CyberSecurity Engineer | LogRhythm

Avertium; Región Centro; On-site; MXN 500,000 - 800,000; Full time

Job summary

Avertium is seeking a Senior LogRhythm Engineer/Architect to protect information systems and implement, configure, optimize, and administer dedicated LogRhythm systems across client environments.

Responsibilities include securing cloud deployments, managing SIEM components, and creating documentation and diagrams to guide architecture and deployment strategies for multi-tenant environments.

Qualifications

• Five years IT experience including at least two in a Cyber Security Engineering role.
• Five years of experience in technical troubleshooting and advanced problem solving.
• Foundational understanding of Cloud Security practices in Azure and AWS.
• Knowledgeable in Elastic Search and SQL Studio including writing queries.
• 2+ years supporting and managing distributed LogRhythm deployments.
• Expert level knowledge of LogRhythm SIEM components.
• Foundational understanding of LogRhythm detections and underlying mechanisms.
• Strong automation background: PowerShell, SQL, Bash, Python.
• Network administration experience including IPSEC tunnel troubleshooting and VPN creation.
• Bachelor's degree in CS, Info Security, or equivalent experience.
• Strong Windows and Linux operating system administration.
• Familiarity with SRE practices and CAB processes.
• Security certifications (LRPA, LRCA, LRSE, LRDE, CCNP, SANS GIAC) and MIRTE ATT&CK familiarity.

Responsibilities

• Develop and secure internal cloud environments for multitenant LogRhythm deployments.
• Create and manage Security Groups, EC2 instances, EBS volumes, and S3 buckets.
• Maintain SIEM SQL and Elasticsearch databases to industry best practices.
• Serve as escalation point for other SIEM engineers.
• Create internal documentation and architectural diagrams.
• Forecast for growth of SIEM deployments and build-out of new deployments.

Skills

PowerShell

SQL

Bash

Python

LogRhythm SIEM

Windows administration

Linux administration

Education

Bachelor's Degree in Computer Science or Information Security

Tools

Elastic Search

SQL Studio

Azure

AWS

Job description

Avertium is a cyber fusion and MXDR leader, delivering comprehensive security and compliance services to mid-market and enterprise customers. Our unique “Assess, Design, Protect” methodology addresses and improves security strategy, reduces attack surface risk, strengthens compliance, and provides continuous threat protection. Avertium maximizes customer security investments and enables customers to focus on growth, innovation, and business outcomes, while assuring that their security infrastructure is resilient and adaptive to evolving threats. That’s why customers trust Avertium to deliver better security, improved compliance, and greater ROI.

Avertium is currently seeking a Senior LogRhythm Engineer/Architect. In this role will protect customer information and information systems from unauthorized access, modification, or destruction. The role will also be responsible for implementing, configuring, optimizing, and administering dedicated LogRhythm systems.

Responsibilities

• Develop and secure Avertium internal cloud environments for multitenant distributed LogRhythm deployments
• Create and manage Security Groups, EC2 instances, EBS volumes and S3 buckets
• Maintain managed SIEM SQL and Elasticsearch databases to industry best practices
• Serve as technical escalation point for other Avertium SIEM engineers
• Create Internal Documentation and Architectural Diagrams
• Help Forecast for continuous growth of SIEM deployments and the build out of new deployments

Qualifications for success

• Required Qualifications:
• Five years overall IT experience with at least two of those years working in a Cyber Security Engineering role
• Five years of experience in technical troubleshooting and advanced problem solving
• Foundational understanding of Cloud Security best practices in both Azure and AWS
• Knowledgeable in Elastic Search and SQL and SQL Studio including but not limited to writing queries to perform searches, maintenance, and migration
• 2+ years of experience supporting and managing distributed LogRhythm deployments
• Expert Level of knowledge for LogRhythm SIEM Components
• Foundational understanding of LogRhythm detections and the underlying mechanisms that support them
• Strong Automation background in one or more of the following: Powershell, SQL, Bash, Python
• Network Administration Experience including IPSEC Tunnel Troubleshooting and VPN creation
• Preferred Qualifications
• Bachelor's Degree in Computer Science, Information Security, Information Systems, or equivalent professional experience in information security
• Strong understanding of Windows and Linux operating system administration
• Familiarity with SRE practices and principles Strong written and verbal communication to document and communicate findings
• Familiarity with standard CAB request, approval and fulfillment best practices
• Technical/professional security certifications (such as: LRPA, LRCA, LRSE, LRDE, CCNP, SANS GIAC or vendor-specific). Familiarity with MIRTE ATT&CK Framework.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.