Cybersecurity Engineer

GENERAL DESCRIPTION

Want to join a high-performing organization? Want to make a positive impact on the Roanoke County community by strengthening the security and reliability of the IT systems people depend on every day? The County of Roanoke's nationally recognized and award-winning Department of Information Technology (IT) aligns the county's information technology infrastructure and systems to the needs of the community.

The Roanoke County Cybersecurity Engineer is responsible for designing, implementing, maintaining, and continuously improving the County’s cybersecurity infrastructure and defense systems. This position plays a critical role in protecting the confidentiality, integrity, and availability of County information systems and data assets by engineering security solutions, performing threat and vulnerability management, and ensuring compliance with federal, state, and local security standards. The Cybersecurity Engineer is a key member of Roanoke County’s Cybersecurity Division responsible for engineering, implementing, and maintaining advanced security controls to safeguard the County’s information systems, data, and infrastructure.

This role supports the County’s mission by ensuring the confidentiality, integrity, and availability of technology resources across all departments. The Cybersecurity Engineer serves as a technical subject matter expert in cybersecurity architecture, endpoint protection, threat detection, network defense, identity and access management (IAM), and incident response. This role works closely with the information security leadership, County IT teams, and external cybersecurity partners to develop and sustain proactive defenses against cyber threats.

The position also contributes to strategic initiatives that align with the County’s overarching Cybersecurity Policy and National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF 2.0). Additional responsibilities include cyber-risk management, vulnerability management, system security assessments, incident response along with in-depth collaboration with the County’s information security leadership in developing and deploying the overall Roanoke County cybersecurity strategy. Duties include assisting the information security leadership in building, deploying, and maturing a cybersecurity framework (CSF), disaster recovery and continuity of operations, along with secure network architecture designs, and cybersecurity monitoring solutions.

Other duties may be assigned as needed.

• ~ Ensure security requirements are included in enterprise architecture, system design, and IT projects; collaborate with teams to embed secure configurations and best practices.
• ~ Design, implement, and optimize with other IT teams to secure network and system architectures, including firewalls, Intrusion Detection Systems (IDS)/(IPS) Intrusion Prevention Systems, endpoint security, encryption, and authentication mechanisms.
• ~ Perform regular security assessments, penetration testing, configuration reviews, and vulnerability management; analyze logs and security data to detect and mitigate threats.
• ~ Assess the effectiveness of security controls, recommend risk mitigation strategies, and ensure systems operate within acceptable risk levels and comply with policies and standards.
• ~ Coordinate with the Information Security Leadership and the external security operations center (SOC) to respond to cyber incidents, conduct root cause analysis, support containment activities, and contribute to improving incident response processes.
• ~ Enforce and maintain security policies, procedures, standards, and documentation; provide reporting on security posture, vulnerabilities, and incidents.
• ~ Assist…