IDS Operations Engineer

Role Summary
Seeking an IDS Operations Engineer to join a dynamic security operations team responsible for safeguarding large-scale enterprise infrastructure from cyber threats. This role is ideal for security professionals with a focus on threat detection, incident response, and operational support of intrusion detection systems (IDS). The position offers opportunities to engage in real-world security monitoring, threat analysis, and continuous improvement initiatives within a high-pressure environment.

Responsibilities

• Monitor and analyze security alerts generated by IDS platforms across complex enterprise environments.
• Perform initial triage, validate security events, and investigate potential threats.
• Differentiate false positives from legitimate security concerns and suspicious activity.
• Respond to security incidents by following established workflows and documenting findings thoroughly.
• Escalate complex security events with clear, detailed technical reports.
• Conduct deep analysis and troubleshooting of escalated IDS incidents to identify root causes.
• Tune IDS rules, signatures, and detection policies to optimize threat detection and minimize false alarms.
• Implement approved configuration changes and platform updates to maintain IDS effectiveness.
• Participate in root cause analysis, system enhancements, and security detection improvements.
• Collaborate with cross-functional teams on tactics to enhance security detection capabilities and incident response processes.

Qualifications

• Strong understanding of network security fundamentals, intrusion detection systems, and threat detection techniques.
• Hands-on experience with IDS platforms, especially Fortinet security technologies.
• Familiarity with SIEM systems such as Splunk and enterprise monitoring tools.
• Knowledge of incident management workflows, ITSM tools, and escalation procedures.
• Excellent troubleshooting, analytical, and problem-solving skills.
• Effective communication skills for operational incident management and escalation.
• Availability to work in a fast-paced, high-volume security environment.
• Ability to collaborate effectively with security, infrastructure, and engineering teams.
• Must be legally authorized to work in the United States.

Publishing Pay Range: $61.89 – $64.73 hourly
This position is based in office and requires employee to work on-site.