About the Job:
The Senior Network Security Engineer will design, implement, and optimize network intrusion detection and prevention systems to safeguard organizational infrastructure. This role ensures threat detection and mitigation capabilities, aiming to uphold a robust security posture and client trust.
Responsibilities:
- Configure and manage Snort v2 and v3 IDS/IPS systems to ensure accurate and efficient threat detection and response.
- Administer Cisco IPS/IDS platforms and Firepower Management Center to maintain operational readiness and mitigate security vulnerabilities.
- Analyze network traffic and security logs using tools like Wireshark and tcpdump to identify and respond to suspicious activities effectively.
- Design and maintain network security architecture documentation to support continuous improvement in security posture and system integrity.
- Collaborate with SOC, Red, and Blue teams to fine-tune detection rules and integrate threat intelligence for enhanced threat visibility.
- Interface with customers to understand security requirements and communicate technical solutions, ensuring alignment with business objectives.
- Conduct regular reviews and maintenance of IPS platform configurations to minimize system vulnerabilities and ensure compliance with security standards.
- Evaluate and integrate new threat detection technologies to improve the effectiveness and scalability of network defense strategies.
Essential Qualifications and Education:
- Bachelor's degree in Computer Science, Information Security, or a related field.
- Minimum of 8 years of experience in network security engineering roles, including extensive hands-on work with IDS/IPS systems.
- Formal training in Cisco security technologies, intrusion detection/prevention, and threat analysis.
- Expert-level proficiency in Snort v2 and v3, including rule creation and optimization.
- Advanced knowledge of Cisco IPS/IDS, Firepower, and network protocols.
- Strong competency in packet analysis tools and security operations environments.
- Proficient in network diagramming tools like Visio or Lucidchart.
- Capable of clear documentation and adherence to change control.
Certifications:
- CCIE Security (preferred or in progress).
- Cisco Certified Specialist – Security Core or Firepower.
- GIAC certifications (GCIA, GCIH) or CompTIA Security+, CySA+.
Preferable Qualifications and Education:
- Master's degree in Cybersecurity or a related discipline.
- Client-facing experience in cybersecurity consulting or MSSP environments.
- Advanced courses in threat intelligence, adversary simulation, or cyber defense frameworks.
Specialized Knowledge and Skills:
- Familiarity with SIEM tools like Splunk or QRadar.
- Working knowledge of scripting or automation for security tools integration.
Behavioral Competencies:
- Strong analytical and troubleshooting mindset.
- Professional and confident communicator, especially in client interactions.
- Self-motivated with the ability to work independently and in a team.
- Detail-oriented with a focus on thorough documentation and process discipline.
Technical Competencies:
- Expert knowledge of Snort v2/v3 configuration and rule tuning.
- Advanced skills in Cisco IPS/IDS and Firepower technologies.
- Proficient in packet capture analysis using Wireshark/tcpdump.
- Skilled in creating and interpreting network security architecture diagrams.
Language Requirements:
- Not specified in the provided information.
