Cyber Security Engineer

Stafford County, VA is seeking an onsite Cyber Security Engineer to engineer, administer, and continuously improve cybersecurity capabilities across Microsoft 365, SIEM, IDS/IPS, vulnerability management, monitoring, and incident response.

Responsibilities

• Administer, configure, and continuously improve Microsoft 365 security and compliance, including identity, endpoint, email, device, and data protection capabilities
• Operate and enhance the County’s SIEM and security monitoring program, including log integration, detection development, alert tuning, dashboards, reporting, and response automation
• Monitor, triage, investigate, and document security alerts and incidents across cloud, endpoint, identity, email, application, and network environments
• Coordinate cybersecurity incident response operations, including containment, eradication, recovery, evidence preservation, root-cause analysis, after-action review, and corrective actions
• Manage the vulnerability management program: asset coverage, scanning, validation, risk-based prioritization, remediation tracking, exceptions, and stakeholder reporting
• Perform threat hunting and technical investigations using security telemetry, threat intelligence, and other available data sources
• Evaluate security findings and control effectiveness, identify gaps, and recommend practical risk-reduction measures
• Partner with infrastructure, application, cloud, and business teams to securely design, assess, and integrate systems, services, and data architectures
• Create and maintain cybersecurity standards, procedures, playbooks, diagrams, metrics, reports, and technical documentation
• Support audit, compliance, governance, risk management, security awareness, continuity, disaster recovery, and cybersecurity exercises with technical analysis and remediation support
• Maintain knowledge of emerging threats, vulnerabilities, technologies, and industry practices and recommend improvements aligned to County operations
• Provide professional guidance, technical expertise, and security recommendations to staff, leadership, vendors, and project teams
• Participate in 24x7 on-call rotations
• May support after-hours incident response, maintenance, or emergency operations
• Perform related tasks as required

Requirements

• Comprehensive knowledge of cybersecurity engineering, security operations, cloud security, endpoint security, identity security, email security, data protection, and incident response principles
• Strong working knowledge of Microsoft 365 security and compliance, including identity, endpoint, device, email, and data protection administration
• Thorough knowledge of SIEM technologies, log management, security analytics, detection development, alert tuning, and response automation concepts
• Thorough knowledge of vulnerability management, risk-based remediation, configuration assessment, and security control validation
• Knowledge of common attack techniques and threat vectors, including malware behavior, identity compromise, phishing, and business email compromise
• Knowledge of cybersecurity frameworks, audit, compliance, governance, and risk management practices applicable to local government environments
• Skill in analyzing security events, correlating data from multiple sources, identifying root causes, and developing corrective actions
• Skill in administering and integrating security platforms, cloud services, APIs, scripts, and automation tools
• Strong written and verbal communication, interpersonal, customer service, documentation, and problem-solving skills
• Ability to communicate technical security findings, risk, impact, and remediation guidance to both technical and non-technical audiences
• Ability to manage and prioritize multiple incidents, projects, remediation efforts, and competing deliverables
• Ability to work on call as needed
• Ability to work independently, exercise sound judgment, maintain confidentiality, learn new technologies, and build effective working relationships
• Any combination of education and experience equivalent to a bachelor’s degree in information security, computer science, cyber security, or related field, and 5 to 7 years of combined cyber security and/or information security experience
• Possession of a driver’s license valid in the Commonwealth of Virginia

Technology Focus

• Microsoft 365
• SIEM
• Intrusion Detection and Prevention Systems (IDS/IPS)
• Cloud services
• Microsoft 365 security and compliance
• Security information and event management (SIEM)
• Vulnerability management
• Security monitoring
• Incident response

Compensation & Location

• Location: Stafford County, VA (onsite)
• Salary: USD 96,720 to 169,270 per year
• Hiring range: $96,720.00 to $132,995.20 annually based on experience
• Full salary range: $96,720.00 to $169,270.40 annually

Education

• Bachelor’s degree in information security, computer science, cyber security, or a related field

Work Environment & Physical Requirements

• Light work: exertion of up to 20 pounds force occasionally, up to 10 pounds frequently, and negligible force constantly to move objects
• May require sitting, bending, kneeling, crouching, crawling, and repetitive hand motions
• Vocal communication required; hearing required at normal spoken word levels
• Visual acuity required for preparing and analyzing written or computer data and observing surroundings
• Subject to inside and outside environmental conditions

Notes

• Direct deposit of bi-weekly paychecks into one or more financial institutions of choice is required at hire
• Proper identification must be shown at hire to complete necessary paperwork for compliance with the Immigration Control and Reform Act of 1986