Cybersecurity Engineer — Threat Defense & IAM

Roanoke County; Roanoke (AL); On-site; USD 95,000 - 130,000; Full time

Job summary

Roanoke County seeks a Cybersecurity Engineer to design, implement, and continually improve the County’s cybersecurity infrastructure. You will lead threat detection, incident response, and defense-in-depth strategies across departments.

Responsibilities include vulnerability management, security assessments, and collaboration with IT teams and external partners to align with CSF 2.0. Strong knowledge of IAM, endpoint protection, and network defense is essential.

Qualifications

• Bachelor’s degree in a computer-related field or equivalent experience.
• Master’s degree preferred or equivalent combination of education and experience.
• Five+ years of progressively responsible IT or information security experience.
• Valid US citizenship or permanent resident status as required by assignment.
• Certifications such as CISSP or Security+ are highly desirable.

Responsibilities

• Design, implement, and maintain Roanoke County’s cybersecurity infrastructure.
• Perform threat and vulnerability management and incident response.
• Ensure compliance with NIST CSF, ISO 27001 and applicable regulations.
• Collaborate with IT teams and external partners to strengthen defenses.
• Produce reports on security posture, incidents, and mitigations.

Skills

Networking

OS & Cloud

Threat detection

Incident response

Security tools

Scripting

IAM

Cloud security

Education

Bachelor’s degree in computer-related field

Master’s degree in computer-related field

Tools

Nessus

Qualys

Tenable

Metasploit

Burp Suite

Wireshark

Nmap

SIEM

EDR

Job description

Roanoke County seeks a Cybersecurity Engineer to design, implement, and continually improve the County’s cybersecurity infrastructure. You will lead threat detection, incident response, and defense-in-depth strategies across departments.

Responsibilities include vulnerability management, security assessments, and collaboration with IT teams and external partners to align with CSF 2.0. Strong knowledge of IAM, endpoint protection, and network defense is essential.