Cybersecurity Engineer - Intrusion Detection / Prevention
Electrosoft Columbus, Ohio, United States · $150K–$160K/yr
Computer and Network Security · 51-200 employees
About the role
The Cybersecurity Engineer will manage, maintain, and enhance enterprise network and wireless IDS/IPS capabilities within a DoD environment. Responsibilities include analyzing security events, developing signature policies, and performing operational maintenance on security sensors.
What they look for
Requirements
Candidates must have at least seven years of relevant IT experience and hold a DoD Secret clearance. Required certifications include DoD 8570/8140 IAT level III and CND-IS, along with specific experience in Trellix and Check Point systems.
Benefits
Full description
Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation. We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded. The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more. If we’ve described you and your dream workplace, please apply and share in the many benefits and opportunities we offer.
Cybersecurity Engineer - Intrusion Detection / Prevention
Position Summary
Electrosoft is seeking a Cybersecurity Engineer specializing in Intrusion Detection and Prevention Systems (IDS/IPS) to support enterprise cybersecurity operations within a DoD environment.
The engineer will support the architecture, engineering, operation, maintenance, testing, and enhancement of DLA's network intrusion detection and prevention capabilities, including Check Point IPS and Trellix IPS Manager.
Key Responsibilities
- Implement and maintain enterprise network and wireless IDS/IPS capabilities.
- Troubleshoot network sensor issues, anomalies, and connectivity problems.
- Analyze security events in coordination with cybersecurity analysts to determine potential causes and appropriate response actions.
- Develop and maintain IDS/IPS signature policies based on threat intelligence, cybersecurity best practices, and DoD requirements.
- Create and test customized signatures before migration into production environments.
- Support security configurations, patching, firmware updates, and operational maintenance of IDS/IPS sensors and management systems.
- Assist with SIEM data collection and correlation associated with intrusion detection and prevention systems.
- Research emerging IDS/IPS technologies and recommend product replacements, enhancements, or capability improvements.
- Identify and analyze network security issues including unauthorized devices, denial-of-service attacks, session hijacking, man-in-the-middle attacks, scanning activity, MAC spoofing, brute-force attempts, and other network-based threats.
- Support analysis of wired and wireless network security events.
- Develop and maintain technical documentation, SOPs, signature lists, and cybersecurity tool update taskings.
- Support disaster recovery planning and recovery testing for intrusion detection platforms.
- Provide technical briefings and training materials for Government and contractor personnel.
- Coordinate technical activities with enterprise service areas and cybersecurity stakeholders.
Basic Qualifications:
- Seven (7) years of relevant IT experience
- DOD Secret Clearance
- Must possess IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission
- Primary DCWF Work Role 521: Cyber Defense Infrastructure Support
Proficiency Level: Intermediate
- Secondary DCWF Work Role 441: Network Operations Specialist
Proficiency Level: Intermediate
- Computing Environment: Trellix IPS manager, Check Point Threat Prevention Specialist (CTPS)
- Four (4) years of experience creating customized signatures using SNORT
The actual base salary offered will be determined based on a variety of factors, including, but not limited to, the candidate’s relevant years and depth of experience, skills and qualifications, education, certifications, internal equity, and the specific requirements of the position. Candidates should not assume they will be offered the top of the posted range, as compensation is based on the individual qualifications and overall fit for the role.
Salary Range
$140,000—$150,000 USD
Electrosoft is an Equal Opportunity Employer/Veterans/Disabled
Similar roles
-
Staff Security Engineer
Robots and Pencils United States · $116K–$160K/yr
-
Cybersecurity Awareness Volunteer
CyberUp St. Louis, Missouri, United States
-
Senior Security Engineer
Latitude IT Solutions $119K–$137K/yr
-
Security Engineer
Latitude IT Solutions $102K–$118K/yr
-
2027 Internal Audit - Information Technology & Cybersecurity Summer Internship
Brown Brothers Harriman New York, New York, United States · $52K/yr
-
Security Engineer III - Network and Cloud Security - Hybrid (Remote Considered) - 26-103
PriMed Management Consulting Services, Inc. San Ramon, California, United States · $109K–$144K/yr