Job description

Cybersecurity Engineer, Richmond, VA, United States Cybersecurity Engineer 3 The Virginia Department of Elections (ELECT) is seeking an Azure Senior Security Engineer (Cybersecurity Engineer 3) with a minimum of 5 years’ experience to work with an existing software development team. You will collaborate with established contractors and staff to focus on several web and Windows applications used by internal ELECT staff and constituents of the Commonwealth of Virginia. The candidate must have expertise in all aspects of IT security and cloud security, and experience working in an Agile/Scrum development environment, interacting with both technical and non-technical stakeholders. The candidate should possess extensive knowledge of cybersecurity practices, industry security standards, and regulatory standards. A bachelor’s degree and/or recognized industry certifications are strongly preferred and will enhance your application. ELECT employs mobile and responsive design practices; familiarity with these methodologies is a plus. Skill Matrix: At least 5 years of experience in IT security or cloud security roles. At least 3 years of hands-on experience securing Azure environments. A bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent work experience. Relevant certifications such as MS Certified Cybersecurity Architect Expert, Azure Security Engineer Associate (SC-300), CompTIA Security+, CISSP, or CISM are highly desirable. Experience with Azure Security Services (Azure Defender, MS Sentinel, Azure Key Vault, Azure Policy and Blueprints, Azure Security Center). Experience with Azure Active Directory (AAD), including conditional access, MFA, and identity protection. Knowledge of Privileged Identity Management (PIM) and Role-Based Access Control (RBAC). Experience with NSGs, ASGs, VPNs, ExpressRoute, and hybrid connectivity security. Ability to implement and monitor compliance with regulatory standards such as NIST, ISO 27001, GDPR, etc. Knowledge of threat modeling, vulnerability management, SIEM/SOAR tuning, response workflows, security alert triage, and forensics. Proficiency in scripting and automation using PowerShell, Bicep, ARM templates, or Terraform. Experience integrating security into CI/CD pipelines (e.g., GitHub Actions, Azure DevOps). Ability to create and deliver security architecture reports and documentation. Experience in risk assessment and mitigation strategies. #J-18808-Ljbffr

Requirements