Security Engineer: 900+ Suricata IDS Fleet & Automation

Verizon; Basking Ridge (NJ); Hybrid; USD 101,000 - 194,000; Full time

Benefits offered by this job

Health benefits

401(k) matching

Paid time off

Job summary

Verizon is seeking a Security Engineer to join a specialized team responsible for deploying, scaling, and operating distributed intrusion detection systems and vulnerability scanning infrastructure. You will manage a fleet of over 900 Suricata IDS sensors across data center boundaries to monitor traffic on Verizon's management network.

This role blends data center hardware lifecycle with Python and scripting for automation, plus collaboration to ensure telemetry, threat detection, and

Qualifications

• Bachelor's degree or four or more years of work experience.
• Four+ years of relevant experience, demonstrated through work/military experience or training.
• Enterprise Linux systems administration (RHEL, Rocky, CentOS) including package management and repo administration.
• Network traffic and protocol analysis (tcpdump, pcap, Wireshark, BPF filtering).
• Ability to diagnose encapsulation types and inspect DNS, TLS, HTTP, SSH, SNMP, SMTP, NTP protocols.
• Python or any scripting for infrastructure and backend automation.
• Hands-on experience managing enterprise physical server hardware, out-of-band administration, and data center fiber infrastructure.

Responsibilities

• Orchestrate the operational lifecycle of 900+ Suricata IDS sensors, including system-level performance tuning.
• Develop and refine Logstash configurations to ensure telemetry accuracy and data integrity for security analysis.
• Engineer and deploy custom Suricata IDS rules and signatures with suricata-update for synchronized fleet defense.
• Automate the vulnerability management pipeline with Python/Bash backends for Nessus scanning via cron.
• Manage Dell server hardware lifecycles, including iDRAC, RAID, and firmware updates to maximize sensor uptime.
• Handle data center logistics like cabling, optics selection, and rack-space management to ensure reliable signal delivery.

Skills

Enterprise Linux admin

Traffic analysis

Protocol inspection

Python scripting

Hardware management

Education

Bachelor's degree or 4+ years experience

Tools

Suricata IDS

Logstash

Nessus

Ansible

Splunk

Netflow

Job description

Verizon is seeking a Security Engineer to join a specialized team responsible for deploying, scaling, and operating distributed intrusion detection systems and vulnerability scanning infrastructure. You will manage a fleet of over 900 Suricata IDS sensors across data center boundaries to monitor traffic on Verizon's management network.

This role blends data center hardware lifecycle with Python and scripting for automation, plus collaboration to ensure telemetry, threat detection, and