Cybersecurity Engineer

GENERAL DESCRIPTION

Want to join a high-performing organization? Want to make a positive impact on the Roanoke County community by strengthening the security and reliability of the IT systems people depend on every day? The County of Roanoke's nationally recognized and award-winning Department of Information Technology (IT) aligns the county's information technology infrastructure and systems to the needs of the community.

The Roanoke County Cybersecurity Engineer is responsible for designing, implementing, maintaining, and continuously improving the County’s cybersecurity infrastructure and defense systems. This position plays a critical role in protecting the confidentiality, integrity, and availability of County information systems and data assets by engineering security solutions, performing threat and vulnerability management, and ensuring compliance with federal, state, and local security standards. The Cybersecurity Engineer is a key member of Roanoke County’s Cybersecurity Division responsible for engineering, implementing, and maintaining advanced security controls to safeguard the County’s information systems, data, and infrastructure. This role supports the County’s mission by ensuring the confidentiality, integrity, and availability of technology resources across all departments. The Cybersecurity Engineer serves as a technical subject matter expert in cybersecurity architecture, endpoint protection, threat detection, network defense, identity and access management (IAM), and incident response. This role works closely with the information security leadership, County IT teams, and external cybersecurity partners to develop and sustain proactive defenses against cyber threats. The position also contributes to strategic initiatives that align with the County’s overarching Cybersecurity Policy and National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF 2.0). Additional responsibilities include cyber-risk management, vulnerability management, system security assessments, incident response along with in-depth collaboration with the County’s information security leadership in developing and deploying the overall Roanoke County cybersecurity strategy. Duties include assisting the information security leadership in building, deploying, and maturing a cybersecurity framework (CSF), disaster recovery and continuity of operations, along with secure network architecture designs, and cybersecurity monitoring solutions. Other duties may be assigned as needed.

ESSENTIAL JOB FUNCTIONS

• ~ Ensure security requirements are included in enterprise architecture, system design, and IT projects; collaborate with teams to embed secure configurations and best practices.
• ~ Design, implement, and optimize with other IT teams to secure network and system architectures, including firewalls, Intrusion Detection Systems (IDS)/(IPS) Intrusion Prevention Systems, endpoint security, encryption, and authentication mechanisms.
• ~ Perform regular security assessments, penetration testing, configuration reviews, and vulnerability management; analyze logs and security data to detect and mitigate threats.
• ~ Assess the effectiveness of security controls, recommend risk mitigation strategies, and ensure systems operate within acceptable risk levels and comply with policies and standards.
• ~ Coordinate with the Information Security Leadership and the external security operations center (SOC) to respond to cyber incidents, conduct root cause analysis, support containment activities, and contribute to improving incident response processes.
• ~ Enforce and maintain security policies, procedures, standards, and documentation; provide reporting on security posture, vulnerabilities, and incidents.
• ~ Assist in security integration, testing, monitoring, maintenance, privileged account management, and system hardening activities to support secure operations.
• ~ Work with information security leadership to develop and implement cybersecurity awareness efforts.
• ~ Stay current on emerging threats and technologies, research new security solutions, and continuously improve security processes and automation.

REQUIREMENTS/PREFERENCES

Education

Required: Bachelor’s degree in a computer-related field or equivalent combination of education and experience.
Preferred: Master’s degree in a computer-related field or equivalent combination of education and experience and certifications.

Experience

Required: Five or more years of progressively responsible experience in IT or information security.

Certifications/Licenses

Required: Valid Virginia driver’s license with a good driving record. COMPTIA Security+ and ISC2- CISSP or equivalent Cybersecurity Certification.

Knowledge, Skills and Abilities

Networking & Protocols – In-depth knowledge of TCP/IP, DNS, VPNs, firewalls, proxies, and routing/switching concepts. Operating Systems & Platforms – Advanced understanding of Windows, Linux, and cloud environments (AWS, Azure, GCP). Cybersecurity Frameworks & Standards – Familiarity with NIST CSF, ISO 27001, CIS Controls, MITRE ATT&CK, and regulatory requirements (HIPAA, PCI-DSS, CJIS, etc.). Threats & Attack Vectors – Knowledge of malware, ransomware, phishing, social engineering, insider threats, and advanced persistent threats (APTs). Cryptography & Data Protection – Understanding of encryption, hashing, PKI, TLS/SSL, and key management. Vulnerability & Risk Management – Awareness of tools (Nessus, Qualys, Tenable) and methodologies for risk assessments. Incident Response & Forensics – Knowledge of digital forensics, evidence collection, and post-incident analysis. Secure Systems & Software Design – Principles of least privilege, defense-in-depth, and secure coding practices. Security Tool Proficiency – Skilled in configuring and managing SIEMs, IDS/IPS, EDR, DLP, firewalls, and WAFs. Scripting & Automation – Ability to automate tasks using Python, PowerShell, or Bash. Vulnerability Assessment & Pen Testing – Skilled in using penetration testing tools (Metasploit, Burp Suite, Wireshark, Nmap). Cloud Security Engineering – Skilled in securing cloud workloads, implementing IAM, and designing cloud-native security controls. Log & Event Analysis – Proficient in analyzing large volumes of logs to detect anomalies. System Hardening – Ability to configure operating systems, applications, and networks for maximum security. Project Management – Skilled in planning, executing, and documenting security projects. Communication Skills – Strong written and verbal communication to explain technical risks to non-technical stakeholders. Problem-Solving & Analytical Thinking – Ability to identify, analyze, and resolve complex cybersecurity issues. Adaptability – Ability to respond quickly to emerging threats and shifting security landscapes. Collaboration & Leadership – Ability to work effectively in cross-functional teams and mentor junior staff. Strategic Thinking – Ability to design long-term security strategies aligned with business goals. Attention to Detail – Ability to spot subtle anomalies and ensure precision in configurations and documentation. Decision-Making Under Pressure – Ability to make quick, sound decisions during security incidents. Continuous Learning – Ability to keep pace with rapidly evolving technologies and threat environments. Ability to work alone and in teams; work occasional nights, weekends, holidays and be on emergency on-call status for network problems.

Supervisory Responsibilities

None.

Additional Requirements

Must be a United States citizen or a lawful permanent resident of the United States and eligible for naturalization. Employment is subject to a complete criminal history background search with acceptable results. Must be able to perform the job as described in the Physical and Environmental Demands section of this job description. Must be available to provide after-hours emergency support as needed.