CyberSecurity Engineer | LogRhythm

Avertium, LLC; Región Centro; Presencial; MXN 800.000 - 1.000.000; Jornada completa

Descripción de la vacante

Avertium, LLC is seeking a Senior LogRhythm Engineer/Architect to protect information systems by implementing, configuring, and administering LogRhythm deployments across cloud environments. The role emphasizes secure multitenant SIEM operations and continuous improvement of detection and response capabilities.

Ideal candidates will have deep experience with LogRhythm components, Azure/AWS security practices, and strong automation skills to streamline deployments and documentation.

Formación

• Five years of IT experience with at least two years in a Cyber Security Engineering role.
• Experience supporting and managing distributed LogRhythm deployments (2+ years).
• Foundational Cloud Security knowledge in Azure and AWS.
• Proficient in writing queries in SQL/Elasticsearch for searches and migrations.
• Strong automation skills using PowerShell, SQL, Bash or Python.

Responsabilidades

• Develop and secure internal cloud environments for multitenant LogRhythm deployments.
• Create and manage security groups, EC2, EBS and S3 resources.
• Maintain SIEM databases to industry best practices.
• Serve as escalation point for SIEM engineers.
• Create internal docs and architectural diagrams.
• Forecast growth and build out new deployments.

Conocimientos

LogRhythm SIEM

Cloud security

Automation (PowerShell, Bash, Python)

SQL & Elasticsearch

Networking & VPN/IPSec

Troubleshooting

Educación

Bachelor's degree in CS or InfoSec

Herramientas

Elastic Search

SQL Studio

Descripción del empleo

Avertium is a cyber fusion and MXDR leader, delivering comprehensive security and compliance services to mid-market and enterprise customers. Our unique “Assess, Design, Protect” methodology addresses and improves security strategy, reduces attack surface risk, strengthens compliance, and provides continuous threat protection. Avertium maximizes customer security investments and enables customers to focus on growth, innovation, and business outcomes, while assuring that their security infrastructure is resilient and adaptive to evolving threats. That’s why customers trust Avertium to deliver better security, improved compliance, and greater ROI.

Avertium is currently seeking a Senior LogRhythm Engineer/Architect. In this role will protect customer information and information systems from unauthorized access, modification, or destruction. The role will also be responsible for implementing, configuring, optimizing, and administering dedicated LogRhythm systems.

Responsibilities:

• Develop and secure Avertium internal cloud environments for multitenant distributed LogRhythm deployments.
• Create and manage Security Groups, EC2 instances, EBS volumes and S3 buckets.
• Maintain managed SIEM SQL and Elasticsearch databases to industry best practices.
• Serve as technical escalation point for other Avertium SIEM engineers.
• Create Internal Documentation and Architectural Diagrams.
• Help Forecast for continuous growth of SIEM deployments and the build out of new deployments.

Qualifications for success:

• Required Qualifications:
• Five years overall IT experience with at least two of those years working in a Cyber Security Engineering role.
• Five years of experience in technical troubleshooting and advanced problem solving.
• Foundational understanding of Cloud Security best practices in both Azure and AWS.
• Knowledgeable in Elastic Search and SQL and SQL Studio including but not limited to writing queries to perform searches, maintenance, and migration.
• 2+ years of experience supporting and managing distributed LogRhythm deployments.
• Expert Level of knowledge for LogRhythm SIEM Components
• Foundational understanding of LogRhythm detections and the underlying mechanisms that support them.
• Strong Automation background in one or more of the following: Powershell, SQL, Bash, Python
• Network Administration Experience including IPSEC Tunnel Troubleshooting and VPN creation.
• Preferred Qualifications
• Bachelor's Degree in Computer Science, Information Security, Information Systems, or equivalent professional experience in information security.
• Strong understanding of Windows and Linux operating system administration
• Familiarity with SRE practices and principles Strong written and verbal communication to document and communicate findings.
• Familiarity with standard CAB request, approval and fulfillment best practices
• Technical/professional security certifications (such as: LRPA, LRCA, LRSE, LRDE, CCNP, SANS GIAC or vendor-specific).Familiarity with MIRTE ATT&CK Framework.
• #LI-CS1