Security Engineer – IDS, Vulnerability Infrastructure

Jobtailor; New Jersey; On-site; USD 110,000 - 170,000; Full time

Job summary

Jobtailor seeks a seasoned infrastructure engineer to orchestrate the lifecycle of 900+ Suricata sensors, tune performance, and develop Logstash pipelines. You will automate vulnerability management with Python and Bash and collaborate with a small team on threat identification.

Required: enterprise Linux administration, network traffic analysis, Suricata rule creation, Nessus automation, and data-center hardware mgmt (iDRAC, RAID). Strong scripting and collaboration are essential.

Qualifications

• Bachelor's degree or 4+ years of relevant work or military experience.
• 4+ years of relevant experience in enterprise environments.
• Enterprise Linux admin experience with RHEL/CentOS/ Rocky.
• Network analysis using tcpdump, Wireshark, pcap, and BPF filtering.
• Python or scripting for automation and backend tooling.
• Experience with Suricata rules and suricata-update builds.
• Hands-on hardware management and data center fiber infra.
• Ansible fleet orchestration and Logstash pipelines.

Responsibilities

• Orchestrate lifecycle of 900+ Suricata sensors and tune performance.
• Develop and refine Logstash configurations and pipelines.
• Automate vulnerability management using Python/Bash scripts.
• Manage Nessus pipeline execution via cron and automation.
• Oversee Dell server hardware, iDRAC, RAID, and firmware updates.
• Coordinate data center logistics including cabling and rack tickets.
• Develop custom Suricata plugins and optimize alert workflows.
• Identify coverage gaps, reduce false positives, and maintain visibility.

Skills

Collaboration

Problem-Solving

Communication

Education

Bachelor's degree or 4+ years experience

Tools

Dell Server Hardware

IDRAC

RAID

Cron

Wireshark

Splunk

Jinja Templates

Job description

• Orchestrate the operational lifecycle of more than 900 Suricata IDS sensors
• Tune system-level performance, including CPU affinity and NUMA nodes, to prevent packet loss
• Develop and refine Logstash input, filter, mutate, and output configurations
• Engineer and deploy custom Suricata IDS rules and signatures using suricata-update
• Automate vulnerability management by maintaining and debugging Python and Bash code for Nessus scanning
• Manage Nessus pipeline execution through cron
• Manage Dell server hardware lifecycle, including iDRAC, RAID, and firmware updates
• Execute data center logistics involving cabling, optics, passive tapping, power, cooling, and rack-space ticketing
• Develop custom plugins and optimize alert pipelines
• Identify coverage gaps, reduce false positives, and maintain uninterrupted sensor-fleet visibility
• Collaborate with a small specialized team to advance infrastructure automation and threat identification

Requirements

• Bachelor's degree or four or more years of work experience
• Four or more years of relevant experience, demonstrated through work and/or military experience or specialized training
• Enterprise Linux systems administration using RHEL, Rocky, or CentOS, including package and repository administration
• Network traffic and protocol analysis using tcpdump, pcap collection, Wireshark, and BPF filtering
• Ability to diagnose encapsulation types and perform deep inspection of DNS, TLS, HTTP, SSH, SNMP, SMTP, and NTP
• Python or other scripting for infrastructure and backend automation
• Hands-on experience managing enterprise physical server hardware, out-of-band administration, and data center fiber infrastructure
• Experience with Suricata IDS rules, rule creation, and suricata-update rule builds
• Competency compiling custom Suricata plugins
• Ansible fleet orchestration using playbooks and Jinja templates
• Experience with Logstash pipelines and Splunk telemetry/dashboards
• Knowledge of NetFlow collection and analysis
• Understanding of GTP, Diameter, SIP, and LDAP
• Experience with data center project management, hardware build planning, purchasing, and facilities ticketing

Core Competencies

Demonstrates expertise in orchestrating the operational lifecycle of Suricata IDS sensors, including performance tuning and vulnerability management through Python and Bash automation. Proficient in enterprise Linux systems administration, network traffic analysis, and data center logistics.

Highest-signal resume keywords

• Suricata IDS Management
• Enterprise Linux Systems Administration
• Network Traffic Analysis
• Python Scripting for Automation
• Ansible Fleet Orchestration

ATS Optimization Keywords

Hard Skills

• Suricata IDS Rules Creation
• Logstash Pipeline Development
• Network Protocol Analysis
• Data Center Project Management
• Custom Plugin Development
• Nessus Vulnerability Management
• TCPDump Usage
• BPF Filtering
• Deep Packet Inspection
• NetFlow Analysis

Soft Skills

• Collaboration
• Problem-Solving

Industry Keywords

• Data Center Logistics
• Infrastructure Automation
• Threat Identification
• Fiber Infrastructure
• Facilities Ticketing

Tools & Technologies

• Dell Server Hardware
• IDRAC
• RAID
• Cron
• Wireshark
• Splunk
• Jinja Templates