Security Engineer

City of Alexandria; Alexandria (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

City of Alexandria's Information Technology Services (ITS) invites a Security Engineer to strengthen the City's security posture and support critical public services. You will design and maintain security solutions, automate processes, and collaborate across ITS to protect residents and City operations.

You will work on threat detection, incident response, vulnerability management, and security initiatives, leveraging diverse tools and technologies in a dynamic public-sector environment.

Qualifications

• Requires at least 3+ years in Information Security.
• Experience integrating, automating, and optimizing security solutions.
• Experience in state, local, or federal government environments.
• Proficiency in scripting languages such as Python or PowerShell.
• Familiarity with cybersecurity frameworks, compliance requirements, and best practices.
• Experience implementing and administering enterprise security technologies.

Responsibilities

• Design, implement, and support security solutions that improve monitoring, visibility, and resilience.
• Maintain and enhance tools used for threat detection, incident response, and asset management.
• Collaborate with ITS teams to ensure reliable logging, alerting, and response capabilities.
• Assist in automating security processes and integrating new security tools and services.
• Support security investigations and incident response activities when needed.
• Explore and apply AI-enabled security solutions to improve operations.

Skills

Information security

Executive communication

Scripting (Python/PowerShell)

Threat detection

Education

CISSP

Security+ / CEH / GIAC

Tools

SIEM

EDR

Active Directory

Firewalls

DNS Security

Job description

Security Engineer

The City of Alexandria's Information Technology Services (ITS) Department is seeking a Security Engineer to join our Information Security team. In this role, you will help strengthen the City's security posture, support important security initiatives, and protect digital services used by residents, employees, and City operations. The Security Engineer will work closely with team members across ITS to build, improve, and maintain security solutions, identify and address vulnerabilities, and implement new technologies that help the City stay secure in a constantly changing threat landscape. This position offers the opportunity to work with a wide range of technologies, contribute to strategic security initiatives, and directly impact the safety and reliability of critical public services.

The Opportunity

Security Platform Engineering & Administration

• Design, implement, and support security solutions that improve monitoring, visibility, and resilience across the City.
• Maintain and enhance tools used for threat detection, incident response, and asset management.
• Help evaluate new technologies and recommend solutions that strengthen security capabilities.

Cybersecurity Operations Support

• Collaborate with ITS teams to ensure reliable logging, alerting, and response capabilities.
• Assist in automating security processes and integrating new security tools and services.
• Support security investigations and incident response activities when needed.

Vulnerability, Risk, and Compliance Support

• Perform vulnerability assessments, risk reviews, and compliance activities.
• Work with technology teams to remediate identified risks and improve the overall security posture.
• Support audits, security assessments, and continuous improvement efforts.

Technology Integration & Collaboration

• Partner with ITS and other City departments to implement new security services and enhance existing solutions.
• Identify gaps in current tools, processes, and controls, and recommend improvements.
• Serve as a trusted technical resource for security-related projects and initiatives.

Operational Support

• Assist with audits, penetration tests, and security incidents.
• Provide guidance on secure configurations, security baselines, and best practices.
• Support the ongoing operation and maintenance of the City's security technologies.

AI & Automation Support

• Explore and use artificial intelligence and automation technologies to improve security operations and increase efficiency.
• Identify opportunities to use AI to enhance threat detection, monitoring, analysis, and response activities.
• Help automate routine and repetitive tasks so the team can focus on higher-value security work.
• Collaborate with ITS teams to implement responsible AI practices that support security objectives while protecting privacy, data integrity, and public trust.
• Evaluate emerging AI-enabled technologies and provide recommendations on their safe and effective use within the City's technology environment.

Continuous Improvement

• Stay informed about emerging cybersecurity threats, trends, and technologies.
• Research, design, and implement solutions that protect the confidentiality, integrity, and availability of City data and services.
• Continuously look for ways to improve security processes, tools, and operational effectiveness.

Technical Domains & Tools: Experience in multiple of the following areas is preferred:

• Security Information and Event Management (SIEM)
• Endpoint Detection and Response (EDR)
• Technical Inventory and Asset Management
• Data Loss Prevention (DLP)
• Password and Privileged Access Management
• Active Directory (AD)
• DNS Security
• Multi-Factor Authentication (MFA)
• Single Sign-On (SSO) technologies, including SAML
• Email Security
• Firewalls and Network Security
• Vulnerability Management

Qualifications

Four-Year College Degree; Five years as a Computer Programmer Analyst III; Three years experience in communicating and negotiating with high level executives.

• Three (3) or more years of Information Security experience.
• Industry certifications such as CISSP, Security+, CEH, GIAC, or equivalent.
• Experience with integrating, automating, and optimizing security solutions.
• Experience working in state, local, or federal government environments.
• Proficiency in one or more scripting or automation languages such as Python or PowerShell.
• Familiarity with cybersecurity frameworks, compliance requirements, and industry best practices.
• Experience implementing and administering enterprise security technologies.
• Ability to identify opportunities for improvement and drive positive change in tools, processes, and services.
• Experience evaluating and adopting emerging technologies, including AI-enabled security solutions.

The Information Technology Services Department is responsible for enterprise technology operations for the City of Alexandria. ITS provides technology services and solutions to City departments to enhance service delivery. ITS aligns its work with City needs by providing leadership, resources, expertise, and products that enable departments to better serve the City’s residents, businesses, and visitors. ITS resources support initiatives funded through the multi-year Information Technology Capital Improvement Plan (IT/CIP) to improve the overall technology landscape. The City of Alexandria’s ITS Department has been a Top Ten National Finalist in the Digital Cities Award program for more than 20 years.