IDS/IPS Engineer - NinjaJobs Morrisville, NC, USA Bookmark Share Print 563 1 6

Listing Description

CISCO Firepower Threat Defense IDS/IPS, FMC 

Prior job experience maintaining and troubleshooting IDS/IPS devices 

Experience with Splunk and other SIEM tools. 

Proficiency with packet analysis/Wireshark 

Networking – routing and switching, TCP/IP stack, IP subnets, VPN 

Scripting – python, perl, javascript. 

Experience with threat analysis, triage, and mitigation   

Experience with Linux 

Experience with packet analysis 

Knowledge of databases 

Knowledge of networking and network protocols 

One or more of the following certifications: Security+, CISSP, Networking+, CEH, GCIH, CCNA Route Switch or CCNA Security, CCNP Route Switch or CCNP Security, CCIE Route Switch or CCIE Security Operate, maintain, and deploy IDS and IPS devices.  

Maintain intrusion ruleset, optimizing detection, configure NGFW ACLs, general device configuration and maintenance, troubleshoot the devices when needed,

Provide operational requirements and recommendations to the Security Architects for service enhancements and system improvements.

On-call availability for network impacting or network outage situations outside of business hours 

Effectively work within a Security team, and support and collaborate with other teams 

Conduct Intrusion event analysis and support security operation center (SOC) incident response, threat detection teams.

Develop documentations, e.g. standard operating procedures (SOP), and support audit events 

Develop reports on systems status and performance.