Avertium is currently seeking a Senior LogRhythm Engineer/Architect. In this role will protect customer information and information systems from unauthorized access, modification, or destruction. The role will also be responsible for implementing, configuring, optimizing, and administering dedicated LogRhythm systems.
Responsibilities:
Develop and secure Avertium internal cloud environments for multitenant distributed LogRhythm deployments.
Create and manage Security Groups, EC2 instances, EBS volumes and S3 buckets.
Maintain managed SIEM SQL and Elasticsearch databases to industry best practices.
Serve as technical escalation point for other Avertium SIEM engineers.
Create Internal Documentation and Architectural Diagrams.
Help Forecast for continuous growth of SIEM deployments and the build out of new deployments.
Qualifications for success:
Required Qualifications:
Five years overall IT experience with at least two of those years working in a Cyber Security Engineering role.
Five years of experience in technical troubleshooting and advanced problem solving.
Foundational understanding of Cloud Security best practices in both Azure and AWS.
Knowledgeable in Elastic Search and SQL and SQL Studio including but not limited to writing queries to perform searches, maintenance, and migration.
2+ years of experience supporting and managing distributed LogRhythm deployments.
Expert Level of knowledge for LogRhythm SIEM Components
Foundational understanding of LogRhythm detections and the underlying mechanisms that support them.
Strong Automation background in one or more of the following: Powershell, SQL, Bash, Python
Network Administration Experience including IPSEC Tunnel Troubleshooting and VPN creation.
Preferred Qualifications
Bachelor's Degree in Computer Science, Information Security, Information Systems, or equivalent professional experience in information security.
Strong understanding of Windows and Linux operating system administration
Familiarity with SRE practices and principles Strong written and verbal communication to document and communicate findings.
Familiarity with standard CAB request, approval and fulfillment best practices
Technical/professional security certifications (such as: LRPA, LRCA, LRSE, LRDE, CCNP, SANS GIAC or vendor-specific).Familiarity with MIRTE ATT&CK Framework.
