Cybersecurity Engineer

This position is not eligible for third-party (i.e., contractor/staffing agency) placements. For questions about this position, please email s
Information Technology based positions must meet requirements specified in Criminal Justice Information System (CJIS) policy for access to the Virginia Criminal Information Network (VCIN).

Working Title of Vacant Position

Working Title of Vacant Position Cybersecurity Engineer

Full Time

Public

1

INFORMATION TECHNOLOGY

IT CYBER SECURITY SVCS

2026361

40+

8:00 AM to 5:00 PM;
Monday – Friday.
Employees may be expected to work hours in excess of their normally scheduled hours in response to short-term department needs and/or City-wide emergencies.

Chesapeake, VA

O - Occasional

GE20

Semi-Monthly

$87,075-$120,000;
Depending on qualifications and experience.

Are you a cybersecurity professional with a sharp eye for threats and a passion for protecting data and infrastructure? The City of Chesapeake is seeking a Cybersecurity Engineer to join our security team and help defend critical systems across the enterprise.

In this role, you’ll play a critical part in strengthening our cybersecurity capabilities — proactively identifying, analyzing, and responding to threats, engineering secure solutions, and driving improvements that enhance the resilience and effectiveness of our security program.

• Design, implement, and maintain enterprise security architectures with a strong emphasis on network security, including hybrid cloud networking, virtualization, secure routing, segmentation, and modern perimeter designs.
• Define and enforce Zero Trust security principles centered on network micro‑segmentation, identity‑aware access control, secure connectivity patterns, and layered network defenses.
• Create and maintain security reference architectures, standards, and design documentation covering network topology, firewalling, secure connectivity, encryption strategies, and inter‑system communication paths.
• Provide architectural oversight for firewalls, routers, switches, VPNs, endpoint security/ XDR , email security, SIEM telemetry, and vulnerability management, ensuring consistent and effective network security control implementation.
• Conduct threat modeling and architectural risk assessments prioritizing network attack surfaces, segmentation gaps, lateral‑movement risks, and protocol vulnerabilities aligned with NIST , CIS , ISO 27001, HIPAA , CJIS , PCI , and related frameworks.
• Coordinate penetration testing with focus on network exploitation paths, segmentation enforcement, firewall rule validation, secure remote access, and drive remediation activities.
• Define secure network design patterns for on‑premises, hybrid, and cloud networks, including segmentation and perimeter architectures.

• Define and govern security requirements for AI/ML platforms, data pipelines, and model interfaces.
• Implement controls to mitigate threats such as prompt injections, model theft, data poisoning, and unauthorized API access.
• Establish security requirements for AI workloads handling sensitive data, including secure connectivity, encrypted endpoints, audit logging, and compliance‑aligned data‑access governance.
• Govern secure data‑sharing patterns between AI platforms and inter‑agency partners (law enforcement, city utilities, health departments) by defining trusted networks, cross‑domain access controls.
• Design secure Azure and AWS environments including…