Network Security Engineer (Zeek / Suricata / Elastic- OT / Network Focus)

Role Overview

We are looking for a Network Security Engineer with experience in deploying and managing open-source network security platforms. The role involves setting up visibility sensors, handling network traffic capture, and building log pipelines that integrate into SIEM environments. The ideal candidate has worked with packet capture tools, IDS / IPS, and log management frameworks in production or lab setups.

Key Responsibilities

• Deploy and configure open-source network security monitoring tools (e.g., Security Onion, Zeek, Suricata, Bro).
• Configure and maintain IDS / IPS signatures and tune for industrial / enterprise network traffic.
• Build and manage log pipelines using tools such as Filebeat, Logstash, or similar agents.
• Normalize and enrich security telemetry for use in downstream SIEMs (Elastic, OpenSearch, Wazuh, Splunk, etc.).
• Collaborate with SIEM engineers to ensure alerts and dashboards are functional and reliable.
• Support PCAP-based testing and validation for visibility and detection use cases.

Required Skills & Experience

Nice to Have