CyberSecurity Engineer · LogRhythm

Avertium is a cyber fusion and MXDR leader, delivering comprehensive security and compliance services to mid-market and enterprise customers. Our unique “Assess, Design, Protect” methodology addresses and improves security strategy, reduces attack surface risk, strengthens compliance, and provides continuous threat protection. Avertium maximizes customer security investments and enables customers to focus on growth, innovation, and business outcomes, while assuring that their security infrastructure is resilient and adaptive to evolving threats. That’s why customers trust Avertium to deliver better security, improved compliance, and greater ROI. Avertium is currently seeking a Senior LogRhythm Engineer/Architect. In this role will protect customer information and information systems from unauthorized access, modification, or destruction. The role will also be responsible for implementing, configuring, optimizing, and administering dedicated LogRhythm systems.

Responsibilities:

• Develop and secure Avertium internal cloud environments for multitenant distributed LogRhythm deployments.
• Create and manage Security Groups, EC2 instances, EBS volumes and S3 buckets.
• Maintain managed SIEM SQL and Elasticsearch databases to industry best practices.
• Serve as technical escalation point for other Avertium SIEM engineers.
• Create Internal Documentation and Architectural Diagrams.
• Help Forecast for continuous growth of SIEM deployments and the build out of new deployments.

Qualifications for success:

• Required Qualifications:
• Five years overall IT experience with at least two of those years working in a Cyber Security Engineering role.
• Five years of experience in technical troubleshooting and advanced problem solving.
• Foundational understanding of Cloud Security best practices in both Azure and AWS.
• Knowledgeable in Elastic Search and SQL and SQL Studio including but not limited to writing queries to perform searches, maintenance, and migration.
• 2+ years of experience supporting and managing distributed LogRhythm deployments.
• Expert Level of knowledge for LogRhythm SIEM Components
• Foundational understanding of LogRhythm detections and the underlying mechanisms that support them.
• Strong Automation background in one or more of the following: Powershell, SQL, Bash, Python
• Network Administration Experience including IPSEC Tunnel Troubleshooting and VPN creation.
• Preferred Qualifications
• Bachelor's Degree in Computer Science, Information Security, Information Systems, or equivalent professional experience in information security.
• Strong understanding of Windows and Linux operating system administration
• Familiarity with SRE practices and principles Strong written and verbal communication to document and communicate findings.
• Familiarity with standard CAB request, approval and fulfillment best practices
• Technical/professional security certifications (such as: LRPA, LRCA, LRSE, LRDE, CCNP, SANS GIAC or vendor-specific).Familiarity with MIRTE ATT&CK Framework.

Originally posted on Himalayas