Cybersecurity Engineer (10+)

Job Title: Cybersecurity Engineer

Location: Richmond, VA
Job Type: W2 Contract

Job Summary

Client is seeking an experienced Cybersecurity Engineer to support the modernization and expansion of the agency's Security Engineering & Operations program. This position will play a key role in strengthening VSP's cybersecurity posture by designing, implementing, and optimizing security controls across enterprise infrastructure, cloud environments, identity systems, and security operations platforms. The Cybersecurity Engineer will lead efforts to enhance SIEM/SOAR integrations, increase security visibility, improve detection capabilities, and support the evolution of VSP's Security Operations Center (SOC) model. The ideal candidate combines strong technical engineering expertise with a process improvement mindset and the ability to work collaboratively across infrastructure, application, and security teams. Success in this role requires hands-on experience in security architecture, detection engineering, automation, and operational security modernization.

Key Responsibilities

• Design, implement, and maintain security controls across identity, endpoint, network, and cloud environments.
• Lead SIEM/SOAR integrations, logging pipelines, and security automation initiatives to improve visibility and operational efficiency.
• Develop and enforce secure configuration baselines, identity security controls, and enterprise security architecture standards.
• Build, tune, and optimize threat detection use cases, correlation rules, and threat intelligence integrations to enhance SOC capabilities.
• Support vulnerability management, incident investigations, root cause analysis, and remediation efforts.
• Identify opportunities to modernize security operations through automation, tool optimization, and emerging technologies, including AI-assisted workflows.
• Collaborate with infrastructure, application, and security teams to strengthen security controls and drive risk reduction initiatives.
• Create technical documentation, runbooks, and knowledge transfer materials, while supporting governance activities, procurement efforts, and team mentorship. 

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field (or equivalent experience).
• 10+ years of experience in cybersecurity engineering, security operations, systems engineering, or related security roles.
• Hands-on experience with SIEM platforms (Splunk, Microsoft Sentinel, LogRhythm, etc.), detection engineering, log management, and security monitoring.
• Strong knowledge of IAM, SSO, MFA, PAM, and identity security best practices.
• Experience securing Windows/Linux environments, enterprise networks, and cloud platforms.
• Experience implementing security baselines and standards such as CIS Benchmarks, DISA STIGs, or similar frameworks.
• Proficiency with scripting and automation tools such as PowerShell and Python.
• Understanding of incident response, threat detection, forensic readiness, and security operations.
• Knowledge of compliance and security frameworks including NIST CSF, RMF, and CJIS.
• Strong analytical, troubleshooting, communication, and documentation skills with the ability to thrive in a fast-evolving security environment.

Preferred Skills & Qualifications

• Experience supporting government, public sector, law enforcement, or CJIS-regulated environments.
• Familiarity with SOAR platforms, security automation, and vulnerability management programs.
• Experience working within hybrid SOC environments, including collaboration with MSSPs.
• Knowledge of Azure, AWS, hybrid cloud security, EDR solutions, threat hunting, and threat intelligence integrations.
• Relevant security certifications preferred, including CISSP, GIAC certifications (GSEC, GCIA, GCED, GCSA), AWS Security Specialty, or Microsoft Azure Security Engineer Associate.