Cybersecurity Engineer

The City of Chesapeake is seeking a Cybersecurity Engineer to strengthen enterprise cybersecurity capabilities through threat identification, response, and secure engineering. This onsite role focuses on security architecture and network security, with added responsibility for cloud and virtualization security, detection and response, and governance of AI security requirements.

If you build and document security reference architectures, assess risk across network attack surfaces, and help operationalize defenses across hybrid environments, this position aligns with your skill set.

Responsibilities

• Design, implement, and maintain enterprise security architectures with emphasis on network security, including hybrid cloud networking, virtualization, secure routing, segmentation, and modern perimeter designs.
• Define and enforce Zero Trust security principles centered on network micro-segmentation, identity-aware access control, secure connectivity patterns, and layered network defenses.
• Create and maintain security reference architectures, standards, and design documentation covering network topology, firewalling, secure connectivity, encryption strategies, and inter-system communication paths.
• Provide architectural oversight for firewalls, routers, switches, VPNs, endpoint security/XDR, email security, SIEM telemetry, and vulnerability management to ensure consistent network security control implementation.
• Conduct threat modeling and architectural risk assessments focused on network attack surfaces, segmentation gaps, lateral movement risks, and protocol vulnerabilities aligned with NIST, CIS, ISO 27001, HIPAA, CJIS, PCI, and related frameworks.
• Coordinate penetration testing focused on network exploitation paths, segmentation enforcement, firewall rule validation, secure remote access, and drive remediation activities.
• Define secure network design patterns for on-premises, hybrid, and cloud networks, including segmentation and perimeter architectures.
• Define and govern security requirements for AI/ML platforms, data pipelines, and model interfaces.
• Implement controls to mitigate threats including prompt injections, model theft, data poisoning, and unauthorized API access.
• Establish security requirements for AI workloads handling sensitive data, including secure connectivity, encrypted endpoints, audit logging, and compliance-aligned data-access governance.
• Govern secure data-sharing patterns between AI platforms and inter-agency partners (law enforcement, city utilities, health departments) by defining trusted networks and cross-domain access controls.
• Design secure Azure and AWS environments including segmentation, identity integration, private access, and firewalling.
• Oversee cloud-native security controls such as Azure Firewall, NSGs/ASGs, Security Groups, Network Firewall, CSPM, and secrets management.
• Ensure cloud environments supporting critical infrastructure use hardened network controls, secure OT/IT cloud connectors, and monitored integration points.
• Define secure configuration for VMware/Hyper-V, virtual switches, hardened templates, and workload segmentation.
• Provide guidance for securing Windows, Linux, IoT, OT, and SCADA environments.
• Triage, analyze, and respond to threats with timely escalation and coordinated remediation to minimize impact and strengthen resilience.
• Continuously monitor security alerts and telemetry to identify anomalous behavior, potential intrusions, and emerging threats.
• Define detection engineering requirements for SIEM/XDR platforms and guide proactive threat-hunting activities.
• Use threat intelligence to enrich detections, validate findings, and improve visibility into adversary tactics and techniques.
• Support incident response architecture, forensics needs, containment strategies, and recovery efforts.

Requirements

• Any combination of education and experience equivalent to a bachelor’s degree in computer science, cybersecurity, or a closely related field.
• Minimum 4 years of related, full-time equivalent experience, preferably across a broad range computer security roles.
• Strong technical knowledge of IT infrastructure and vulnerability patch management (preferred).
• Good knowledge of commercial compliance and regulatory standards, including PCI and HIPAA (as examples).
• Valid driver’s license and a driving record compliant with City Driving Standards.
• Industry certifications (e.g., (ISC)2 CISSP, CompTIA CySA+, GIAC CSEC) are preferred but not required.
• May be expected to work hours beyond normal scheduling in response to short-term needs or city-wide emergencies, and may be asked to support emergency operations.
• Information Technology based positions must meet requirements specified in Criminal Justice Information System (CJIS) policy for access to the Virginia Criminal Information Network (VCIN).

Preferred Qualifications

• Experience with information system security and network security practices such as Identity and Access Management, Privileged Access Management, Incident Management, security baselines, and configurations.
• Experience with next-generation firewalls, endpoint/XDR, network security configurations, and cloud architectures.
• Strong understanding of Zero Trust principles and NIST/CIS hardening standards.
• Experience with cybersecurity risk management, threat analysis, and incident response.
• Working knowledge of security frameworks and compliance regulations including NIST CSF, PCI, and HIPAA.
• 3 years configuring, managing, and securing servers and network devices to ensure safeguards meet security policy and compliance requirements.
• 3 years evaluating internal and external security posture to recommend improvements.
• 1 year of application security experience with vulnerability management tools for application vulnerability scanning and remediation.
• 1 year of experience designing, implementing, and securing cloud environments (Google, Microsoft, Amazon).
• Experience architecting hybrid on-prem/cloud security models.
• Knowledge of IoT/OT/SCADA security.
• Experience with CASB, SaaS posture management, DLP, and email security platforms.
• Experience with third-party vendor supply chain security management practices.

Technologies

• NIST, CIS, ISO 27001, HIPAA, CJIS, PCI, Zero Trust
• Azure, AWS, Azure Firewall
• NSGs/ASGs, Security Groups, Network Firewall
• CSPM, secrets management
• VMware, Hyper-V (VMware/Hyper-V)
• SIEM, XDR, endpoint security/XDR, email security, SIEM telemetry
• Vulnerability management, SIEM/XDR platforms

Job Details

• Location: Chesapeake, VA (onsite)
• Salary: USD 87,075 - 120,000 per year
• Open date: 10/13/2026
• Close date: 10/27/2026
• Open continuous: No

Application Notes

• This position is not eligible for third-party (contractor/staffing agency) placements. For questions, email [email protected].

Physical/Environmental Overview

• Primary work location: Office environment
• Overall physical strength demands: S (Sedentary), exerting up to 10 lbs occasionally or small weights frequently
• Time pressures: Continuously, 2/3 or more of the time
• Emergency situations: Occasionally, up to 1/3 of the time

Support for Primary Tasks

• Yes, Security Analyst

References: Minimum 0, Maximum 4