Cyber Security Engineer

Stafford County Government is seeking an experienced Cyber Security Engineer to join our team and play a key role in strengthening the security and resilience of our technology environment.

This is a hands-on opportunity for a cybersecurity professional who enjoys solving complex problems, improving security capabilities, and turning emerging threats into practical defenses.

You’ll work across Microsoft 365 security and compliance, SIEM, vulnerability management, threat detection, incident response, cloud and endpoint security, and identity protection
—while partnering with technical and business teams across the organization.

Beyond the technology, this role has a meaningful mission:
protecting the systems, information, and digital services our employees and community rely on every day.

• Hiring Range: $96,720 – $ annually, based on experience
• Full Salary Range: $96,720 – $, providing opportunity for continued growth and development

• Administers, configures, and continuously improves Microsoft 365 security, compliance, identity, endpoint, email, device, and data protection capabilities;
• Operates and enhances the County’s SIEM and security monitoring program, including log integration, detection development, alert tuning, dashboards, reporting, and response automation;
• Monitors, triages, investigates, and documents security alerts and incidents across cloud, endpoint, identity, email, application, and network environments;
• Coordinates cybersecurity incident response operations, including containment, eradication, recovery, evidence preservation, root-cause analysis, after-action review, and corrective actions;
• Manages the vulnerability management program, including asset coverage, scanning, validation, risk-based prioritization, remediation tracking, exceptions, and stakeholder reporting;
• Performs threat hunting and technical investigations using security telemetry, threat intelligence, and other available data sources;
• Evaluates security findings and control effectiveness, identifies gaps, and recommends practical risk-reduction measures;
• Works with infrastructure, application, cloud, and business teams to securely design, assess, and integrate systems, services, and data architectures;
• Creates and maintains cybersecurity standards, procedures, playbooks, diagrams, metrics, reports, and technical documentation;
• Supports audit, compliance, governance, risk management, security awareness, continuity, disaster recovery, and cybersecurity exercises by providing technical analysis and remediation support;
• Maintains knowledge of emerging threats, vulnerabilities, technologies, and industry practices and recommends improvements appropriate to County operations;
• Provides professional guidance, technical expertise, and security recommendations to staff, leadership vendors, and project teams;
• Participate in 24x7 on-call rotations;
• May be required to participate in after-hours incident response, maintenance, or emergency support operations;
• Performs related tasks as required.

• Comprehensive knowledge of cybersecurity engineering, security operations, cloud security, endpoint security, identity security, email security, data protection, and incident response principles;
• Strong working knowledge of Microsoft 365 security, compliance, identity, endpoint, device, email, and data protection administration;
• Thorough knowledge of SIEM technologies, log management, security analytics, detection development, alert tuning, and response automation concepts;
• Thorough knowledge of vulnerability management, risk-based remediation, configuration assessment, and security control validation;
• Knowledge of common attack techniques, threat vectors, malware behavior, identity compromise,…