Cybersecurity Engineer

Position Details

Position Information

Working Title of Vacant Position Cybersecurity Engineer Job Type Full Time Posting Type Public Number of Vacancies 1 Department INFORMATION TECHNOLOGY Division IT CYBER SECURITY SVCS Requisition Number 2026361 Number of hours worked per week 40+ Work Schedule

8:00 AM to 5:00 PM; Monday - Friday.

Employees may be expected to work hours in excess of their normally scheduled hours in response to short-term department needs and/or City-wide emergencies.

Work Site Location Chesapeake, VA Position Driving Requirement O - Occasional Pay Grade GE20 Pay Basis Semi-Monthly Advertised Salary

$87,075-$120,000; Depending on qualifications and experience.

Job Description

Are you a cybersecurity professional with a sharp eye for threats and a passion for protecting data and infrastructure? The City of Chesapeake is seeking a Cybersecurity Engineer to join our security team and help defend critical systems across the enterprise.

In this role, you'll play a critical part in strengthening our cybersecurity capabilities - proactively identifying, analyzing, and responding to threats, engineering secure solutions, and driving improvements that enhance the resilience and effectiveness of our security program.

What You'll Do:

Security Architecture & Network Security

• Design, implement, and maintain enterprise security architectures with a strong emphasis on network security, including hybrid cloud networking, virtualization, secure routing, segmentation, and modern perimeter designs.
• Define and enforce Zero Trust security principles centered on network micro‑segmentation, identity‑aware access control, secure connectivity patterns, and layered network defenses.
• Create and maintain security reference architectures, standards, and design documentation covering network topology, firewalling, secure connectivity, encryption strategies, and inter‑system communication paths.
• Provide architectural oversight for firewalls, routers, switches, VPNs, endpoint security/XDR, email security, SIEM telemetry, and vulnerability management, ensuring consistent and effective network security control implementation.
• Conduct threat modeling and architectural risk assessments prioritizing network attack surfaces, segmentation gaps, lateral‑movement risks, and protocol vulnerabilities aligned with NIST, CIS, ISO 27001, HIPAA, CJIS, PCI, and related frameworks.
• Coordinate penetration testing with focus on network exploitation paths, segmentation enforcement, firewall rule validation, secure remote access, and drive remediation activities.
• Define secure network design patterns for on‑premises, hybrid, and cloud networks, including segmentation and perimeter architectures.

AI Security

• Define and govern security requirements for AI/ML platforms, data pipelines, and model interfaces.
• Implement controls to mitigate threats such as prompt injections, model theft, data poisoning, and unauthorized API access.
• Establish security requirements for AI workloads handling sensitive data, including secure connectivity, encrypted endpoints, audit logging, and compliance‑aligned data‑access governance.
• Govern secure data‑sharing patterns between AI platforms and inter‑agency partners (law enforcement, city utilities, health departments) by defining trusted networks, cross‑domain access controls.

Cloud Security

• Design secure Azure and AWS environments including segmentation, identity integration, private access, and firewalling.
• Oversee cloud‑native security controls (Azure Firewall, NSGs/ASGs, Security Groups, Network Firewall, CSPM, secrets management).
• Ensure cloud environments supporting critical infrastructure utilize hardened network controls, secure OT/IT cloud connectors, and monitored integration points.

Virtualization & Operating System Security

• Define secure configuration for VMware/Hyper‑V, virtual switches, hardened templates, and workload segmentation.
• Provide guidance for securing Windows, Linux, IoT, OT, and SCADA environments.

Threat Detection & Response

• Triage, analyze, and respond to threats, ensuring timely escalation and coordinated remediation actions.
• Continuously monitor security alerts and telemetry to identify anomalous behavior, potential intrusions, and emerging threats.
• Define detection engineering requirements for SIEM/XDR platforms and guide proactive threat‑hunting activities.
• Leverage threat intelligence to enrich detections, validate findings, and improve visibility into adversary tactics and techniques.
• Support incident response architecture, forensics needs, containment strategies, and recovery efforts to minimize impact and strengthen resilience.

Required Qualifications

Vocational/Educational Requirement:

Requires any combination of education and experience equivalent to a bachelor's degree in computer science, cybersecurity, or a closely related field.

Experience:

In addition to satisfying the vocational/education standards, this job class requires a minimum of four years of related, full-time equivalent experience, preferably in a broad range computer security role. Strong technical knowledge of IT infrastructure and vulnerability patch management preferred. Must have good knowledge of commercial compliance and regulatory standards (e.g. Payment Card Industry [PCI], Health Insurance Portability and Accountability Act [HIPAA]).

Special Certifications and Licenses:

Requires a valid driver's license and a driving record that is in compliance with City Driving Standards. Industry-related certifications (e.g. (ISC)2 Certified Information Systems Security Professional [CISSP], , CompTIA CySA+, GIAC CSEC) are preferred but not required.

Special Requirements:

Employees may be expected to work hours in excess of their normally scheduled hours in response to short-term department needs and/or City-wide emergencies. Emergency operations support work and work locations may be outside of normal job duties.

Preferred Qualifications

• Experience with information system security and network security practices - Identity and Access Management, Privileged Access Management, Incident Management, Security baseline, and configurations
• Experience with next‑generation firewalls, network security configurations, endpoint/XDR, and cloud architectures
• Strong understanding of Zero Trust principles and NIST/CIS hardening standards
• Experience with cybersecurity risk management, threat analysis and incident response
• Working knowledge of security frameworks and compliance regulations; NIST CSF, PCI, HIPAA
• 3 years of experience configuring, managing, and securing servers and network devices to ensure system and network security safeguards are in place and meet security policy and compliance requirements
• 3 years of experience with evaluating internal and external security posture to review and make recommendations for improving organizational security posture
• 1 year of application security experience with vulnerability management tools to conduct application vulnerability scanning and remediation
• 1 year of experience designing, implementing and securing cloud environments (Google, Microsoft, Amazon)
• Experience architecting hybrid on‑prem/cloud security models.
• Knowledge of IoT/OT/SCADA security.
• Experience with CASB, SaaS posture management, DLP, and email security platforms.
• Strong understanding of regulatory requirements and industry standards.
• Experience with third-party, vendor supply chain security management practices

Posting Detail Information

Job Open Date 10/13/2026 Job Close Date 10/27/2026 Open Continuous No Special Instructions to Applicants

This position is not eligible for third-party (i.e., contractor/staffing agency) placements. For questions about this position, please email selection@cityofchesapeake.net.

Information Technology based positions must meet requirements specified in Criminal Justice Information System (CJIS) policy for access to the Virginia Criminal Information Network (VCIN).

ADA Checklist

Overall Physical Strength Demands

Overall Physical Strength Demands S=Sedentary - Exerting up to 10 lbs. occasionally or small weights frequently; sitting most of the time.

Physical Demands

C = Continuously- 2/3 or more of the time. F = Frequently- From 1/3 to 2/3 of the time. O = Occasionally- Up to 1/3 of the time. R = Rarely- Less than 1 hour per week. N = Never- Never occurs.

Standing Frequently- From 1/3 to 2/3 of the time. Sitting Frequently- From 1/3 to 2/3 of the time. Walking Frequently- From 1/3 to 2/3 of the time. Lifting Rarely- Less than 1 hour per week. Lifting Amount Exerting up to 10 lbs Carrying Rarely- Less than 1 hour per week. Carrying Weight Exerting up to 10 lbs Pushing/Pulling Rarely- Less than 1 hour per week. Pushing/Pulling Weight Exerting up to 10 lbs Reaching Occasionally- Up to 1/3 of the time. Handling Frequently- From 1/3 to 2/3 of the time. Fine Dexterity Continuously- 2/3 or more of the time. Kneeling Rarely- Less than 1 hour per week. Crouching Rarely- Less than 1 hour per week. Crawling Rarely- Less than 1 hour per week. Bending Occasionally- Up to 1/3 of the time. Twisting Rarely- Less than 1 hour per week. Climbing Rarely- Less than 1 hour per week. Balancing Rarely- Less than 1 hour per week. Vision Continuously- 2/3 or more of the time. Hearing Continuously- 2/3 or more of the time. Talking Continuously- 2/3 or more of the time. Foot Controls N = Never Machines, Tools, Equipment and Work Aids Used

Computers and peripherals

Protective Equipment Required

Health and Safety

D = Daily W = Several Times Per Week M = Several Times Per Month S = Seasonally N = Never

Mechanical Hazards N = Never Chemical Hazards N = Never Electrical Hazards N = Never Fire Hazards N = Never Explosives N = Never Communicable Diseases N = Never Physical Danger or Abuse N = Never Other If Other, Description

Environmental Factors

D = Daily W = Several Times Per Week M = Several Times Per Month S = Seasonally N = Never

Dirt and Dust N = Never Extreme Temperatures N = Never Noise and Vibration N = Never Fumes and Odors N = Never Wetness/Humidity N = Never Darkness or Poor Lighting N = Never Primary Work Location Office Environment

Non-Physical Demands

C = Continuously- 2/3 or more of the time. F = Frequently- From 1/3 to 2/3 of the time. O = Occasionally- Up to 1/3 of the time. R = Rarely- Less than 1 hour per week. N = Never- Never occurs.

Time Pressures Continuously- 2/3 or more of the time. Emergency Situations Occasionally- Up to 1/3 of the time. Frequent Change of Tasks Continuously- 2/3 or more of the time. Irregular Work Schedule/Overtime Occasionally- Up to 1/3 of the time. Performing Multiple Tasks Simultaneously Continuously- 2/3 or more of the time. Working Closely with Others as Part of a Team Continuously- 2/3 or more of the time. Tedious or Exacting Work Frequently- From 1/3 to 2/3 of the time. Noisy/Distracting Environment Rarely- Less than 1 hour per week. Other N = Never If Other, Description Can anyone assist the employee in performing the primary tasks assigned to this position? If yes, identify the eligible task(s)

Yes, Security Analyst

Professional References

Professional References

Please provide contact information for professional references.

Minimum Requests 0 Maximum Requests 4

Supplemental Questions

Required fields are indicated with an asterisk (*).

• • Do you possess a valid driver's license and a driving record that is in compliance with the City's Driving Standards? Please review position requirements for details.
• Yes
• No

Applicant Documents

Required Documents

• Resume

Optional Documents

• Cover Letter