Network Security Engineer

IDR is seeking a Network Security Engineer to join one of our top clients for a remote opportunity. This role involves supporting advanced network security operations and analyzing security infrastructure within a leading cybersecurity environment.

Responsibilities:

• Engineer, maintain, and tune SIEM platforms and detection content
• Configure and optimize IDS/IPS technologies, including signature development and false-positive reduction
• Perform packet capture analysis and network traffic analysis to identify malicious activity
• Support SOC operations by providing detection engineering, log onboarding, and data normalization
• Develop and maintain network security monitoring infrastructure and orchestration workflows

Requirements:

• 5+ years of SOC operations experience
• 5+ years of hands-on experience with IDS/IPS platforms such as Cisco Firepower and TippingPoint, including signature tuning and threat detection
• 5+ years of advanced packet capture (pcap) and network analysis skills using Corelight, NetWitness, and CRIBL pipelines
• 5+ years of experience maintaining and tuning EDR platforms like CrowdStrike Falcon and SentinelOne
• 5+ years of threat intelligence application expertise