Cybersecurity Engineer 3 – IPS SNORT

Ryan Consulting Group•Columbus, OH

2d•Onsite

About The Position

Ryan Consulting Group, Inc. is seeking a Cybersecurity Engineer 3 to provide specialized cybersecurity engineering and intrusion prevention support for the Defense Logistics Agency (DLA). The role analyzes cybersecurity requirements, supports the integration of security technologies, and develops customized SNORT signatures to strengthen network security and threat detection capabilities. Hands-on experience with Trellix IPS Manager and an active Check Point Certified Threat Prevention Specialist (CTPS) certification are required. This role is part of a proposal submission. Any employment offer is conditional on the contract being awarded, and the company may modify, delay, or cancel recruitment based on the award outcome. The position is onsite at a DLA facility in Columbus, Ohio, or Richmond, Virginia, with approximately six trips per year, each lasting four days, between Washington, DC, Columbus, and Richmond. The schedule is Monday through Friday during standard business hours between 6:00 a.m. and 6:00 p.m. local time.

Requirements

At least seven years of relevant IT cybersecurity experience, preferably within the federal government.
At least four years of experience creating customized SNORT signatures.
Hands-on experience administering, maintaining, or supporting Trellix intrusion prevention technologies through Trellix IPS Manager.
Active Top Secret (TS) security clearance at the time of proposal submission.
Meet both Department of Defense Cyber Workforce Framework qualifications at the Intermediate level: primary DCWF 521 – Cyber Defense Infrastructure Support Specialist, and secondary DCWF 441 – Network Operations Specialist. Each may be met through an approved education, training, or certification pathway.
An approved education pathway for both DCWF roles may be satisfied by a bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.
Alternatively, qualifying training or certifications may satisfy the DCWF requirements. Certifications recognized under both roles include CompTIA Security+, CompTIA Cloud+, Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC), and Systems Security Certified Practitioner (SSCP). One qualifying certification may satisfy both roles.
Must be able to work onsite at the DLA facility in Columbus, Ohio, or Richmond, Virginia.
Must be available for required travel.
Must hold the Check Point Threat Prevention Specialist (CTPS) certification at the time of submission.

Responsibilities

Develop and customize SNORT signatures for intrusion prevention and network threat detection.
Analyze information security requirements and support implementation of cybersecurity solutions.
Provide cybersecurity engineering support for planning, design, development, testing, demonstration, and integration of information systems.
Apply analytical and systematic approaches to resolving cybersecurity-related technical and operational challenges.
Integrate security processes, methodologies, and technologies to address system-level cybersecurity requirements.
Support identification and resolution of cybersecurity issues affecting network infrastructure and information systems.
Use hands-on knowledge of Trellix IPS Manager to support intrusion prevention operations and security infrastructure.
Support Check Point threat prevention technologies and associated security controls.