Security Engineer

City of Alexandria, Virginia; Alexandria (VA); Presencial; USD 110.000 - 140.000; Jornada completa

Descripción de la vacante

City of Alexandria, Virginia is seeking a Security Engineer to join our Information Technology Services (ITS) Information Security team. You will help strengthen the City’s security posture, support key security initiatives, and protect digital services used by residents and City operations.

You will design, implement, and maintain security solutions, collaborate across ITS, and drive continuous improvement through automation and risk-based approaches.

Formación

• 3+ years of Information Security experience.
• Industry certifications such as CISSP, Security+, CEH, GIAC, or equivalent.
• Experience integrating, automating, and optimizing security solutions.
• Experience in government environments is a plus.
• Proficiency in scripting languages such as Python or PowerShell.
• Knowledge of cybersecurity frameworks and best practices.
• Ability to identify improvements and drive change.
• Experience evaluating emerging technologies including AI-enabled security solutions.

Responsabilidades

• Design, implement, and support security solutions for monitoring, visibility, and resilience across the City.
• Maintain and enhance tools for threat detection, incident response, and asset management.
• Evaluate new technologies and recommend security solutions.
• Collaborate with ITS teams to ensure reliable logging, alerting, and response capabilities.
• Automate security processes and integrate new security tools and services.
• Support security investigations and incident response activities.
• Perform vulnerability assessments, risk reviews, and compliance activities.
• Remediate identified risks and contribute to continuous improvement.
• Partner with City departments to implement new security services and improve existing solutions.
• Provide guidance on secure configurations and security baselines.
• Assist with audits, penetration tests, and security incidents.
• Explore AI and automation to improve security operations.
• Stay informed about emerging threats and technologies.
• Drive improvements in tools, processes, and services.

Conocimientos

Python scripting

PowerShell scripting

Incident response

Vulnerability assessment

Security architecture

Educación

CISSP, Security+, CEH, GIAC or equivalent

Herramientas

SIEM

EDR

Active Directory

DNS Security

MFA & SSO (SAML)

Firewalls

Descripción del empleo

Security Engineer

Overview

The City of Alexandria's Information Technology Services (ITS) Department is seeking a Security Engineer to join our Information Security team. In this role, you will help strengthen the City’s security posture, support important security initiatives, and protect digital services used by residents, employees, and City operations. The Security Engineer will work closely with team members across ITS to build, improve, and maintain security solutions, identify and address vulnerabilities, and implement new technologies that help the City stay secure in a constantly changing threat landscape. This position offers the opportunity to work with a wide range of technologies, contribute to strategic security initiatives, and directly impact the safety and reliability of critical public services.

The Opportunity

Security Platform Engineering & Administration

• Design, implement, and support security solutions that improve monitoring, visibility, and resilience across the City.
• Maintain and enhance tools used for threat detection, incident response, and asset management.
• Help evaluate new technologies and recommend solutions that strengthen security capabilities.

Cybersecurity Operations Support

• Collaborate with ITS teams to ensure reliable logging, alerting, and response capabilities.
• Assist in automating security processes and integrating new security tools and services.
• Support security investigations and incident response activities when needed.

Vulnerability, Risk, and Compliance Support

• Perform vulnerability assessments, risk reviews, and compliance activities.
• Work with technology teams to remediate identified risks and improve the overall security posture.
• Support audits, security assessments, and continuous improvement efforts.

Technology Integration & Collaboration

• Partner with ITS and other City departments to implement new security services and enhance existing solutions.
• Identify gaps in current tools, processes, and controls, and recommend improvements.
• Serve as a trusted technical resource for security-related projects and initiatives.

Operational Support

• Assist with audits, penetration tests, and security incidents.
• Provide guidance on secure configurations, security baselines, and best practices.
• Support the ongoing operation and maintenance of the City's security technologies.

AI & Automation Support

• Explore and use artificial intelligence and automation technologies to improve security operations and increase efficiency.
• Identify opportunities to use AI to enhance threat detection, monitoring, analysis, and response activities.
• Help automate routine and repetitive tasks so the team can focus on higher-value security work.
• Collaborate with ITS teams to implement responsible AI practices that support security objectives while protecting privacy, data integrity, and public trust.
• Evaluate emerging AI-enabled technologies and provide recommendations on their safe and effective use within the City's technology environment.

Continuous Improvement

• Stay informed about emerging cybersecurity threats, trends, and technologies.
• Research, design, and implement solutions that protect the confidentiality, integrity, and availability of City data and services.
• Continuously look for ways to improve security processes, tools, and operational effectiveness.

Technical Domains & Tools

Experience in multiple of the following areas is preferred:

• Security Information and Event Management (SIEM)
• Endpoint Detection and Response (EDR)
• Technical Inventory and Asset Management
• Data Loss Prevention (DLP)
• Password and Privileged Access Management
• Active Directory (AD)
• DNS Security
• Multi-Factor Authentication (MFA)
• Single Sign-On (SSO) technologies, including SAML
• Email Security
• Firewalls and Network Security
• Vulnerability Management

About the Department:

The Information Technology Services Department is responsible for enterprise technology operations for the City of Alexandria. ITS provides technology services and solutions to City departments to enhance service delivery. ITS aligns its work with City needs by providing leadership, resources, expertise, and products that enable departments to better serve the City’s residents, businesses, and visitors. ITS resources support initiatives funded through the multi-year Information Technology Capital Improvement Plan (IT/CIP) to improve the overall technology landscape. The City of Alexandria’s ITS Department has been a Top Ten National Finalist in the Digital Cities Award program for more than 20 years.

Four-Year College Degree; Five years as a Computer Programmer Analyst III; Three years experience in communicating and negotiating with high level executives.

Qualifications and Experience

• Three (3) or more years of Information Security experience.
• Industry certifications such as CISSP, Security+, CEH, GIAC, or equivalent.
• Experience with integrating, automating, and optimizing security solutions.
• Experience working in state, local, or federal government environments.
• Proficiency in one or more scripting or automation languages such as Python or PowerShell.
• Familiarity with cybersecurity frameworks, compliance requirements, and industry best practices.
• Experience implementing and administering enterprise security technologies.
• Ability to identify opportunities for improvement and drive positive change in tools, processes, and services.
• Experience evaluating and adopting emerging technologies, including AI-enabled security solutions.