Suricata Engineer - TS/SCI with Poly (RHEL & NIC Tuning)

ENS Solutions, LLC; Chesapeake (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

401k Contribution from Day 1

PTO + 11 Paid Federal Holidays

Relocation Assistance

Tuition, Certification & Professional 

Development Assistance

Job summary

ENS Solutions, LLC seeks an experienced Suricata Engineer to deploy and tune Suricata IDS/IPS in a complex enterprise environment. You will specialize in YAML configuration, runtime engine interactions, and high-performance NIC tuning on RHEL systems.

You will collaborate with security teams to integrate Suricata with SIEM platforms, troubleshoot kernel/module issues, and develop runbooks and documentation. TS/SCI clearance and DoD 8570 certifications are required or achievable.

Qualifications

• Proven experience managing Suricata IDS/IPS and hands-on YAML configfiles.
• Strong knowledge of Suricata configuration structure, syntax, and control of detection, logging and outputs.
• Extensive experience administering Red Hat Enterprise Linux (RHEL) systems and package management.
• Hands-on experience tuning Suricata for high-performance packet capture with Napatech NICs.
• Familiarity with NIC features like DMA, RSS, IRQ tuning and OFFLOAD capabilities.
• Experience troubleshooting Suricata with NIC drivers and kernel modules in enterprise environments.
• Scripting skills in Bash and Python to automate configuration and deployment tasks.
• Must possess TS/SCI clearance or the ability to obtain counter-intelligence polygraph.

Responsibilities

• Designing, deploying, and maintaining Suricata IDS/IPS systems across enterprise networks.
• Developing and optimizing Suricata YAML configuration files for detection and minimal false positives.
• Managing interaction between YAML config and runtime engine, including rule loading and logging.
• Tuning Suricata for optimal performance with Napatech NICs (DMA, RSS, interrupt coalescing).
• Collaborating with security teams to integrate Suricata with SIEMs and monitoring platforms.
• Troubleshooting Suricata on RHEL, addressing kernel modules, SELinux, and performance issues.
• Identifying and mitigating deployment pitfalls, dependencies and NIC driver issues.
• Providing documentation and runbooks for Suricata config, NIC tuning, and deployment processes.
• Staying current with Suricata releases and NIC driver updates.

Skills

Suricata IDS/IPS

YAML configuration

RHEL

Napatech NICs tuning

DMA/RSS/IRQ tuning

SIEM integration

Bash scripting

Python scripting

DoD 8570 IAT Level II Certification

Education

Associate’s degree or higher in IT/Engineering

Bachelor’s degree preferred

Tools

Docker

Kubernetes

Git

Job description

ENS Solutions, LLC seeks an experienced Suricata Engineer to deploy and tune Suricata IDS/IPS in a complex enterprise environment. You will specialize in YAML configuration, runtime engine interactions, and high-performance NIC tuning on RHEL systems.

You will collaborate with security teams to integrate Suricata with SIEM platforms, troubleshoot kernel/module issues, and develop runbooks and documentation. TS/SCI clearance and DoD 8570 certifications are required or achievable.