Cybersecurity Engineer 3 with Security Clearance

Cybersecurity Engineer will support a technology program responsible for securing enterprise infrastructure and mission systems within a large federal operational environment. The Cybersecurity Engineer 3 will support enterprise network defense capabilities through the implementation, configuration, and sustainment of Intrusion Detection and Prevention Systems (IDS/IPS). This role focuses on threat detection engineering, signature development, and monitoring of network security infrastructure. Key Responsibilities
- Support design, implementation, and sustainment of enterprise Intrusion Detection/Prevention Systems (IDS/IPS).
- Configure and maintain intrusion prevention tools including Trellix IPS Manager and Check Point IPS Blade.
- Develop and maintain custom SNORT signatures to detect emerging cyber threats.
- Analyze threat intelligence data and security events to improve detection capabilities.
- Conduct testing and tuning of IDS/IPS rules to reduce false positives and improve detection accuracy.
- Support enterprise network monitoring and threat analysis.
- Assist with integration of IDS/IPS telemetry with SIEM and enterprise monitoring platforms.
- Support documentation of security procedures and operational guidelines.
- Provide recommendations for IDS/IPS architecture improvements and threat detection strategies. Required Qualifications
- 7+ years of relevant IT / cybersecurity experience
- Active DoD Secret Clearance
- Must meet DoD 8570 / 8140 IAT Level III certification requirements - candidate must possess one of the following certifications: CASP+ CE, CCNP Security, CISA, CISSP, GCED, GCIH, CCSP
- Must meet DoD 8570 / 8140 CND-IS certification requirements - candidate must posses one of the following certifications: CEH, GICSP, GCIH, GCIA, CFR - Must be eligible for IT Level I access
- Experience with Trellix IPS Manager
- Experience with Check Point IPS Blade
- 4+ years of experience developing custom SNORT signatures Preferred Skills
- Experience in enterprise network defense environments
- Threat detection engineering experience
- Familiarity with advanced intrusion detection methodologies