Cyber Security Engineer — Cloud, SIEM & Incident Response

Stafford County; Virginia; On-site; USD 97,000 - 133,000; Full time

Job summary

Stafford County is seeking a Cyber Security Engineer to protect and continuously enhance the County’s information systems, including Microsoft 365 security, SIEM, IDS/IPS, and vulnerability management. You will lead detection, incident response, and risk-based remediation, collaborating with cross-functional teams to secure data, endpoints, and cloud services.

The role requires 5–7 years of combined cyber security experience, strong communication skills, and the ability to operate in a

Qualifications

• Bachelor's degree or equivalent with 5–7 years of cyber security experience including Microsoft 365 security administration, incident response, and threat analysis.
• Experience with SIEM and security monitoring, vulnerability management, and risk management within a public-sector or enterprise environment.
• Experience coordinating remediation across multiple technical teams and communicating risk to both technical and non-technical audiences.

Responsibilities

• Administers, configures, and continuously improves Microsoft 365 security, compliance, identity, endpoint, email, device, and data protection capabilities;
• Operates and enhances the County’s SIEM and security monitoring program, including log integration, detection development, alert tuning, dashboards, reporting, and response automation;
• Monitors, triages, investigates, and documents security alerts and incidents across cloud, endpoint, identity, email, application, and network environments;
• Coordinates cybersecurity incident response operations, including containment, eradication, recovery, evidence preservation, root-cause analysis, after-action review, and corrective actions;
• Manages the vulnerability management program, including asset coverage, scanning, validation, risk-based prioritization, remediation tracking, exceptions, and stakeholder reporting;
• Performs threat hunting and technical investigations using security telemetry, threat intelligence, and other available data sources;
• Evaluates security findings and control effectiveness, identifies gaps, and recommends practical risk-reduction measures;
• Works with infrastructure, application, cloud, and business teams to securely design, assess, and integrate systems, services, and data architectures;
• Creates and maintains cybersecurity standards, procedures, playbooks, diagrams, metrics, reports, and technical documentation;
• Supports audit, compliance, governance, risk management, security awareness, continuity, disaster recovery, and cybersecurity exercises by providing technical analysis and remediation support;
• Maintains knowledge of emerging threats, vulnerabilities, technologies, and industry practices and recommends improvements appropriate to County operations;
• Provides professional guidance, technical expertise, and security recommendations to staff, leadership vendors, and project teams;
• Participate in 24x7 on-call rotations;
• May be required to participate in after-hours incident response, maintenance, or emergency support operations;
• Performs related tasks as required.

Skills

Microsoft 365 security

SIEM

IDS/IPS

Vulnerability management

Incident response

Security monitoring

Cloud security

Risk assessment

Education

Bachelor’s degree in information security, computer science, cyber security, or related field

Tools

SIEM platforms

Log management

Threat detection

Job description

Stafford County is seeking a Cyber Security Engineer to protect and continuously enhance the County’s information systems, including Microsoft 365 security, SIEM, IDS/IPS, and vulnerability management. You will lead detection, incident response, and risk-based remediation, collaborating with cross-functional teams to secure data, endpoints, and cloud services.

The role requires 5–7 years of combined cyber security experience, strong communication skills, and the ability to operate in a