Information Security Engineer Ii

Commonwealth Of Virginia; Chesterfield; On-site; GBP 101,000 - 112,000; Full time

Job summary

Commonwealth Savers Plan is seeking an Information Security Engineer II to design, implement, and manage enterprise security controls across critical systems. You will investigate incidents, deploy SIEM/EDR/DLP tools, and collaborate with IT and development teams to embed security throughout the lifecycle.

The role emphasizes automation, AI-driven security, and DevSecOps practices, with opportunities to mentor others and advance security initiatives in cloud environments.

Qualifications

• Degree, technical certification, or equivalent experience in Cybersecurity, Information Technology, Computer Science, or related field.
• 5+ years’ experience in secure network and system configuration, security architecture, risk management and/or security operations.
• Extensive hands‑on experience designing and implementing security controls, leading complex threat‑response efforts, and mentoring others in advanced security practices.
• Relevant industry certifications such as Security+, Network+, GIAC, CISSP, or vendor security certifications such as AWS Certified Security.
• Knowledge of system, application, and network vulnerabilities and countermeasures.
• Knowledge of current network technologies, architectures, protocols, and standards; encryption; and security products and tools.
• Knowledge of current trends and technologies related to information security including Artificial Intelligence.
• Excellent oral and written communication skills.
• Strong project management and documentation skills.
• Ability to work independently while adjusting to shifting priorities to meet critical deadlines.
• Strong problem solving and detail orientation skills.
• Ability to facilitate cooperation from all team members including staff, vendors, and other partners.
• Analytical ability sufficient to evaluate processes, procedures, and data and make recommendations accordingly.
• Ability to write automation code, manage code with version control and collaborate using GitHub

Responsibilities

• Design, implement, and manage enterprise security solutions and controls.
• Investigate and respond to security incidents, threats, and vulnerabilities.
• Deploy and enhance technologies including SIEM, SOAR, EDR, DLP, and cloud security tools.
• Collaborate with IT and development teams to integrate security throughout the system lifecycle.
• Advance automation, AI‑driven security capabilities, and DevSecOps practices.
• Research emerging threats and recommend innovative solutions to improve security and resilience.

Skills

Cybersecurity

Security architecture

Threat response

Cloud security

DevSecOps

Automation

AI in security

Communication skills

Project management

GitHub

Education

Degree or certification in Cybersecurity/IT/CS

Tools

SIEM

SOAR

EDR

DLP

Cloud security tools

GitHub

Job description

Hiring Range: $135,000 - $150,000

Pay Band: UG

Agency: Commonwealth Savers Plan

Location: ARBORETUM NORTH CHESTERFIELD

Recruitment Type: General Public - G

About the Role

Shape the future of cybersecurity. Defend critical systems. Drive innovation.

Join Commonwealth Savers as an Information Security Engineer II and help build the security solutions that protect critical systems, data, and services. As part of our Security Engineering & Architecture Team, you'll drive the implementation of advanced cybersecurity technologies, strengthen our security posture, and drive forward‑thinking initiatives in cloud security, automation, AI, and DevSecOps.

What You'll Do

• Design, implement, and manage enterprise security solutions and controls
• Investigate and respond to security incidents, threats, and vulnerabilities
• Deploy and enhance technologies including SIEM, SOAR, EDR, DLP, and cloud security tools
• Collaborate with IT and development teams to integrate security throughout the system lifecycle
• Advance automation, AI‑driven security capabilities, and DevSecOps practices
• Research emerging threats and recommend innovative solutions to improve security and resilience

What You'll Bring

• Degree, technical certification, or equivalent experience in Cybersecurity, Information Technology, Computer Science, or a related field
• 5+ years’ experience in secure network and system configuration, security architecture, risk management and/or security operations
• Extensive hands‑on experience designing and implementing security controls, leading complex threat‑response efforts, and mentoring others in advanced security practices.
• Relevant industry certifications such as Security+, Network+, GIAC, CISSP, or vendor security certifications such as AWS Certified Security
• Knowledge of system, application, and network vulnerabilities and associated countermeasures
• Knowledge of current network technologies, architectures, protocols, and standards; encryption; and security products and tools
• Knowledge of current trends and technologies related to information security including Artificial Intelligence
• Excellent oral and written communication skills
• Strong project management and documentation skills
• Ability to work independently while adjusting to shifting priorities to meet critical deadlines
• Strong problem solving and detail orientation skills
• Ability to facilitate cooperation from all team members including staff, vendors, and other partners
• Analytical ability sufficient to evaluate processes, procedures, and data and make recommendations accordingly
• Ability to write automation code, manage code with version control and collaborate using GitHub

Why Join Us?

This is an opportunity to work with cutting‑edge security technologies, influence enterprise security strategy, and help build a resilient, forward‑thinking cybersecurity program. If you're passionate about innovation, automation, application security, cloud security, and defending against evolving threats, we'd love to hear from you.

Make an impact with a team that's building the future of cybersecurity while protecting the services that matter most.

Who We Are

Commonwealth Savers, an independent state agency, helps people build brighter futures through savings programs that support education, independence, and long‑term security. Employees are driven by a shared mission of expanding opportunity, improving financial well‑being, and making a meaningful difference to individuals and communities. It's a place where meaningful work and public impact come together to help families thrive.

• Typical office environment with considerable time in a sitting, stationary position
• Must be able to occasionally move about the office to retrieve files and documents
• Constantly operate a computer and other office equipment including typing and keying
• Frequently communicate with employees, vendors, and applicants; must be able to exchange accurate information accordingly

Special Instructions

You will be provided a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to “Your Application” in your account to check the status of your application for this position.

It is the practice of Commonwealth Savers to conduct in‑depth background checks on all candidates identified as a finalist for employment consideration. The type of background checks performed are dependent upon the type of position for which you have been identified as a finalist and may include: reference checks, criminal history including sexual offender registry checks, and degree validation. The results of background checks are made available to Commonwealth Savers employing officials. You will be requested to sign a reference release form, so your past schools and/or employers may be contacted concerning your academic or employment history.

Contact Information

Email:

In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation, if applicable, to DARS/DBVI to get their AHP Letter.

Information Security Engineer II • Chesterfield