Cybersecurity IDS/IPS Engineer — DoD Impact & Growth

Electrosoft; Richmond (VA); On-site; USD 150,000 - 160,000; Full time

Job summary

Electrosoft is seeking a Cybersecurity Engineer specializing in IDS/IPS to support DoD enterprise cybersecurity operations. The engineer will help design, implement, and maintain network IDS/IPS capabilities using Check Point IPS and Trellix IPS Manager.

Responsibilities include analyzing security events, developing customized SNORT signatures, maintaining signatures, supporting SIEM data, and coordinating with stakeholders. A DoD Secret Clearance and 8570/8140 certifications are required.

Qualifications

• Seven years of IT experience and security-focused roles.
• DOD Secret Clearance required.
• Eligible for IT I position.
• Certifications meeting DOD 8570/8140 IAT III and CND-IS.
• Experience with Trellix IPS Manager and Check Point IPS Blade.
• Experience creating customized SNORT signatures.

Responsibilities

• Implement and maintain enterprise IDS/IPS capabilities.
• Troubleshoot sensor issues and connectivity problems.
• Analyze security events with analysts to determine causes and responses.
• Develop and maintain IDS/IPS signature policies based on threat intel and DoD requirements.
• Create and test customized signatures before production deployment.
• Support configuration, patching, and maintenance of IDS/IPS sensors and management systems.
• Coordinate with cybersecurity stakeholders and produce technical documentation.

Skills

IDS/IPS engineering

DOD 8570 compliant

IAT III

CND-IS

SNORT signatures

Trellix IPS Manager

Check Point IPS Blade

Tools

Treliix IPS Manager

Check Point IPS Blade

Job description

Electrosoft is seeking a Cybersecurity Engineer specializing in IDS/IPS to support DoD enterprise cybersecurity operations. The engineer will help design, implement, and maintain network IDS/IPS capabilities using Check Point IPS and Trellix IPS Manager.

Responsibilities include analyzing security events, developing customized SNORT signatures, maintaining signatures, supporting SIEM data, and coordinating with stakeholders. A DoD Secret Clearance and 8570/8140 certifications are required.