Cyber Security Engineer: SIEM, Cloud & Incident Response

Cybersecurity Jobs; Virginia; On-site; USD 97,000 - 169,000; Full time

Job summary

Cybersecurity Jobs in Stafford County, VA seeks a Cyber Security Engineer to enhance Microsoft 365 security, SIEM monitoring, IDS/IPS, and incident response across the county’s information systems. You’ll coordinate risk reduction with limited supervision and support vulnerability management and threat investigations.

The role requires 5–7 years of cybersecurity experience, a bachelor’s degree, and strong communication skills to partner with IT, vendors, and leadership.

Qualifications

• Comprehensive knowledge of cybersecurity engineering, security operations, cloud security, endpoint security, identity security, email security, data protection, and incident response principles.
• Strong working knowledge of Microsoft 365 security, compliance, identity, endpoint, device, email, and data protection administration.
• Thorough knowledge of SIEM technologies, log management, security analytics, detection development, alert tuning, and response automation concepts.
• Thorough knowledge of vulnerability management, risk-based remediation, configuration assessment, and security control validation.
• Knowledge of attack techniques, threat vectors, malware behavior, identity compromise, phishing, and business email compromise.
• Knowledge of cybersecurity frameworks, audit, compliance, governance, and risk management for local government environments.
• Skill in analyzing security events, correlating data, identifying root causes, and corrective actions.
• Skill in administering and integrating security platforms, cloud services, APIs, scripts, and automation tools.
• Strong written and verbal communication and problem-solving skills.
• Ability to communicate findings to technical and non-technical audiences.
• Ability to manage multiple incidents and projects under pressure.
• Willingness to work on-call and maintain confidentiality.

Responsibilities

• Administer and improve Microsoft 365 security, compliance, identity, endpoint, email, device, and data protection capabilities.
• Operate and enhance the County’s SIEM, log integration, detection development, alert tuning, dashboards, reports, and response automation.
• Monitor, triage, investigate, and document security alerts and incidents across cloud, endpoint, identity, email, application, and network environments.
• Coordinate incident response operations including containment, eradication, recovery, evidence preservation, and root-cause analysis.
• Manage vulnerability management program including asset coverage, scanning, remediation tracking, and stakeholder reporting.
• Conduct threat hunting and investigations using security telemetry and threat intelligence.
• Evaluate findings, identify gaps, and recommend risk-reduction measures.
• Collaborate with infrastructure, cloud, and business teams to secure designs and integrations.
• Create and maintain cybersecurity standards, playbooks, diagrams, metrics, and documentation.
• Support audits, governance, and risk management with technical analysis and remediation.
• Stay updated on threats and technologies and recommend improvements.
• Provide security guidance to staff, leadership, vendors, and project teams.
• Participate in 24x7 on-call rotations and possible after-hours work.

Skills

Cybersecurity engineering

Security operations

Microsoft 365 security

SIEM

IDS/IPS

Vulnerability management

Incident response

Risk assessment

Effective communication

Education

Bachelor’s degree in information security, computer science, cyber security, or related field

Tools

Microsoft 365

SIEM

IDS/IPS

Job description

Cybersecurity Jobs in Stafford County, VA seeks a Cyber Security Engineer to enhance Microsoft 365 security, SIEM monitoring, IDS/IPS, and incident response across the county’s information systems. You’ll coordinate risk reduction with limited supervision and support vulnerability management and threat investigations.

The role requires 5–7 years of cybersecurity experience, a bachelor’s degree, and strong communication skills to partner with IT, vendors, and leadership.