Responsibilities:
- Develop and secure Avertium internal cloud environments for multitenant distributed LogRhythm deployments.
- Create and manage Security Groups, EC2 instances, EBS volumes and S3 buckets.
- Maintain managed SIEM SQL and Elasticsearch databases to industry best practices.
- Serve as technical escalation point for other Avertium SIEM engineers.
- Create Internal Documentation and Architectural Diagrams.
- Help Forecast for continuous growth of SIEM deployments and the build out of new deployments.
Qualifications for success:
- Required Qualifications:
- Five years overall IT experience with at least two of those years working in a Cyber Security Engineering role.
- Five years of experience in technical troubleshooting and advanced problem solving.
- Foundational understanding of Cloud Security best practices in both Azure and AWS.
- Knowledgeable in Elastic Search and SQL and SQL Studio including but not limited to writing queries to perform searches, maintenance, and migration.
- 2+ years of experience supporting and managing distributed LogRhythm deployments.
- Expert Level of knowledge for LogRhythm SIEM Components
- Foundational understanding of LogRhythm detections and the underlying mechanisms that support them.
- Strong Automation background in one or more of the following: Powershell, SQL, Bash, Python
- Network Administration Experience including IPSEC Tunnel Troubleshooting and VPN creation.
- Preferred Qualifications
- Bachelor's Degree in Computer Science, Information Security, Information Systems, or equivalent professional experience in information security.
- Strong understanding of Windows and Linux operating system administration
- Familiarity with SRE practices and principles Strong written and verbal communication to document and communicate findings.
- Familiarity with standard CAB request, approval and fulfillment best practices
- Technical/professional security certifications (such as: LRPA, LRCA, LRSE, LRDE, CCNP, SANS GIAC or vendor-specific).Familiarity with MIRTE ATT&CK Framework.
- #LI-CS1
Skills Required
- Five years of overall IT experience, including at least two years in cybersecurity engineering
- Five years of technical troubleshooting and advanced problem-solving experience
- Foundational understanding of cloud security best practices in Azure and AWS
- Knowledge of Elasticsearch and SQL, including query writing, maintenance, and migration
- At least two years supporting and managing distributed LogRhythm deployments
- Expert-level knowledge of LogRhythm SIEM components
- Foundational understanding of LogRhythm detections and supporting mechanisms
- Strong automation experience with PowerShell, SQL, Bash, or Python
- Network administration experience, including IPSEC tunnel troubleshooting and VPN creation
- Bachelor's degree in Computer Science, Information Security, Information Systems, or equivalent professional experience
- Strong Windows and Linux operating system administration skills
- Familiarity with SRE practices and principles
- Strong written and verbal communication skills
- Familiarity with standard CAB request, approval, and fulfillment practices
- Technical or professional security certifications such as LRPA, LRCA, LRSE, LRDE, CCNP, SANS GIAC, or vendor-specific certifications
- Familiarity with the MITRE ATT&CK Framework
What We Do
Avertium is the security partner that companies turn to for end-to-end cybersecurity solutions that attack the chaos of the cybersecurity landscape with context. By fusing together human expertise and a business-first mindset with the right combination of technology and threat intelligence, Avertium delivers a more comprehensive, more programmatic approach to cybersecurity – one that drives action on the ground and influence in the boardroom. That’s why over 1,200 mid-market and enterprise-level organizations across 15 industries turn to Avertium when they want to be more efficient, more effective, and more resilient when waging today’s cyber war. Show No Weakness® Avertium will focus its comprehensive expertise on supporting mid-to-large enterprises, making it one of the largest managed cybersecurity services companies focused on this market. Avertium is led by Jeff Schmidt, a security industry veteran, who has previously held executive leadership roles at a variety of successful technology and security companies, including International Network Services, All Covered, BT Counterpane, SQS, and Authomate. For more information and career opportunities, visit https://www.avertium.com/.
.png)
