Cybersecurity Engineer — Hybrid, 12-Month Contract

Apex Systems; Richmond (VA); Hybrid; USD 96,000 - 165,000; Part time

Benefits offered by this job

401K match

HSA

ESPP

EAP

Certification support

Job summary

Everforth Apex is strengthening its Security Engineering & Operations capabilities in a hybrid North Chesterfield environment. The Cybersecurity Engineer will design security controls, lead SIEM/SOAR integrations, and develop detection use cases to support a mature SOC model.

The role emphasizes collaboration with IT operations, application teams, and SOC analysts, with a hands-on technical mindset and experience across cloud, on‑prem, and identity security areas.

Qualifications

• 10+ years of experience in security engineering, security operations, or systems engineering with cybersecurity responsibilities.
• Hands-on experience with SIEM platforms such as Splunk, LogRhythm, Microsoft Sentinel, or similar technologies.
• Experience with log onboarding, security monitoring, and detection engineering.
• Strong understanding of identity security, including IAM, SSO, MFA, privileged access management, and role-based access design.
• Experience securing Windows and Linux environments, network infrastructure, and cloud workloads.
• Experience implementing secure configuration baselines using CIS, DISA STIG, or comparable frameworks.
• Proficiency in scripting and automation using PowerShell, Python, or similar languages.
• Understanding of incident response engineering requirements, including visibility, forensic readiness, and data access considerations.
• Experience working within regulated environments and security compliance frameworks such as NIST CSF, RMF, CJIS, or similar standards.

Responsibilities

• Design and implement security controls across identity, network, endpoint, and cloud environments.
• Lead SIEM/SOAR integrations, including log onboarding, parsing, normalization, and automation readiness.
• Implement secure configuration and baseline management for critical infrastructure, servers, workstations, and cloud assets.
• Support enterprise security architecture development, including secure-by-design reviews with application and infrastructure teams.
• Develop and tune detection use cases aligned with the security operations roadmap, prioritized by risk and threat exposure.
• Engineer identity security controls, including IAM/PAM hardening, role‑based access validation, and integration with monitoring solutions.
• Implement cryptographic management practices, key lifecycle controls, and validation processes for sensitive systems.
• Build and maintain logging pipelines to ensure visibility across endpoints, servers, network devices, identity platforms, and cloud services.
• Support vulnerability management engineering, including scanner integration, asset classification, and remediation workflow design.
• Partner with security operations personnel to develop and tune detection rules, correlation logic, and enrichment processes.
• Participate in incident investigations and root‑cause analysis with a focus on implementing engineering solutions that prevent recurring issues.
• Implement threat intelligence ingestion pipelines and integrate intelligence feeds into detection and response processes.
• Identify and implement high‑impact opportunities for security automation, including alert enrichment, ticket creation, and response workflow orchestration.
• Evaluate tool health, tuning opportunities, and integration gaps; provide recommendations to support the cybersecurity modernization roadmap.
• Support emerging AI‑assisted capabilities designed to improve security operations and analyst effectiveness.
• Work closely with IT operations, infrastructure, endpoint management, and application teams to drive secure configurations and optimize security controls.
• Participate in governance meetings and contribute to progress reporting and strategic planning efforts.
• Develop technical documentation, operational runbooks, and knowledge transfer materials for internal teams.
• Develop a SIEM/SOAR engineering plan with integration of core security tools.

Skills

SIEM

SOAR

Identity security

IAM/PAM

Cloud security

Incident response

Vulnerability management

Job description

Everforth Apex is strengthening its Security Engineering & Operations capabilities in a hybrid North Chesterfield environment. The Cybersecurity Engineer will design security controls, lead SIEM/SOAR integrations, and develop detection use cases to support a mature SOC model.

The role emphasizes collaboration with IT operations, application teams, and SOC analysts, with a hands-on technical mindset and experience across cloud, on‑prem, and identity security areas.