Cybersecurity Engineer - Intrusion Detection / Prevention

Cybersecurity Engineer - Intrusion Detection / Prevention

Position Summary

Electrosoft is seeking a Cybersecurity Engineer specializing in Intrusion Detection and Prevention Systems (IDS/IPS) to support enterprise cybersecurity operations within a DoD environment.

The engineer will support the architecture, engineering, operation, maintenance, testing, and enhancement of DLA's network intrusion detection and prevention capabilities, including Check Point IPS and Trellix IPS Manager.

Key Responsibilities

• Implement and maintain enterprise network and wireless IDS/IPS capabilities.
• Troubleshoot network sensor issues, anomalies, and connectivity problems.
• Analyze security events in coordination with cybersecurity analysts to determine potential causes and appropriate response actions.
• Develop and maintain IDS/IPS signature policies based on threat intelligence, cybersecurity best practices, and DoD requirements.
• Create and test customized signatures before migration into production environments.
• Support security configurations, patching, firmware updates, and operational maintenance of IDS/IPS sensors and management systems.
• Assist with SIEM data collection and correlation associated with intrusion detection and prevention systems.
• Research emerging IDS/IPS technologies and recommend product replacements, enhancements, or capability improvements.
• Identify and analyze network security issues including unauthorized devices, denial-of-service attacks, session hijacking, man-in-the-middle attacks, scanning activity, MAC spoofing, brute-force attempts, and other network-based threats.
• Support analysis of wired and wireless network security events.
• Develop and maintain technical documentation, SOPs, signature lists, and cybersecurity tool update taskings.
• Support disaster recovery planning and recovery testing for intrusion detection platforms.
• Provide technical briefings and training materials for Government and contractor personnel.
• Coordinate technical activities with enterprise service areas and cybersecurity stakeholders.

Basic Qualifications:

• Seven (7) years of relevant IT experience
• DOD Secret Clearance
• Must possess IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission
• Primary DCWF Work Role 521: Cyber Defense Infrastructure Support
  Proficiency Level: Intermediate
• Secondary DCWF Work Role 441: Network Operations Specialist
  Proficiency Level: Intermediate
• Computing Environment: Trellix IPS manager, Check Point Threat Prevention Specialist (CTPS)
• Four (4) years of experience creating customized signatures using SNORT