Suricata IDS/IPS Engineer — YAML Tuning & Napatech

ENS Solutions, LLC; Washington (District of Columbia); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Free Platinum-Level Medical/Dental/V…

401k Contribution from Day 1

PTO + 11 Paid Federal Holidays

Disability Insurance

Group Term Life Insurance

Tuition, Certification & Professional

Relocation Assistance

Job summary

ENS Solutions, LLC is seeking an experienced Suricata Engineer to deploy, tune, and maintain Suricata IDS/IPS in a Red Hat Enterprise Linux environment. The role focuses on YAML configuration management, high-performance NIC tuning with Napatech, and integration with SIEM systems.

You will work in a security-focused enterprise setting, collaborating with teams to ensure optimal detection, logging, and performance while addressing complex infrastructure challenges.

Qualifications

• Experience managing Suricata YAML configurations and runtime behavior.
• Extensive experience on Red Hat Enterprise Linux (RHEL).
• Experience tuning Suricata for high-performance packet capture with Napatech NICs.

Responsibilities

• Design, deploy, and maintain Suricata IDS/IPS across enterprise networks.
• Develop and optimize Suricata YAML configurations for detection and logging.
• Tune Suricata with Napatech NICs for high performance and low packet loss.
• Collaborate with security teams to integrate Suricata with SIEM.
• Troubleshoot Suricata on RHEL, including SELinux and kernel modules.
• Document configurations, runbooks, and deployment procedures.

Skills

Suricata IDS/IPS

YAML configuration

Bash scripting

Python scripting

RHEL administration

DoD 8570 IAT II Certification

TS/SCI clearance

Team collaboration

Education

Associate’s degree

Bachelor’s degree

Master’s degree

Tools

Napatech NICs

NIC drivers

Docker/Kubernetes

Job description

ENS Solutions, LLC is seeking an experienced Suricata Engineer to deploy, tune, and maintain Suricata IDS/IPS in a Red Hat Enterprise Linux environment. The role focuses on YAML configuration management, high-performance NIC tuning with Napatech, and integration with SIEM systems.

You will work in a security-focused enterprise setting, collaborating with teams to ensure optimal detection, logging, and performance while addressing complex infrastructure challenges.