Responsibilities:
- Provide technical guidance / recommendations to clients to enhance their overall security posture within the managed products. Handles daily proactive maintenance and reactive troubleshooting/repair functions.
- Proactively monitor technical issues pertaining to the services provided for the client and make recommendations to reduce the risk/impact of similar future problems. Monitors health of security systems.
- Utilize SIEM and other tools to assist in network investigations, including firewalls, IDS/IPS and network and system monitoring toolsets.
- Perform post mortem analysis on logs, traffic flows, and other activities to identify malicious activity.
- Research, develop, and stay current on testing tools, techniques, and process improvements in support of security tools and incident response.
- Proactively work with clients in the management of technical issues as well as planning, implementation, skills and knowledge transfer on services provided.
Qualifications for Success:
- 3+ years experience in an Engineering or similar role in Cyber Security.
- Experience with security tool application, server, and networking support.
- Experience troubleshooting performance and application-based issues on Windows and Linux environments.
- Some automation or scripting experience with Regex and PowerShell.
- Experience with Kusto Query Language (KQL).
- Experience with Prometheus and Grafana.
- Microsoft Certifications (AZ500,MS500, SC200, SC100) preferred.
- Exposure to MITRE and familiar with TTPs(Tactics Techniques and Procedures).
- Ability to create internal documentation including architectural diagrams.
- Familiarity with cloud administration best practices and principles in AWS and(or) Azure.
- In-depth understanding of networking concepts and technologies.
- Experience using enterprise ticketing systems such as ServiceNow.
- Excellent problem solving and communication skills.
- Ability to provide step by step technical help via phone, remote session, and email.
- #LI-CS1
Skills Required
- 3+ years experience in an Engineering or similar role in Cyber Security
- Experience with Microsoft XDR, Sentinel, SentinelOne and other security tools
- Experience with SIEM, firewalls, IDS/IPS and network monitoring tools
- Troubleshooting performance and application-based issues on Windows and Linux
- Some automation or scripting experience with Regex and PowerShell
- Experience with Kusto Query Language (KQL)
- Experience with Prometheus and Grafana
- Familiarity with cloud administration best practices and principles in AWS and/or Azure
- In-depth understanding of networking concepts and technologies
- Experience using enterprise ticketing systems such as ServiceNow
- Exposure to MITRE framework and familiarity with TTPs (Tactics, Techniques, and Procedures)
- Ability to create internal documentation including architectural diagrams
- Excellent problem solving and communication skills
- Ability to provide step by step technical help via phone, remote session, and email
- Microsoft Certifications (AZ500, MS500, SC200, SC100)
What We Do
Avertium is the security partner that companies turn to for end-to-end cybersecurity solutions that attack the chaos of the cybersecurity landscape with context. By fusing together human expertise and a business-first mindset with the right combination of technology and threat intelligence, Avertium delivers a more comprehensive, more programmatic approach to cybersecurity – one that drives action on the ground and influence in the boardroom. That’s why over 1,200 mid-market and enterprise-level organizations across 15 industries turn to Avertium when they want to be more efficient, more effective, and more resilient when waging today’s cyber war. Show No Weakness® Avertium will focus its comprehensive expertise on supporting mid-to-large enterprises, making it one of the largest managed cybersecurity services companies focused on this market. Avertium is led by Jeff Schmidt, a security industry veteran, who has previously held executive leadership roles at a variety of successful technology and security companies, including International Network Services, All Covered, BT Counterpane, SQS, and Authomate. For more information and career opportunities, visit https://www.avertium.com/.
