Cybersecurity Engineer

Are you a cybersecurity professional with a sharp eye for threats and a passion for protecting data and infrastructure? The City of Chesapeake is seeking a Cybersecurity Engineer to join our security team and help defend critical systems across the enterprise.

In this role, you'll play a critical part in strengthening our cybersecurity capabilities - proactively identifying, analyzing, and responding to threats, engineering secure solutions, and driving improvements that enhance the resilience and effectiveness of our security program.

What You'll Do:

Security Architecture & Network Security

• Design, implement, and maintain enterprise security architectures with a strong emphasis on network security, including hybrid cloud networking, virtualization, secure routing, segmentation, and modern perimeter designs.
• Define and enforce Zero Trust security principles centered on network micro-segmentation, identity-aware access control, secure connectivity patterns, and layered network defenses.
• Create and maintain security reference architectures, standards, and design documentation covering network topology, firewalling, secure connectivity, encryption strategies, and inter-system communication paths.
• Provide architectural oversight for firewalls, routers, switches, VPNs, endpoint security/ XDR , email security, SIEM telemetry, and vulnerability management, ensuring consistent and effective network security control implementation.
• Conduct threat modeling and architectural risk assessments prioritizing network attack surfaces, segmentation gaps, lateral-movement risks, and protocol vulnerabilities aligned with NIST , CIS , ISO 27001, HIPAA , CJIS , PCI , and related frameworks.
• Coordinate penetration testing with focus on network exploitation paths, segmentation enforcement, firewall rule validation, secure remote access, and drive remediation activities.
• Define secure network design patterns for on-premises, hybrid, and cloud networks, including segmentation and perimeter architectures.

AI Security

• Define and govern security requirements for AI/ML platforms, data pipelines, and model interfaces.
• Implement controls to mitigate threats such as prompt injections, model theft, data poisoning, and unauthorized API access.
• Establish security requirements for AI workloads handling sensitive data, including secure connectivity, encrypted endpoints, audit logging, and compliance-aligned data-access governance.
• Govern secure data-sharing patterns between AI platforms and inter-agency partners (law enforcement, city utilities, health departments) by defining trusted networks, cross-domain access controls.

Cloud Security

• Design secure Azure and AWS environments including segmentation, identity integration, private access, and firewalling.
• Oversee cloud-native security controls (Azure Firewall, NSGs/ASGs, Security Groups, Network Firewall, CSPM , secrets management).
• Ensure cloud environments supporting critical infrastructure utilize hardened network controls, secure OT/IT cloud connectors, and monitored integration points.

Virtualization & Operating System Security

• Define secure configuration for VMware/Hyper-V, virtual switches, hardened templates, and workload segmentation.
• Provide guidance for securing Windows, Linux, IoT, OT, and SCADA environments.

Threat Detection & Response

• Triage, analyze, and respond to threats, ensuring timely escalation and coordinated remediation actions.
• Continuously monitor security alerts and telemetry to identify anomalous behavior, potential intrusions, and emerging threats.
• Define detection engineering requirements for SIEM / XDR platforms and guide proactive threat-hunting activities.
• Leverage threat intelligence to enrich detections, validate findings, and improve visibility into adversary tactics and techniques.
• Support incident response architecture, forensics needs, containment strategies, and recovery efforts to minimize impact and strengthen resilience.

Required Qualifications

Vocational/Educational Requirement:
Requires any combination of education and experience equivalent to a bachelor's degree in computer science, cybersecurity, or a closely related field.

Experience:
In addition to satisfying the vocational/education standards, this job class requires a minimum of four years of related, full-time equivalent experience, preferably in a broad range computer security role. Strong technical knowledge of IT infrastructure and vulnerability patch management preferred. Must have good knowledge of commercial compliance and regulatory standards (e.g. Payment Card Industry [ PCI ], Health Insurance Portability and Accountability Act [ HIPAA ]).

Special Certifications and Licenses:
Requires a valid driver's license and a driving record that is in compliance with City Driving Standards . Industry-related certifications (e.g. ( ISC )2 Certified Information Systems Security Professional [ CISSP ], , CompTIA CySA+, GIAC CSEC ) are preferred but not required.

Special Requirements:
Employees may be expected to work hours in excess of their normally scheduled hours in response to short-term department needs and/or City-wide emergencies. Emergency operations support work and work locations may be outside of normal job duties.

Preferred Qualifications

• Experience with information system security and network security practices - Identity and Access Management, Privileged Access Management, Incident Management, Security baseline, and configurations
• Experience with next-generation firewalls, network security configurations, endpoint/ XDR , and cloud architectures
• Strong understanding of Zero Trust principles and NIST / CIS hardening standards
• Experience with cybersecurity risk management, threat analysis and incident response
• Working knowledge of security frameworks and compliance regulations; NIST CSF , PCI , HIPAA
• 3 years of experience configuring, managing, and securing servers and network devices to ensure system and network security safeguards are in place and meet security policy and compliance requirements
• 3 years of experience with evaluating internal and external security posture to review and make recommendations for improving organizational security posture
• 1 year of application security experience with vulnerability management tools to conduct application vulnerability scanning and remediation
• 1 year of experience designing, implementing and securing cloud environments (Google, Microsoft, Amazon)
• Experience architecting hybrid on-prem/cloud security models.
• Knowledge of IoT/OT/ SCADA security.
• Experience with CASB , SaaS posture management, DLP , and email security platforms.
• Strong understanding of regulatory requirements and industry standards.
• Experience with third-party, vendor supply chain security management practices