19 Jan
IDS\/IPS Security Engineer
Vacancy expired!
NikSoft is currently conducting a search for an
IDS/IPS Security Engineer to add to its team in support of the United States Postal Service's Cybersecurity program. The successful candidate will be knowledgeable in CISCO Firepower platforms, Next Generation firewalls, intrusion detection and protection systems. Experience an unparalleled large-scale enterprise environment with over 800 Information Technology systems, 10s of 1000s of servers and desktop devices, processing billions of dollars in annual revenue and supporting a diverse user base spread across the entire US. Join the NikSoft team to scale your career to the next level. Responsibilities: Operate, maintain, and deploy IDS and IPS devices. Responsibilities include maintaining the intrusion ruleset, optimizing detection, configuring NGFW ACLs, general device configuration and maintenance, troubleshooting the devices when needed, assisting the analyst teams with investigations, and supporting the Solution Architects with design input and recommendations. Required Qualifications:- Bachelor's in information technology or related curriculum.
- 3+ years of related operational experience in systems and network engineering.
- Hands on experience with CISCO Firepower Threat Defense IDS/IPS, FMC.
- Prior job experience maintaining and troubleshooting IDS/IPS devices
- Experience with Linux
- Experience with Networking routing and switching, TCP/IP stack, IP subnets, VPN, packet analysis
- Scripting python, perl, javascript proficiency
- Knowledge of databases
- Knowledge of networking and network protocols
- On-call availability for network impacting or network outage situations outside of business hours
- Effectively work within a Security team, and support and collaborate with other teams
- Networking+, CEH, GCIH, CCNA Route Switch or CCNA Security, CCNP Route Switch or CCNP Security, CCIE Route Switch or CCIE Security
- Experience with threat analysis, triage, and mitigation
- Understanding of NGFW ACLs
- Experience writing Snort rules
- Proficiency with Wireshark
- Experience with Splunk
- Ability to write clear procedural and technical documentation
- Knowledge of external authentication and user management
- Experience troubleshooting network problems at layers 1, 2, and
Vacancy expired!