Cyber Security Engineer (Chesapeake)

The Cybersecurity Engineer will support the Security Operations Center (SOC) in maintaining, monitoring, and improving the security posture of the customer's enterprise network environment. This position is responsible for supporting cybersecurity threat detection, incident response, security engineering, and continuous monitoring operations to prevent, identify, analyze, and respond to cybersecurity threats and incidents.

The Cybersecurity Engineer will provide technical expertise in the evaluation, integration, implementation, and optimization of SOC technologies, including Security Information and Event Management (SIEM) and Intrusion Detection and Prevention Systems (IDS/IPS). The successful candidate will collaborate with cybersecurity and Network Operations Center (NOC) personnel, contribute to operational and cybersecurity strategies, and mentor junior analysts to strengthen incident investigation capabilities and overall SOC performance.

This position requires a strong technical foundation in enterprise cybersecurity operations, analytical problem-solving skills, and the ability to work collaboratively in a mission-focused environment.

Location: Chesapeake, Virginia

Work Arrangement: On-site

Position Type: Full-Time

Clearance: Active Secret

Key Responsibilities

Security Operations and Incident Response

• Support daily SOC operations, including continuous security monitoring, threat detection, incident analysis, and incident response activities.
• Identify, investigate, and analyze potential cybersecurity threats, vulnerabilities, and suspicious network activity.
• Support security incident investigations to determine root cause, assess potential impact, and recommend corrective and preventive actions.
• Coordinate with the Cyber Incident and Event Management team during security incidents, escalations, and high-priority operational events.
• Support continuous improvement of incident response procedures, security monitoring capabilities, and operational workflows.
  

Security Engineering and Technology Integration

• Provide cybersecurity engineering expertise to support market research, technology assessments, product evaluations, prototyping, integration, development, deployment, operation, and maintenance of SOC technologies.
• Evaluate emerging cybersecurity tools, technologies, and methodologies to identify opportunities to improve threat detection, incident response, and operational efficiency.
• Develop, implement, and maintain custom SIEM rules, correlation logic, alerts, dashboards, and other detection content.
• Tune and optimize SIEM and IDS/IPS platforms to improve detection accuracy, reduce false positives, and enhance security monitoring effectiveness.
• Support the implementation and continuous improvement of security tools, processes, and technical capabilities in alignment with customer requirements.
  

Threat Detection and Security Analysis

• Analyze security events, alerts, and log data to identify potential indicators of compromise and malicious activity.
• Support the use and optimization of enterprise security monitoring technologies, including SIEM, Endpoint Detection and Response (EDR), and related security platforms.
• Maintain current knowledge of cybersecurity threats, vulnerabilities, industry best practices, and incident response methodologies.
• Recommend improvements to detection capabilities, security configurations, investigative processes, and operational procedures.
  

Technical Leadership and Mentorship

• Train, guide, and mentor junior security analysts in effective incident investigation, evidence analysis, root-cause determination, and escalation procedures.
• Promote consistent application of SOC procedures, investigative standards, and incident documentation practices.
• Provide technical guidance and subject matter expertise to support the development of SOC personnel and operational capabilities.
  

Operational Coordination and Strategic Support

• Coordinate with collocated, on-site NOC personnel to support effective communication, incident coordination, and resolution of network security issues.
• Contribute to the development and refinement of cybersecurity strategies, operational plans, and process improvement initiatives.
• Participate in special projects, technical assessments, and other assignments supporting customer and program objectives.
• Prepare, analyze, and provide operational, technical, and cybersecurity data and reports requested by the Program Manager and corporate office.
• Support additional cybersecurity engineering and SOC operational requirements as assigned.
  

Required Qualifications

• Bachelor's degree from an accredited institution in Cybersecurity, Computer Science, Informatics, Information Systems, or a related technical field.
• Active Secret clearance
• At least five (5) years of full-time professional experience directly related to cybersecurity engineering, security operations, threat detection, incident response, or comparable job functions.
• Current Security+ certification or an equivalent or higher DoD 8570/8140-aligned qualification meeting the applicable IAT Level II requirement.
• Demonstrated knowledge of cybersecurity operations, security monitoring, threat detection, incident investigation, and incident response processes.
• Ability to analyze security events, investigate potential threats, identify root causes, and recommend appropriate mitigation measures.
• Strong analytical, troubleshooting, technical documentation, and problem-solving skills.
• Ability to communicate effectively with cybersecurity personnel, network operations teams, program leadership, and corporate stakeholders.
• Ability to work collaboratively in a mission-focused operational environment.
• Ability and willingness to work on-site at the customer's facility in Chesapeake, Virginia. This is not a remote or work-from-home position.
  
  

Preferred Qualifications

• Experience working with enterprise SIEM, EDR, IDS/IPS, or comparable cybersecurity monitoring and incident response platforms.
• Experience authoring, implementing, testing, and tuning custom SIEM detection rules, correlation logic, alerts, and dashboards.
• Experience reducing false positives and improving detection efficacy through security tool optimization and alert tuning.
• Experience conducting cybersecurity incident investigations, threat analysis, root-cause analysis, and incident remediation.
• Experience evaluating, integrating, deploying, and maintaining cybersecurity technologies within an enterprise environment.
• Experience training or mentoring junior cybersecurity analysts.
• Experience coordinating cybersecurity operations with NOC personnel or other technical operations teams.
• Experience supporting cybersecurity strategy, operational planning, and continuous process improvement.
  
  

Required Certification

Candidates must possess CompTIA Security+ or an equivalent or higher certification that satisfies the applicable DoD IAT Level II requirement. Acceptable certifications may include, subject to current DoD qualification requirements:

• CompTIA Security+
• CompTIA Cybersecurity Analyst (CyS90A+)
• Systems Security Certified Practitioner (SSCP)
• GIAC Security Essentials (GSEC)
• Certified Network Defender (CND)
• Cisco Certified Network Associate Security (CCNA Security), where applicable under current qualification rules
  
  

Certifications must meet the customer's applicable workforce qualification and contract requirements.

Work Environment

This position is based on-site at the customer's Security Operations Center in Chesapeake, Virginia. The Cybersecurity Engineer will work closely with SOC personnel, the Cyber Incident and Event Management team, collocated NOC personnel, and program leadership to support continuous monitoring, incident response, and ongoing improvement of the customer's cybersecurity posture.

The anticipated salary range for this role is $93,000 to $97,000 annually. The anticipated salary range for this position is provided in accordance with applicable pay transparency laws. The final starting salary will be determined based on a variety of job-related factors, including the selected candidate's qualifications, skills, relevant experience, education, certifications, and work location (where applicable), as well as internal equity and market considerations.

We use E-Verify to confirm the identity and employment eligibility of all new hires.