Senior Network Security/Firewall Detection Engineer

ERG is a research and consulting firm that provides a wide range of support to federal, state, and commercial clients. ERG offers multidisciplinary teams with nationally recognized skills in engineering, science, economics, public health, informational technology, and communications. We hire people with the best minds and then provide them with a vibrant and flexible environment in which to develop their careers. The qualified individual must be highly motivated with the skills to prioritize, perform, and communicate effectively in a fast-paced environment. 

ERG is seeking a Senior Network Security / Firewall Detection Engineer to provide advanced network defense, threat detection, and boundary protection capabilities across Navy network environments. This role is responsible for configuring and securing network security appliances, analyzing traffic and alerts, and supporting continuous monitoring activities to ensure mission systems remain resilient against evolving cyber threats.

This is a fulltime onsite position at the Naval Surface Warfare Center (NSWC) Indian Head. Indian Head, MD, is approximately 30 miles from Washington, DC, 25 miles from Alexandria, VA, and 60 miles from Fredericksburg, VA. 

Configure and manage firewalls, IDS/IPS platforms, and other network security appliances to ensure effective boundary protection

Analyze network traffic, logs, and security alerts to identify anomalies, potential intrusions, and malicious activity

Respond to security incidents, conducting investigation, containment, and documentation in coordination with cybersecurity teams

Support Risk Management Framework (RMF) activities and contribute to continuous monitoring by maintaining security controls and documentation

Optimize firewall rulesets, detection signatures, and system configurations to enhance network defense capabilities

Collaborate with cybersecurity, network, and system engineering teams to maintain a strong security posture across Navy environments

Maintain detailed technical documentation, including configurations, diagrams, and security response procedures

Bachelor’s degree in Cybersecurity, Network Engineering, Information Technology, or related field

8+ years of experience in network security engineering, firewall administration, or threat detection

DoD Security+ certification required (IAT Level II)

Strong background in configuring firewalls, IDS/IPS, and other network security technologies

Experience analyzing network traffic, monitoring alerts, and investigating security events

Knowledge of RMF security controls and continuous monitoring processes

Excellent analytical, troubleshooting, and communication skills

Experience managing NIPR/SIPR boundary protection, including Cross Domain Solutions, with familiarity with the Defense Research and Engineering Network (DREN) preferred

Must currently hold or maintain a Department of Defense T5 investigation/privileged access eligibility (T5 (SSBI) clearance)

Must be a U.S. citizen as this position is not eligible for Limited Access Authorizations

Experience supporting U.S. Navy or DoD enterprise networks

Familiarity with tools such as ACAS, Splunk, Snort/Suricata, Cisco ASA/Firepower, Fortinet, or Palo Alto platforms

Knowledge of DoD cybersecurity policies, network hardening techniques, and advanced threat detection methods