Intrusion Detection Systems (IDS) Engineer

Leidos Holdings Inc.•Woodlawn, MD

37d•Onsite

About The Position

Leidos is seeking a skilled Intrusion Detection Systems (IDS) Engineer, to manage and maintain the agency's network infrastructure. This role focuses on operating Network IDS platforms such as Snort 3.x, developing detection signatures, and supporting Security Operations through proactive threat detection and analysis. If this sounds like a mission you want to be a part of, keep reading! TEAM CULTURE Your passion and values might be a good fit for our teams if you answer "yes" to the following questions: Are you looking for a company that puts employees first, with a focus on career, flexibility, and well-being? Do you enjoy collaborating with colleagues and teammates and believe that the best ideas are fostered in an inclusive environment? Are you searching for a team with a strong sense of ownership, urgency, and drive for daily mission success? Are you comfortable with proactive outward communication and technical leadership? Do you enjoy being a catalyst, solving complex problems, and providing innovative solutions? Do you have the flexibility, creativity, and resilience to pivot the mission for success? Do you have the courage to make tough ethical decisions with pride, transparency, and respect? MENTORSHIP & CAREER GROWTH Our teams are dedicated to supporting new team members in an environment that celebrates knowledge sharing and mentorship. Experienced team members will be assigned to new hires for one-on-one mentoring, collaborative reviews, and coaching on customer engagement to help each new hire successfully onboard and demonstrate their skills. Projects and tasks are assigned in a way that leverages your strengths and will help you further develop your skillset. DAY TO DAY RESPONSIBILITIES Every position we take is more rewarding when you know the why behind it. Know your work makes a difference to support those who need it most. If your passion is enabling life changing service to those around, you this is the place for you. Find you passion in a team environment where all members are valued regardless of contractor or employee status. Find your "Why" with us and take your place in our Leidos Family!! We are seeking a highly skilled Intrusion Detection Systems (IDS) Engineer with strong expertise in Red Hat Enterprise Linux (RHEL) to install, configure, and manage Snort-based intrusion detection and prevention systems across enterprise networks. The ideal candidate will be a proactive individual who can thrive in a dynamic security environment, respond to evolving threats, and collaborate effectively with cross-functional teams while working both independently and as part of an Agile team structure.

Requirements

3+ years of experience in network security or intrusion detection
Demonstrated experience with Snort 3.x or similar IDS/IPS platforms
Proficiency with Unix/Linux operating systems
Experience writing detection signatures (Snort, YARA, or similar)
Strong understanding of TCP/IP networking and common attack vectors
Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience)
Self-Starter: Ability to work independently, prioritize tasks, and drive initiatives forward
Communication: Clear written and oral communication skills appropriate for professional environments
Agile Methodology: Familiarity with Agile frameworks and iterative development practices
Problem-Solving: Analytical mindset with strong troubleshooting capabilities
Must be able to obtain and maintain a Public Trust. Contract requirement.
Selected candidate must be willing to work on-site in Woodlawn, MD 5 days a week.

Nice To Haves

Industry certifications such as GCIA, GCIH, Security+, or CEH
Experience with SIEM platforms and log analysis tools
Knowledge of threat intelligence feeds and integration
Scripting skills (Python, Bash, or PowerShell)
Experience with containerization and orchestration (Docker, Kubernetes)
Understanding of DevSecOps practices

Responsibilities

Manage, configure, and maintain Snort 3.x servers and applications
Monitor and optimize network intrusion detection platform performance
Ensure high availability and reliability of IDS infrastructure
Perform system updates, patches, and upgrades as needed
Create, test, and maintain YARA signatures for malware detection
Develop and tune Snort rules to detect emerging threats
Utilize regular expressions to build effective detection patterns
Analyze false positives and refine signatures for accuracy
Collaborate with Security Operations team on threat detection and response
Provide technical expertise on IDS alerts and network security events
Participate in incident response activities when network intrusions are detected
Document procedures, configurations, and security findings
Execute Unix/Linux command line operations for IDS and security tool management
Automate routine tasks through scripting and configuration management
Troubleshoot system and application issues independently
Maintain system logs and audit trails