Cybersecurity Engineer - Intrusion Detection / Prevention

Electrosoft; Columbus (OH); On-site; USD 120,000 - 130,000; Full time

Benefits offered by this job

Equal Opportunity Employer

Job summary

Electrosoft Services, LLC seeks a Cybersecurity Engineer specializing in Intrusion Detection and Prevention Systems (IDS/IPS) to support enterprise cybersecurity operations within a DoD environment.

The engineer will help architect, operate, test, and enhance DLA's network IDS/IPS capabilities, including Check Point IPS and Trellix IPS Manager, while coordinating with cybersecurity stakeholders and government personnel.

Qualifications

• Must hold DoD security clearances and certifications as listed.
• Experience with IDS/IPS policies, signatures, and threat intel.
• Ability to create, test, and migrate signatures to production.

Responsibilities

• Implement and maintain enterprise IDS/IPS capabilities.
• Troubleshoot sensor issues and connectivity problems.
• Analyze security events with cybersecurity analysts for response.
• Develop and maintain signature policies based on DoD requirements.
• Coordinate with enterprise stakeholders on IDS/IPS activities.

Skills

DoD Secret Clearance

IT I eligibility

Threat analysis

IDS/IPS troubleshooting

Education

DOD 8570/8140 IAT III certification

DOD 8570/8140 CND-IS certification

Tools

Trellix IPS Manager

Check Point IPS Blade

SNORT signature development

Job description

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation. We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel - and the knowledge that outstanding effort is recognized and rewarded. The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, many more.

Cybersecurity Engineer - Intrusion Detection / Prevention

Position Summary

Electrosoft is seeking a Cybersecurity Engineer specializing in Intrusion Detection and Prevention Systems (IDS/IPS) to support enterprise cybersecurity operations within a DoD environment.

The engineer will support the architecture, engineering, operation, maintenance, testing, and enhancement of DLA's network intrusion detection and prevention capabilities, including Check Point IPS and Trellix IPS Manager.

Key Responsibilities

• Implement and maintain enterprise network and wireless IDS/IPS capabilities.
• Troubleshoot network sensor issues, anomalies, and connectivity problems.
• Analyze security events in coordination with cybersecurity analysts to determine potential causes and appropriate response actions.
• Develop and maintain IDS/IPS signature policies based on threat intelligence, cybersecurity best practices, and DoD requirements.
• Create and test customized signatures before migration into production environments.
• Support security configurations, patching, firmware updates, and operational maintenance of IDS/IPS sensors and management systems.
• Assist with SIEM data collection and correlation associated with intrusion detection and prevention systems.
• Research emerging IDS/IPS technologies and recommend product replacements, enhancements, or capability improvements.
• Identify and analyze network security issues including unauthorized devices, denial-of-service attacks, session hijacking, man-in-the-middle attacks, scanning activity, MAC spoofing, brute-force attempts, and other network-based threats.
• Support analysis of wired and wireless network security events.
• Develop and maintain technical documentation, SOPs, signature lists, and cybersecurity tool update taskings.
• Support disaster recovery planning and recovery testing for intrusion detection platforms.
• Provide technical briefings and training materials for Government and contractor personnel.
• Coordinate technical activities with enterprise service areas and cybersecurity stakeholders.

Basic Qualifications:

• Seven (7) years of relevant IT experience
• DOD Secret Clearance
• Must be eligible for IT I
• Relevant certification meeting DOD 8570/8140 IAT level III
• Relevant certification meeting DOD 8570/8140 CND-IS
• Computing Environment: Trellix IPS manager, Check Point IPS Blade
• Four (4) years of experience creating customized signatures using SNORT.

Pay Range: $120,000 USD - $130,000 USD

Electrosoft is an Equal Opportunity Employer/Veterans/Disabled