Security Engineer

City of Alexandria•Alexandria, VA

About The Position

The City of Alexandria's Information Technology Services (ITS) Department is seeking a Security Engineer for its Information Security team. The role helps strengthen the City's security posture and protect digital services used by residents, employees, and City operations. The Security Engineer works with teams across ITS to build, improve, and maintain security solutions, identify and address vulnerabilities, and implement technologies that support security in a changing threat landscape. The position covers security platform engineering and administration, cybersecurity operations, vulnerability and risk management, compliance support, technology integration, and operational maintenance. It also involves exploring AI and automation to improve security operations, while supporting responsible use that protects privacy, data integrity, and public trust. The role contributes to continuous improvement by researching and implementing solutions that protect the confidentiality, integrity, and availability of City data and services. The Information Technology Services Department provides enterprise technology operations, services, and solutions to City departments. ITS aligns its work with City needs and supports initiatives funded through the multi-year Information Technology Capital Improvement Plan.

Requirements

Four-year college degree.
Five years as a Computer Programmer Analyst III.
Three years of experience communicating and negotiating with high-level executives.

Nice To Haves

Three or more years of Information Security experience.
Industry certifications such as CISSP, Security+, CEH, GIAC, or equivalent.
Experience integrating, automating, and optimizing security solutions.
Experience working in state, local, or federal government environments.
Proficiency in one or more scripting or automation languages, such as Python or PowerShell.
Familiarity with cybersecurity frameworks, compliance requirements, and industry best practices.
Experience implementing and administering enterprise security technologies.
Ability to identify opportunities for improvement and drive positive change in tools, processes, and services.
Experience evaluating and adopting emerging technologies, including AI-enabled security solutions.
Experience in multiple technical domains such as SIEM, EDR, technical inventory and asset management, DLP, password and privileged access management, Active Directory, DNS security, MFA, SSO technologies including SAML, email security, firewalls and network security, and vulnerability management.

Responsibilities

Design, implement, support, maintain, and enhance security solutions and tools for monitoring, visibility, resilience, threat detection, incident response, and asset management.
Evaluate new and emerging technologies and recommend solutions that strengthen security capabilities.
Collaborate with ITS teams to support reliable logging, alerting, and response capabilities.
Assist in automating security processes and integrating security tools and services.
Support security investigations and incident response activities.
Perform vulnerability assessments, risk reviews, and compliance activities, and work with technology teams to remediate identified risks.
Support audits, security assessments, penetration tests, and continuous improvement efforts.
Partner with ITS and other City departments to implement security services and improve existing solutions.
Identify gaps in tools, processes, and controls and recommend improvements.
Provide technical guidance on secure configurations, security baselines, and security best practices.
Support the ongoing operation and maintenance of the City's security technologies.
Explore AI and automation technologies to improve security operations and efficiency.
Identify opportunities to use AI to enhance threat detection, monitoring, analysis, and response.
Help automate routine and repetitive work and collaborate on responsible AI practices that protect privacy, data integrity, and public trust.
Stay informed about emerging cybersecurity threats, trends, and technologies, and research, design, and implement solutions to protect City data and services.