Cybersecurity Engineer

Insight Global; Midlothian (VA); On-site; USD 145,000 - 170,000; Full time

Job summary

Insight Global is seeking an experienced Cybersecurity Engineer to support modernization and expansion of the agency's Security Engineering & Operations program. This role will design, implement, and optimize security controls across enterprise infrastructure, cloud, identity systems, and SOC platforms.

Hands-on security architecture, detection engineering, automation, and SOC modernization are key. Applicants should have 10+ years in cybersecurity engineering, strong SIEM/SOAR expertise, and a

Qualifications

• 10+ years in cybersecurity engineering or related security roles.
• Hands-on with SIEM, log management, and security monitoring.
• Strong IAM knowledge, SSO, MFA and identity security practices.
• Scripting in PowerShell and Python for automation.
• Experience in hybrid/cloud environments and security architecture.

Responsibilities

• Design, implement, and maintain security controls across identity, endpoint, network, and cloud environments.
• Lead SIEM/SOAR integrations, logging pipelines, and security automation initiatives.
• Develop secure baselines and enterprise security architecture standards.
• Build and tune threat detection use cases and correlation rules.
• Support vulnerability management, incident investigations, and remediation.
• Advance security operations through automation and tool optimization.
• Collaborate with teams and create runbooks and governance documentation.

Skills

SIEM platforms

Identity security

Windows/Linux security

Scripting: PowerShell

Python

Incident response

Threat detection

Security operations

Education

Bachelor's degree in Cybersecurity / IT / CS / Engineering

Tools

Splunk

Microsoft Sentinel

LogRhythm

Azure

AWS

SOAR

Job description

Job Description

Insight Global is seeking an experienced Cybersecurity Engineer to support the modernization and expansion of the agency's Security Engineering & Operations program. This position will play a key role in strengthening VSP's cybersecurity posture by designing, implementing, and optimizing security controls across enterprise infrastructure, cloud environments, identity systems, and security operations platforms. The pay range for this role is $70-$80/hr.

The Cybersecurity Engineer will lead efforts to enhance SIEM/SOAR integrations, increase security visibility, improve detection capabilities, and support the evolution of VSP's Security Operations Center (SOC) model. The ideal candidate combines strong technical engineering expertise with a process improvement mindset and the ability to work collaboratively across infrastructure, application, and security teams. Success in this role requires hands-on experience in security architecture, detection engineering, automation, and operational security modernization.

Key Responsibilities

• Design, implement, and maintain security controls across identity, endpoint, network, and cloud environments.
• Lead SIEM/SOAR integrations, logging pipelines, and security automation initiatives to improve visibility and operational efficiency.
• Develop and enforce secure configuration baselines, identity security controls, and enterprise security architecture standards.
• Build, tune, and optimize threat detection use cases, correlation rules, and threat intelligence integrations to enhance SOC capabilities.
• Support vulnerability management, incident investigations, root cause analysis, and remediation efforts.
• Identify opportunities to modernize security operations through automation, tool optimization, and emerging technologies, including AI-assisted workflows.
• Collaborate with infrastructure, application, and security teams to strengthen security controls and drive risk reduction initiatives.
• Create technical documentation, runbooks, and knowledge transfer materials, while supporting governance activities, procurement efforts, and team mentorship.

Skills and Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field (or equivalent experience).
• 10+ years of experience in cybersecurity engineering, security operations, systems engineering, or related security roles.
• Hands-on experience with SIEM platforms (Splunk, Microsoft Sentinel, LogRhythm, etc.), detection engineering, log management, and security monitoring.
• Strong knowledge of IAM, SSO, MFA, PAM, and identity security best practices.
• Experience securing Windows/Linux environments, enterprise networks, and cloud platforms.
• Experience implementing security baselines and standards such as CIS Benchmarks, DISA STIGs, or similar frameworks.
• Proficiency with scripting and automation tools such as PowerShell and Python.
• Understanding of incident response, threat detection, forensic readiness, and security operations.
• Knowledge of compliance and security frameworks including NIST CSF, RMF, and CJIS.
• Strong analytical, troubleshooting, communication, and documentation skills with the ability to thrive in a fast-evolving security environment.
• Experience supporting government, public sector, law enforcement, or CJIS-regulated environments.
• Familiarity with SOAR platforms, security automation, and vulnerability management programs.
• Experience working within hybrid SOC environments, including collaboration with MSSPs.
• Knowledge of Azure, AWS, hybrid cloud security, EDR solutions, threat hunting, and threat intelligence integrations.
• Relevant security certifications preferred, including CISSP, GIAC certifications (GSEC, GCIA, GCED, GCSA), AWS Security Specialty, or Microsoft Azure Security Engineer Associate.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].