Cybersecurity Engineer
City of Chesapeake Virginia
A complete application in a minute
Tailored resume and cover letter, ready to send.
Job summary
The City of Chesapeake is seeking a Cybersecurity Engineer to strengthen our security program across the enterprise. You will identify threats, engineer secure solutions, and drive improvements to resilience and effectiveness, supporting IT and city operations.
Based in Chesapeake, VA, this full‑time role expects 8:00 AM to 5:00 PM, with potential overtime during emergencies. Requires a bachelor’s degree and at least four years in security; CJIS/CISA standards awareness is a plus.
Qualifications
- Requires bachelor’s degree in computer science, cybersecurity, or a closely related field.
- Minimum of four years of related, full‑time experience in computer security.
- Industry certifications (e.g. CISSP, CySA+, GIAC) preferred but not required.
Responsibilities
- Design, implement, and maintain enterprise security architectures with emphasis on network security and hybrid cloud networking.
- Coordinate penetration testing and drive remediation activities.
- Triage, analyze, and respond to threats; monitor alerts and telemetry for anomalies and incidents.
Skills
Education
Job description
This position is not eligible for third-party (i.e., contractor/staffing agency) placements. For questions about this position, please email selection@cityofchesapeake.net.
Information Technology based positions must meet requirements specified in Criminal Justice Information System (CJIS) policy for access to the Virginia Criminal Information Network (VCIN).
Working Title of Vacant Position
Working Title of Vacant Position Cybersecurity Engineer
Full Time
Public
1
INFORMATION TECHNOLOGY
IT CYBER SECURITY SVCS
2026361
40+
8:00 AM to 5:00 PM; Monday – Friday.
Employees may be expected to work hours in excess of their normally scheduled hours in response to short-term department needs and/or City-wide emergencies.
Chesapeake, VA
O - Occasional
GE20
Semi-Monthly
$87,075-$120,000; Depending on qualifications and experience.
Are you a cybersecurity professional with a sharp eye for threats and a passion for protecting data and infrastructure? The City of Chesapeake is seeking a Cybersecurity Engineer to join our security team and help defend critical systems across the enterprise.
In this role, you’ll play a critical part in strengthening our cybersecurity capabilities — proactively identifying, analyzing, and responding to threats, engineering secure solutions, and driving improvements that enhance the resilience and effectiveness of our security program.
- Design, implement, and maintain enterprise security architectures with a strong emphasis on network security, including hybrid cloud networking, virtualization, secure routing, segmentation, and modern perimeter designs.
- Define and enforce Zero Trust security principles centered on network micro‑segmentation, identity‑aware access control, secure connectivity patterns, and layered network defenses.
- Create and maintain security reference architectures, standards, and design documentation covering network topology, firewalling, secure connectivity, encryption strategies, and inter‑system communication paths.
- Provide architectural oversight for firewalls, routers, switches, VPNs, endpoint security/ XDR , email security, SIEM telemetry, and vulnerability management, ensuring consistent and effective network security control implementation.
- Conduct threat modeling and architectural risk assessments prioritizing network attack surfaces, segmentation gaps, lateral‑movement risks, and protocol vulnerabilities aligned with NIST , CIS , ISO 27001, HIPAA , CJIS , PCI , and related frameworks.
- Coordinate penetration testing with focus on network exploitation paths, segmentation enforcement, firewall rule validation, secure remote access, and drive remediation activities.
- Define secure network design patterns for on‑premises, hybrid, and cloud networks, including segmentation and perimeter architectures.
- Define and govern security requirements for AI/ML platforms, data pipelines, and model interfaces.
- Implement controls to mitigate threats such as prompt injections, model theft, data poisoning, and unauthorized API access.
- Establish security requirements for AI workloads handling sensitive data, including secure connectivity, encrypted endpoints, audit logging, and compliance‑aligned data‑access governance.
- Govern secure data‑sharing patterns between AI platforms and inter‑agency partners (law enforcement, city utilities, health departments) by defining trusted networks, cross‑domain access controls.
- Design secure Azure and AWS environments including segmentation, identity integration, private access, and firewalling.
- Oversee cloud‑native security controls (Azure Firewall, NSGs/ASGs, Security Groups, Network Firewall, CSPM , secrets management).
- Ensure cloud environments supporting critical infrastructure utilize hardened network controls, secure OT/IT cloud connectors, and monitored integration points.
- Define secure configuration for VMware/Hyper‑V, virtual switches, hardened templates, and workload segmentation.
- Provide guidance for securing Windows, Linux, IoT, OT, and SCADA environments.
- Triage, analyze, and respond to threats, ensuring timely escalation and coordinated remediation actions.
- Continuously monitor security alerts and telemetry to identify anomalous behavior, potential intrusions, and emerging threats.
- Define detection engineering requirements for SIEM / XDR platforms and guide proactive threat‑hunting activities.
- Leverage threat intelligence to enrich detections, validate findings, and improve visibility into adversary tactics and techniques.
- Support incident response architecture, forensics needs, containment strategies, and recovery efforts to minimize impact and strengthen resilience.
Requires any combination of education and experience equivalent to a bachelor’s degree in computer science, cybersecurity, or a closely related field.
In addition to satisfying the vocational/education standards, this job class requires a minimum of four years of related, full‑time equivalent experience, preferably in a broad range computer security role. Strong technical knowledge of IT infrastructure and vulnerability patch management preferred. Must have good knowledge of commercial compliance and regulatory standards (e.g. Payment Card Industry [ PCI ], Health Insurance Portability and Accountability Act [ HIPAA ]).
Requires a valid driver’s license and a driving record that is in compliance with City Driving Standards . Industry‑related certifications (e.g. ( ISC )2 Certified Information Systems Security Professional [ CISSP ], , CompTIA CySA+, GIAC CSEC ) are preferred but not required.
Employees may be expected to work hours in excess of their normally scheduled hours in response to short‑term department needs and/or City‑wide emergencies. Emergency operations support work and work locations may be outside of normal job duties.
- Experience with information system security and network security practices – Identity and Access Management, Privileged Access Management, Incident Management, Security baseline, and configurations
- Experience with next‑generation firewalls, network security configurations, endpoint/ XDR , and cloud architectures
- Strong understanding of Zero Trust principles and NIST / CIS hardening standards
- Experience with cybersecurity risk management, threat analysis and incident response
- Working knowledge of security frameworks and compliance regulations; NIST CSF , PCI , HIPAA
- 3 years of experience configuring, managing, and securing servers and network devices to ensure system and network security safeguards are in place and meet security policy and compliance requirements
- 3 years of experience with evaluating internal and external security posture to review and make recommendations for improving organizational security posture
- 1 year of application security experience with vulnerability management tools to conduct application vulnerability scanning and remediation
- 1 year of experience designing, implementing and securing cloud environments (Google, Microsoft, Amazon)
- Experience architecting hybrid on‑prem/cloud security models.
- Knowledge of IoT/OT/ SCADA security.
- Experience with CASB , SaaS posture management, DLP , and email security platforms.
- Strong understanding of regulatory requirements and industry standards.
- Experience with third‑party, vendor supply chain security management practices
10/13/2026
10/27/2026
No
This position is not eligible for third‑party (i.e., contractor/staffing agency) placements. For questions about this position, please email selection@cityofchesapeake.net.
Information Technology based positions must meet requirements specified in Criminal Justice Information System ( CJIS ) policy for access to the Virginia Criminal Information Network ( VCIN ).
S=Sedentary - Exerting up to 10 lbs. occasionally or small weights frequently; sitting most of the time.
C = Continuously‑2/3 or more of the time.F = Frequently‑From 1/3 to 2/3 of the time.O = Occasionally‑Up to 1/3 of the time.R = Rarely‑Less than 1 hour per week.N = Never‑Never occurs.
Frequently‑From 1/3 to 2/3 of the time.
Frequently‑From 1/3 to 2/3 of the time.
Frequently‑From 1/3 to 2/3 of the time.
Rarely‑Less than 1 hour per week.
Exerting up to 10 lbs
Rarely‑Less than 1 hour per week.
Exerting up to 10 lbs
Rarely‑Less than 1 hour per week.
Exerting up to 10 lbs
Occasionally‑Up to 1/3 of the time.
Frequently‑From 1/3 to 2/3 of the time.
Continuously‑2/3 or more of the time.
Rarely‑Less than 1 hour per week.
Rarely‑Less than 1 hour per week.
Rarely‑Less than 1 hour per week.
Occasionally‑Up to 1/3 of the time.
Rarely‑Less than 1 hour per week.
Rarely‑Less than 1 hour per week.
Rarely‑Less than 1 hour per week.
Continuously‑2/3 or more of the time.
Continuously‑2/3 or more of the time.
Continuously‑2/3 or more of the time.
N = Never
Computers and peripherals
Health and Safety
N = Never
N = Never
N = Never
N = Never
N = Never
N = Never
N = Never
If Other, Description
N = Never
N = Never
N = Never
N = Never
N = Never
N = Never
Non‑Physical Demands
Continuously‑2/3 or more of the time.
Occasionally‑Up to 1/3 of the time.
Continuously‑2/3 or more of the time.
Occasionally‑Up to 1/3 of the time.
Continuously‑2/3 or more of the time.
Continuously‑2/3 or more of the time.
Frequently‑From 1/3 to 2/3 of the time.
Rarely‑Less than 1 hour per week.
Other N = Never
Yes, Security Analyst
Please provide contact information for professional references.
Minimum Requests 0
Maximum Requests 4
Required fields are indicated with an asterisk (*).
- * Do you possess a valid driver's license and a driving record that is in compliance with the City's Driving Standards? Please review position requirements for details.
- Yes
- No
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
