Cybersecurity Engineer 3

Cybersecurity Engineer

Responsibilities:

• You will be working with our more established contractors and staff to focus on several web and Windows applications used both by internal ELECT staff and constituents of the Commonwealth of Virginia.
• The candidate will need expertise in all aspects of IT security and cloud security and experience working in an Agile/Scrum development environment interacting with technical and non-technical stakeholders.
• Candidate will need to have extensive knowledge of cybersecurity practices, industry security standards, and regulatory standards. A bachelor's degree and/or applicable recognized industry certifications are strongly desired and will help you stand out in this position.
• ELECT uses mobile and responsive design practices, so a familiarity with these methodologies would be a plus.

Requirements:

• 5+ years in IT security or cloud security roles required.
• 3+ years of hands-on experience securing Azure environments.
• Bachelor's degree in Computer Science, Cybersecurity, or related field or equivalent work experience required.
• Experience with Azure Security Services (Azure Defender, MS Sentinel, Azure Key Vault, Azure Policy and Blueprints, Azure Security Center) required.
• Experience with Azure Active Directory (AAD), including conditional access, MFA, and identity protection required.
• Extensive knowledge of PIM and RBAC required.
• Experience with NSGs, ASGs, VPN, ExpressRoute, and hybrid connectivity security required.
• Ability to implement and monitor compliance with regulatory standards such as NIST, ISO 27001, GDPR, etc. is required.
• Extensive knowledge of threat modeling and vulnerability management, SIEM/SOAR tuning and response workflows, and security alert triage and forensics.
• Ability to perform scripting and automation using PowerShell, Bicep, ARM templates, or Terraform.
• Ability to perform integration with CI/CD pipelines for secure deployments (GitHub Actions, Azure DevOps).
• Ability to create and deliver security architecture reports and documentation.
• Experience in risk assessment and mitigation strategies.