Suricata IDS/IPS Engineer — NIC Tuning & RHEL Expert

ENS Solutions, LLC; Washington; On-site; USD 120,000 - 165,000; Full time

Benefits offered by this job

Free Platinum-Level Medical/Dental/V​i

401k Contribution from Day 1

PTO + 11 Paid Federal Holidays

Long & Short Term Disability Insurance

Group Term Life Insurance

Tuition, Certification & Professional

Relocation Assistance

Job summary

ENS Solutions, LLC in Washington state seeks an experienced Suricata Engineer to deploy and tune Suricata in a Red Hat Enterprise Linux environment, focusing on YAML configurations and SIEM integration.

You will optimize Suricata performance with Napatech NICs, manage rules, logging, and runtime interactions, and produce runbooks and documentation for enterprise deployment. DoD 8570 IAT II certified candidates are preferred.

Qualifications

• Hands-on Suricata IDS/IPS management with YAML configurations.
• Strong knowledge of Suricata configuration structure and logging.
• Extensive RHEL administration, including package management and SELinux.
• Experience tuning Suricata for high performance with Napatech NICs.
• Familiarity with DMA, RSS, interrupts, and NIC offloads for Suricata.
• Ability to automate configuration with Bash/Python scripts.
• DoD 8570 IAT II certification and ability to obtain DoD CND/CISA-like certs.
• TS/SCI clearance or ability to obtain one.

Responsibilities

• Design, deploy, and maintain Suricata IDS/IPS across enterprise networks.
• Develop, review, and optimize YAML configuration for detection accuracy.
• Manage interaction between YAML config and runtime Suricata engine (rules/logging).
• Tune Suricata with Napatech NICs: DMA, RSS, interrupts, offloads.
• Integrate Suricata with SIEM and other security monitoring tools.
• Troubleshoot Suricata on RHEL: kernel modules, SELinux, performance tuning.
• Identify and mitigate deployment pitfalls in large environments.
• Create runbooks and detailed documentation for deployment and tuning.
• Stay updated with Suricata releases and NIC driver best practices.

Skills

Suricata IDS/IPS expertise

YAML configuration tuning

RHEL administration

Napatech NIC tuning

DMA/RSS/offloads

DoD 8570 IAT II Certification

Bash/Python scripting

TS/SCI clearance

Education

Associate’s degree

Bachelor’s degree

Master’s degree

Tools

Napatech NICs

Docker/Kubernetes

YUM/DNF

Splunk

SELinux configuration

Job description

ENS Solutions, LLC in Washington state seeks an experienced Suricata Engineer to deploy and tune Suricata in a Red Hat Enterprise Linux environment, focusing on YAML configurations and SIEM integration.

You will optimize Suricata performance with Napatech NICs, manage rules, logging, and runtime interactions, and produce runbooks and documentation for enterprise deployment. DoD 8570 IAT II certified candidates are preferred.