Cybersecurity Engineer: Threat & Cloud Defense

Koitecc Solutions; Roanoke (VA); Hybrid; USD 120,000 - 155,000; Full time

Job summary

Roanoke County is seeking a Cybersecurity Engineer to design and maintain secure IT systems, aligning security with county needs. You will engineer defense-in-depth controls, perform threat analyses, and support incident response across departments.

Requires five+ years in IT/security, CSF/CIS control familiarity, and Security+ with CISSP or equivalent. On-site role, with strong collaboration across the Cybersecurity Division.

Qualifications

• Bachelor’s degree in a computer-related field or equivalent experience.
• Five+ years of IT or information security experience required.
• Valid Virginia driver’s license and Security+ and CISSP or equivalent certifications.
• Strong knowledge of TCP/IP, DNS, VPNs, firewalls, and cloud environments.
• Experience with NIST CSF, CIS Controls, and regulatory requirements.
• Ability to lead security projects and communicate risks clearly.

Responsibilities

• Design, implement, and improve Roanoke County cybersecurity infrastructure.
• Perform threat and vulnerability management and security assessments.
• Coordinate with SOC and incident response teams for containment and lessons learned.
• Develop and enforce security policies, procedures, and documentation.
• Monitor security posture and drive automation and improvements.

Skills

Threat detection

Network security

IAM

Incident response

Penetration testing

Cloud security

Scripting

Log analysis

Vulnerability management

Education

Bachelor’s degree in a computer-related field

Master’s degree preferred

Tools

Nessus

Qualys

Tenable

Metasploit

Burp Suite

Wireshark

Nmap

SIEM platforms

EDR/IDS/IPS

Job description

Roanoke County is seeking a Cybersecurity Engineer to design and maintain secure IT systems, aligning security with county needs. You will engineer defense-in-depth controls, perform threat analyses, and support incident response across departments.

Requires five+ years in IT/security, CSF/CIS control familiarity, and Security+ with CISSP or equivalent. On-site role, with strong collaboration across the Cybersecurity Division.