GMS-Staff-IDS Management

EY Nigeria; Bengaluru; On-site; INR 600,000 - 1,100,000; Full time

Job summary

EY Nigeria is recruiting a Network Security Engineer focused on IDS/IPS to support the end-to-end lifecycle of sensors in enterprise environments. You will collaborate with security operations teams and senior architects to tune signatures, analyze alerts, and maintain sensor visibility across networks.

The role emphasizes configuring logs, validating sensor placements, and ensuring smooth handover/documentation for ongoing operations.

Qualifications

• Hands-on network security operations or IDS/IPS administration.
• Experience with Snort, Suricata or Zeek.
• Strong TCP/IP and protocol analysis skills.
• Familiar with Linux CLI and log/config files.
• Experience with log forwarding to SIEMs.

Responsibilities

• Assist in evaluating network tap configurations and sensor placements for visibility.
• Review threat intelligence, CVEs, and advisories to identify coverage gaps.
• Audit IDS signatures and policies to reduce false positives.
• Install and configure IDS/IPS appliances or software agents and apply baseline policies.
• Validate tap aggregation, feeds, and cabling to prevent packet loss.
• Configure log forwarding to SIEM/data lake and assist with SOPs and handover documentation.

Skills

TCP/IP analysis

Packet analysis

IDS/IPS administration

SIEM integration

Tools

Snort

Suricata

Zeek

Job description

About the role

EY Nigeria is hiring a Network Security Engineer focused on IDS/IPS to support the end-to-end lifecycle of IDS/IPS sensors, including assessment, deployment, transition, and operations for enterprise environments.

The role partners with security operations teams and senior architects to tune signatures, analyze alerts, and maintain sensor availability and visibility across networks.

What you'll do

• Assist in evaluating network tap configurations and sensor placements for complete visibility
• Review threat intelligence, CVEs, and advisories to identify coverage gaps
• Audit IDS signatures and policies to reduce false positives
• Install and configure IDS/IPS appliances or software agents and apply baseline policies
• Validate tap aggregation, feeds, and cabling to prevent packet loss
• Configure log forwarding to SIEM/data lake and assist with SOPs and handover documentation

What they're looking for

• 1-3 years of hands-on network security operations or IDS/IPS administration experience
• Experience with enterprise IDS/IPS solutions (commercial or open source such as Snort, Suricata, Zeek)
• Strong TCP/IP and protocol analysis skills, and familiarity with packet analysis tools
• Basic to intermediate Linux CLI skills and ability to work with logs and configuration files
• Understanding of signature rules, anomaly detection, and alert triage
• Experience with log forwarding to SIEMs and change management processes

For applicants in Nigeria

• The listing states eligibility in Nigeria, with location in Bengaluru, IN, 560048, Nigeria; confirm how this applies in practice
• The listing does not state a timezone requirement; confirm expectations before interviewing
• The listing does not specify contractor vs employee; confirm employment type during discussions
• Pay currency or range is not provided; confirm during interview process