Cybersecurity Engineer 3

Cybersecurity Engineer will support a technology program responsible for securing enterprise infrastructure and mission systems within a large federal operational environment. The Cybersecurity Engineer 3 will support enterprise network defense capabilities through the implementation, configuration, and sustainment of Intrusion Detection and Prevention Systems (IDS/IPS). This role focuses on threat detection engineering, signature development, and monitoring of network security infrastructure., Support design, implementation, and sustainment of enterprise Intrusion Detection/Prevention Systems (IDS/IPS).

• Configure and maintain intrusion prevention tools including Trellix IPS Manager and Check Point IPS Blade.
• Develop and maintain custom SNORT signatures to detect emerging cyber threats.
• Analyze threat intelligence data and security events to improve detection capabilities.
• Conduct testing and tuning of IDS/IPS rules to reduce false positives and improve detection accuracy.
• Support enterprise network monitoring and threat analysis.
• Assist with integration of IDS/IPS telemetry with SIEM and enterprise monitoring platforms.
• Support documentation of security procedures and operational guidelines.
• Provide recommendations for IDS/IPS architecture improvements and threat detection strategies.

7+ years of relevant IT / cybersecurity experience

• Active DoD Secret Clearance
• Must meet DoD 8570 / 8140 IAT Level III certification requirements - candidate must possess one of the following certifications: CASP+ CE, CCNP Security, CISA, CISSP, GCED, GCIH, CCSP
• Must meet DoD 8570 / 8140 CND-IS certification requirements - candidate must posses one of the following certifications: CEH, GICSP, GCIH, GCIA, CFR
• Must be eligible for IT Level I access
• Experience with Trellix IPS Manager
• Experience with Check Point IPS Blade
• 4+ years of experience developing custom SNORT signatures

Preferred Skills

• Experience in enterprise network defense environments
• Threat detection engineering experience
• Familiarity with advanced intrusion detection methodologies