Job Description
Anticipated Contract End Date/Length: September 30, 2026
Work Set Up: Hybrid (must be eligible for BPSS)
Our client in the Information Technology and Services industry is looking for a Network IDS Engineer to support the operation, tuning, and continuous improvement of the organisation’s Intrusion Detection and Prevention platforms. This role focuses on ensuring that network security telemetry is accurately collected, analysed, and acted upon to maintain strong detection capabilities and enable timely response to security threats. The position plays a key role in maintaining IDS and IPS platform performance, improving detection accuracy, and supporting security investigations through detailed network traffic analysis.
What you will do:
* Maintain and support IDS and IPS platforms to ensure sensors, signatures, and threat feeds remain up to date and fully operational.
* Tune detection rules and signatures to reduce noise, minimise false positives, and improve detection accuracy.
* Collaborate with security operations teams to investigate suspicious activity and support incident triage and escalation.
* Analyse network traffic at the packet level to identify potential threats and malicious behaviours.
* Configure and maintain network traffic capture and mirroring solutions including taps and packet brokers.
* Validate and deploy new signatures, behavioural detection rules, and platform updates across IDS and IPS systems.
* Monitor platform health, performance, and capacity to ensure reliable detection coverage across the network environment.
* Develop detection logic based on threat intelligence, indicators of compromise, and emerging attack techniques.
* Document tuning decisions, configuration changes, and detection improvements to support operational traceability.
Qualifications
* Hands-on experience with IDS and IPS technologies such as Snort, Suricata, Zeek, Cisco Firepower, or Palo Alto Threat Prevention.
* Strong network packet analysis experience using tools such as Wireshark or tcpdump.
* Solid understanding of networking fundamentals including TCP/IP, routing, VLANs, NAT, and layer 2 and layer 3 protocols.
* Experience integrating IDS telemetry with SIEM platforms for security monitoring and correlation.
* Ability to write, modify, and tune IDS signatures or detection rules based on threat behaviour.
* Experience supporting threat detection and incident response processes within security operations environments.
* Familiarity with threat intelligence concepts and indicators of compromise.
* Experience with automation approaches such as scripting or API integrations for security monitoring tasks.
* Relevant security or networking certifications such as GCIA, GCIH, or CCNA Security are considered beneficial.
Additional Information
All your information will be kept confidential according to EEO guidelines.
Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship.
HelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role-related requirements.
We appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted.
HelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law.