IDS Network Security Engineer-Hybrid-Pune-Long Term Contract

Key Responsibilities

• Fine-tune IDS signatures and detection rules to reduce false positives and improve detection accuracy.
• Has done Firewall Rule provisioning
• Proficient at resolving open issues with the vendor
• Manage and maintain IDS/IPS platforms such as Snort, Suricata, Cisco Secure IPS, or equivalent technologies.
• Monitor and analyze alerts generated by IDS/IPS solutions.
• Develop and maintain IDS monitoring procedures, runbooks, and operational documentation.
• Support firewall, VPN, proxy, and network security infrastructure troubleshooting.
• Prepare security reports, dashboards, and metrics for management review.
• Participate in security audits, compliance reviews, and vulnerability management activities.
• Strong understanding of TCP/IP, routing, switching, DNS, DHCP, and network protocols.
• Knowledge of attack techniques, malware behavior, and network-based threats.
• Understanding of cybersecurity frameworks and incident response processes.
• Investigate security incidents and perform root cause analysis.
• Analyze packet captures (PCAPs) and network traffic to identify suspicious activity.
• Collaborate with SOC, Incident Response, and Threat Intelligence teams during security investigations.
• Conduct threat hunting and identify indicators of compromise (IOCs).

Required Skills:

• Expertise in Fortigate FWs, Palo Alto, Cisco ASA
• Experience working with IDS/IPS technologies.
• Hands-on experience with packet analysis tools such as Wireshark.
• Familiarity with SIEM platforms such as Splunk or Microsoft Sentinel.
• Experience with Linux and Windows operating systems.
• Basic scripting knowledge (Python, Bash, or PowerShell) is desirable.