Network Security Engineer (IDS Operations) - Pune (2-3 Days work from Office)

Title: Network Security Engineer (IDS Operations)

Location: Pune (2-3 Days work from Office) preferred

12 Months possible of extension.

We are seeking a Network Security Engineer with strong hands-on experience in managing network security devices and a deep understanding of security concepts. The ideal candidate should have practical experience creating, tuning, and maintaining IDS/IPS signatures based on specific requirements while considering security and audit concerns. They should be familiar with threat hypothesis methodologies and be able to apply proven approaches of their own rather than solely following established SOPs. In addition, the candidate should have infrastructure troubleshooting experience on network devices.

We are looking for candidates with an analytical mindset who can think critically and bring a structured approach to signature tuning and alert optimization, even when procedures already exist. They should demonstrate independent problem-solving skills and drive continuous improvement in Network security operations.

The candidate will collaborate with our Security Operations team to analyze Threat signatures, fine-tune IDS alerts to reduce noise and enhance detection capabilities. We prefer professionals with hands-on engineering experience across both network security and security operations functions.

Job Summary:

We are seeking a skilled Network Security Engineer with hands-on experience in Intrusion Detection Systems (IDS)/IPS and network security operations. The candidate will be responsible for monitoring, analyzing, and responding to network security events, maintaining IDS infrastructure, and ensuring the organization's network remains protected against cyber threats.

Key Responsibilities

• Fine-tune IDS signatures and detection rules to reduce false positives and improve detection accuracy.
• Has done Firewall Rule provisioning
• Proficient at resolving open issues with the vendor
• Manage and maintain IDS/IPS platforms such as Snort, Suricata, Cisco Secure IPS, or equivalent technologies.
• Monitor and analyze alerts generated by IDS/IPS solutions.
• Develop and maintain IDS monitoring procedures, runbooks, and operational documentation.
• Support firewall, VPN, proxy, and network security infrastructure troubleshooting.
• Prepare security reports, dashboards, and metrics for management review.
• Participate in security audits, compliance reviews, and vulnerability management activities.
• Strong understanding of TCP/IP, routing, switching, DNS, DHCP, and network protocols.
• Knowledge of attack techniques, malware behavior, and network-based threats.
• Understanding of cybersecurity frameworks and incident response processes.
• Investigate security incidents and perform root cause analysis.
• Analyze packet captures (PCAPs) and network traffic to identify suspicious activity.
• Collaborate with SOC, Incident Response, and Threat Intelligence teams during security investigations.
• Conduct threat hunting and identify indicators of compromise (IOCs).

Required Skills:

• Expertise in Fortigate FWs, Palo Alto, Cisco ASA
• Experience working with IDS/IPS technologies.
• Hands-on experience with packet analysis tools such as Wireshark.
• Familiarity with SIEM platforms such as Splunk or Microsoft Sentinel.
• Experience with Linux and Windows operating systems.
• Basic scripting knowledge (Python, Bash, or PowerShell) is desirable.

Preferred Qualifications:

• Bachelor's degree in Computer Science, Information Security, or related field.

Desired Competencies:

• Strong analytical and troubleshooting skills.
• Ability to work in operations environment.
• Excellent communication and incident management skills.
• Attention to detail and proactive security mindset.
• Ability to work effectively with cross-functional technical teams.