Cybersecurity Engineer — IDS/IPS Analysis & Defense

Electrosoft; North Carolina; On-site; USD 150,000 - 160,000; Full time

Job summary

Electrosoft Services, LLC is seeking a Cybersecurity Engineer specializing in Intrusion Detection and Prevention (IDS/IPS) to support enterprise cybersecurity operations within a DoD environment. The engineer will support architecture, engineering, operation, maintenance, testing, and enhancements of DLA’s IDS/IPS capabilities including Check Point IPS and Trellix IPS Manager.

Key responsibilities include implementing enterprise IDS/IPS, troubleshooting sensor issues, analyzing security events

Qualifications

• Seven years of relevant IT experience.
• DOD Secret Clearance.
• Eligible for IT I authorization.
• 8570/8140 IAT level III certification.
• 8570/8140 CND-IS certification.
• Experience with Trellix IPS Manager and Check Point IPS Blade.
• Four years of experience creating customized signatures using SNORT.

Responsibilities

• Implement and maintain enterprise IDS/IPS capabilities.
• Troubleshoot network sensor issues and connectivity problems.
• Analyze security events with cybersecurity analysts to determine causes and responses.
• Develop and maintain IDS/IPS signature policies based on threat intel and DoD requirements.
• Create and test customized signatures before production deployment.
• Support security configurations, patching, firmware updates, and maintenance of IDS/IPS sensors and management systems.
• Assist with SIEM data collection and correlation for IDS/IPS.
• Research emerging IDS/IPS technologies and recommend improvements or replacements.
• Identify and analyze network security issues such as DoS, spoofing, and MITM attacks.
• Develop and maintain technical documentation and SOPs.

Skills

IT experience

Security analysis

Tools

Trellix IPS Manager

Check Point IPS Blade

SNORT

Job description

Electrosoft Services, LLC is seeking a Cybersecurity Engineer specializing in Intrusion Detection and Prevention (IDS/IPS) to support enterprise cybersecurity operations within a DoD environment. The engineer will support architecture, engineering, operation, maintenance, testing, and enhancements of DLA’s IDS/IPS capabilities including Check Point IPS and Trellix IPS Manager.

Key responsibilities include implementing enterprise IDS/IPS, troubleshooting sensor issues, analyzing security events