications and experience.

Job Description

Are you a cybersecurity professional with a sharp eye for threats and a passion for protecting data and infrastructure? The City of Chesapeake is seeking a Cybersecurity Engineer to join our security team and help defend critical systems across the enterprise.

In this role, you'll be on the front lines of our cybersecurity operations - identifying, investigating, and responding to security threats, while also helping to assess and improve our overall security posture. You'll work with cutting-edge tools and take part in the City's push to securely modernize its technology landscape.

What You'll Do:

Security Architecture

• Design, implement and maintain enterprise security architectures spanning hybrid cloud, virtualization, network infrastructure, and AI systems.
• Develop Zero Trust security practices including micro‑segmentation, least privilege, identity‑driven access, and defense‑in‑depth controls.
• Create and maintain reference architectures, security standards, and architectural design documentation.
• Conduct threat modeling and architectural risk assessments aligned with NIST, CIS, ISO 27001, HIPAA, CJIS, PCI, and related frameworks.

AI Security

• Define and govern security requirements for AI/ML platforms, data pipelines, and model interfaces.
• Implement controls to mitigate threats such as prompt injection, model theft, data poisoning, and unauthorized API access.

Cloud Security

• Design secure Azure and AWS environments including segmentation, identity integration, private access, and firewalling.
• Oversee cloud‑native security controls (Azure Firewall, NSGs/ASGs, Security Groups, Network Firewall, CSPM, secrets management).

Security Engineering Oversight

• Provide security principles and oversight for firewalls, network devices, endpoint security/XDR, email security, SIEM telemetry, and vulnerability management.
• Coordinate penetration testing and drive remediation efforts.

Network Security

• Define secure network design patterns for on‑premises, hybrid, and cloud networks, including segmentation and perimeter architectures.
• Establish standards for firewall policies, TLS decryption, IPS, URL filtering, and SD‑WAN/wireless security.

Virtualization & Operating System Security

• Define secure configuration for VMware/Hyper‑V, virtual switches, hardened templates, and workload segmentation.
• Define secure configuration guidelines for Windows, Linux, IoT, OT, and SCADA environments.

Threat Detection & Incident Response

• Define detection engineering requirements for SIEM/XDR and guide threat‑hunting activities.
• Support incident response architecture, forensics needs, and containment strategies.

Governance, Risk & Compliance

• Participate in risk assessments and define mitigation strategies.
• Support audit requirements, policy development, compliance documentation, and third‑party risk reviews.

Documentation & Collaboration

• Produce clear documentation, diagrams, and executive‑level reports.
• Collaborate with networking, systems, cloud, and application teams on architectural reviews and implementation

Required Qualifications

Vocational/Educational Requirement:

Requires any combination of education and experience equivalent to a bachelor's degree in computer science, cybersecurity, or a closely related field.

Experience:

In addition to satisfying the vocational/education standards, this job class requires a minimum of four years of related, full-time equivalent experience, preferably in a broad range computer security role. Strong technical knowledge of IT infrastructure and vulnerability patch management preferred. Must have good knowledge of commercial compliance and regulatory standards (e.g. Payment Card Industry [PCI], Health Insurance Portability and Accountability Act [HIPAA]).

Special Certifications and Licenses:

Requires a valid driver's license and a driving record that is in compliance with City Driving Standards. Industry-related certifications (e.g. (ISC)2 Certified Information Systems Security Professional [CISSP], , CompTIA CySA+, GIAC CSEC) are preferred but not required.

Special Requirements:

Employees may be expected to work hours in excess of their normally scheduled hours in response to short-term department needs and/or City-wide emergencies. Emergency operations support work and work locations may be outside of normal job duties.

Preferred Qualifications

• Experience with information system security and network security practices - Identity and Access Management, Privileged Access Management, Incident Management, Security baseline, and configurations
• Experience with next‑generation firewalls, network security configurations, endpoint/XDR, and cloud architectures
• Strong understanding of Zero Trust principles and NIST/CIS hardening standards
• Experience with cybersecurity risk management, threat analysis and incident response
• Working knowledge of security frameworks and compliance regulations; NIST CSF, PCI, HIPAA
• 3 years of experience configuring, managing, and securing servers and network devices to ensure system and network security safeguards are in place and meet security policy and compliance requirements
• 3 years of experience with evaluating internal and external security posture to review and make recommendations for improving organizational security posture
• 1 year of application security experience with vulnerability management tools to conduct application vulnerability scanning and remediation
• 1 year of experience working with Enterprise Applications to ensure applications are meeting security standards as part of an SDLC or OWASP principles
• Experience designing, implementing and securing cloud environments (Google, Microsoft, Amazon)
• Experience architecting hybrid on‑prem/cloud security models.
• Knowledge of IoT/OT/SCADA security.
• Experience with CASB, SaaS posture management, DLP, and email security platforms.
• Strong understanding of regulatory requirements and industry standards.
• Proven analytical and problem-solving abilities
• Ability to effectively prioritize and execute tasks in a high-pressure environment
• Good written, oral, and interpersonal communication skills
• Ability to conduct research into IT security issues and products as required
• Ability to present ideas in business-friendly and user-friendly language
• Highly self-motivated and directed
• Keen attention to detail
• Experience with third-party, vendor supply chain security management practices

Posting Detail Information

Job Open Date 07/31/2026 Job Close Date 08/12/2026 Open Continuous Special Instructions to Applicants

This position is not eligible for third-party (i.e., contractor/staffing agency) placements. For questions about this position, please email selection@cityofchesapeake.net.

Information Technology based positions must meet requirements specified in Criminal Justice Information System (CJIS) policy for access to the Virginia Criminal Information Network (VCIN).

ADA Checklist

Overall Physical Strength Demands

Overall Physical Strength Demands S=Sedentary - Exerting up to 10 lbs. occasionally or small weights frequently; sitting most of the time.

Physical Demands

C = Continuously- 2/3 or more of the time. F = Frequently- From 1/3 to 2/3 of the time. O = Occasionally- Up to 1/3 of the time. R = Rarely- Less than 1 hour per week. N = Never- Never occurs.

Standing Frequently- From 1/3 to 2/3 of the time. Sitting Frequently- From 1/3 to 2/3 of the time. Walking Frequently- From 1/3 to 2/3 of the time. Lifting Rarely- Less than 1 hour per week. Lifting Amount Exerting up to 10 lbs Carrying Rarely- Less than 1 hour per week. Carrying Weight Exerting up to 10 lbs Pushing/Pulling Rarely- Less than 1 hour per week. Pushing/Pulling Weight Exerting up to 10 lbs Reaching Occasionally- Up to 1/3 of the time. Handling Frequently- From 1/3 to 2/3 of the time. Fine Dexterity Continuously- 2/3 or more of the time. Kneeling Rarely- Less than 1 hour per week. Crouching Rarely- Less than 1 hour per week. Crawling Rarely- Less than 1 hour per week. Bending Occasionally- Up to 1/3 of the time. Twisting Rarely- Less than 1 hour per week. Climbing Rarely- Less than 1 hour per week. Balancing Rarely- Less than 1 hour per week. Vision Continuously- 2/3 or more of the time. Hearing Continuously- 2/3 or more of the time. Talking Continuously- 2/3 or more of the time. Foot Controls N = Never Machines, Tools, Equipment and Work Aids Used

Computers and peripherals

Protective Equipment Required

Health and Safety

D = Daily W = Several Times Per Week M = Several Times Per Month S = Seasonally N = Never

Mechanical Hazards N = Never Chemical Hazards N = Never Electrical Hazards N = Never Fire Hazards N = Never Explosives N = Never Communicable Diseases N = Never Physical Danger or Abuse N = Never Other If Other, Description

Environmental Factors

D = Daily W = Several Times Per Week M = Several Times Per Month S = Seasonally N = Never

Dirt and Dust N = Never Extreme Temperatures N = Never Noise and Vibration N = Never Fumes and Odors N = Never Wetness/Humidity N = Never Darkness or Poor Lighting N = Never Primary Work Location Office Environment

Non-Physical Demands

C = Continuously- 2/3 or more of the time. F = Frequently- From 1/3 to 2/3 of the time. O = Occasionally- Up to 1/3 of the time. R = Rarely- Less than 1 hour per week. N = Never- Never occurs.

Time Pressures Continuously- 2/3 or more of the time. Emergency Situations Occasionally- Up to 1/3 of the time. Frequent Change of Tasks Continuously- 2/3 or more of the time. Irregular Work Schedule/Overtime Occasionally- Up to 1/3 of the time. Performing Multiple Tasks Simultaneously Continuously- 2/3 or more of the time. Working Closely with Others as Part of a Team Continuously- 2/3 or more of the time. Tedious or Exacting Work Frequently- From 1/3 to 2/3 of the time. Noisy/Distracting Environment Rarely- Less than 1 hour per week. Other N = Never If Other, Description Can anyone assist the employee in performing the primary tasks assigned to this position? If yes, identify the eligible task(s)

Yes, Security Analyst

Professional References

Professional References

Please provide contact information for professional references.

Minimum Requests 0 Maximum Requests 4

Supplemental Questions

Required fields are indicated with an asterisk (*).

• • Do you possess a valid driver's license and a driving record that is in compliance with the City's Driving Standards? Please review position requirements for details.
• Yes
• No

Applicant Documents

Required Documents

• Resume

Optional Documents

• Cover Letter