CyberSecurity Engineer | LogRhythm
Avertium is a cyber fusion and MXDR leader, delivering comprehensive security and compliance services to mid-market and enterprise customers. Our unique “Assess, Design, Protect” methodology addresses and improves security strategy, reduces attack surface risk, strengthens compliance, and provides continuous threat protection. Avertium maximizes customer security investments and enables customers to focus on growth, innovation, and business outcomes, while assuring that their security infrastructure is resilient and adaptive to evolving threats. That’s why customers trust Avertium to deliver better security, improved compliance, and greater ROI.
Avertium is currently seeking a Senior LogRhythm Engineer/Architect. In this role will protect customer information and information systems from unauthorized access, modification, or destruction. The role will also be responsible for implementing, configuring, optimizing, and administering dedicated LogRhythm systems.
Avertium is currently seeking a Senior LogRhythm Engineer/Architect. In this role will protect customer information and information systems from unauthorized access, modification, or destruction. The role will also be responsible for implementing, configuring, optimizing, and administering dedicated LogRhythm systems.
Responsibilities:
Develop and secure Avertium internal cloud environments for multitenant distributed LogRhythm deployments.
Create and manage Security Groups, EC2 instances, EBS volumes and S3 buckets.
Maintain managed SIEM SQL and Elasticsearch databases to industry best practices.
Serve as technical escalation point for other Avertium SIEM engineers.
Create Internal Documentation and Architectural Diagrams.
Help Forecast for continuous growth of SIEM deployments and the build out of new deployments.
Qualifications for success:
Required Qualifications:
Five years overall IT experience with at least two of those years working in a Cyber Security Engineering role.
Five years of experience in technical troubleshooting and advanced problem solving.
Foundational understanding of Cloud Security best practices in both Azure and AWS.
Knowledgeable in Elastic Search and SQL and SQL Studio including but not limited to writing queries to perform searches, maintenance, and migration.
2+ years of experience supporting and managing distributed LogRhythm deployments.
Expert Level of knowledge for LogRhythm SIEM Components
Foundational understanding of LogRhythm detections and the underlying mechanisms that support them.
Strong Automation background in one or more of the following: Powershell, SQL, Bash, Python
Network Administration Experience including IPSEC Tunnel Troubleshooting and VPN creation.
Preferred Qualifications
Bachelor's Degree in Computer Science, Information Security, Information Systems, or equivalent professional experience in information security.
Strong understanding of Windows and Linux operating system administration
Familiarity with SRE practices and principles Strong written and verbal communication to document and communicate findings.
Familiarity with standard CAB request, approval and fulfillment best practices
Technical/professional security certifications (such as: LRPA, LRCA, LRSE, LRDE, CCNP, SANS GIAC or vendor-specific).Familiarity with MIRTE ATT&CK Framework.
#LI-CS1
Requires 5 years of IT experience, including 2 years in cybersecurity engineering; LogRhythm, cloud security, ElasticSearch, SQL, automation, network administration, and advanced troubleshooting experience.
Key Responsibilities
- securing environments
- managing deployments
- troubleshooting networks
Skills & Tools
LogRhythm, AWS, Microsoft Azure, EC2, EBS, Amazon S3, Elasticsearch, SQL, SQL Studio, PowerShell, Bash, Python, IPSEC, VPN, Windows, Linux, SRE, LRPA, LRCA, LRSE, LRDE, CCNP, SANS GIAC, MITRE ATT&CK
Job Details
- Category: Information Technology
- Seniority: Senior Level
- Commitment: Full Time
- Workplace: Remote — Guadalajara, Jalisco, Mexico
- Languages: English
About Avertium
A cybersecurity provider delivering security, compliance, and continuous threat protection services. — Industry: Information Technology