I'm thinking of using Suricata or Snort. I can't do anything myself, so I'm going to ask a freelance security engineer to do it.
If the engineer is skilled, once suricata or snort is set up, will it work fine in one setup? at the moment,there is no problem with only detecting the IP of unauthorized access by hacker.
Also, I know that security engineers have their own areas of expertise, but what skills do good suricata or snort engineers often have?