Senior Cybersecurity Engineer: Threat Defense & IAM

Roanoke County, VA; Roanoke (VA); On-site; USD 110,000 - 140,000; Full time

Job summary

Roanoke County's IT Department is seeking a Cybersecurity Engineer to design, implement, and improve the county's security posture across networks, endpoints, IAM, and cloud platforms.

You will lead threat and vulnerability management, coordinate with security leadership and external partners, and ensure compliance with NIST CSF 2.0 and regulatory requirements while advancing automation and secure architecture.

Qualifications

• Bachelor’s degree in computer-related field is required.
• Master’s degree or equivalent with certifications is preferred.
• CISSP or equivalent certification is highly desirable.
• Minimum five years of IT or information security experience.

Responsibilities

• Design, implement, and maintain Roanoke County cybersecurity infrastructure and defenses.
• Perform threat and vulnerability management and incident response activities.
• Collaborate with IS leadership and external partners on security operations and CSF alignment.
• Conduct security assessments, run vulnerability scans, and review configurations.
• Develop secure network architectures, IAM, and cloud security controls.
• Maintain security policies, documentation, and reporting on security posture.

Skills

Security architecture

Threat detection

Incident response

IAM

Network security

Endpoint protection

Vulnerability management

Penetration testing

Cloud security

Scripting (Python/PowerShell/Bash)

Log analysis

Project management

Communication

Disaster recovery

Education

Bachelor’s degree in computer-related field

Master’s degree in computer-related field or equivalent + certifications

Tools

Nessus

Qualys

Tenable

SIEM

IDS/IPS

EDR

DLP

Firewall

WAF

Job description

Roanoke County's IT Department is seeking a Cybersecurity Engineer to design, implement, and improve the county's security posture across networks, endpoints, IAM, and cloud platforms.

You will lead threat and vulnerability management, coordinate with security leadership and external partners, and ensure compliance with NIST CSF 2.0 and regulatory requirements while advancing automation and secure architecture.