CyberSecurity Engineer | LogRhythm
平均值是网络融合和 MXDR 领导者，为中型市场和企业客户提供全面的安全和合规服务。我们的独特的评估，设计，保护方法解决并改善了安全策略，减少了攻击表面风险，加强了合规性，并提供了持续威胁保护。平均值最大化了客户的安全投资，使客户能够专注于增长，创新和商业成果，同时确保他们的安全基础设施具有弹性的能力和适应不断变化的威胁。这就是为什么客户信任 Avertium 来提供更好的安全性，提高合规性和更大的 ROI. 艾维尔蒂奥目前正在寻找一名高级 LogRhythm 工程师/建筑师。在这个角色中，将保护客户信息和信息系统免受未经授权访问，修改或破坏。该职位还负责实施，配置，优化和管理专门的 LogRytm 系统。责任：·为多个持有分布式 LogRythm 部署开发和安全 Divertim 内部云环境。·创建并管理安全组，EC2实例，EBS 卷和 S3桶。·保持 SIEMSQL 和 Elasticsearch 数据库以行业最佳做法进行管理。·作为其他艾维尔提奥的 SIEM 工程师的技术升级点。· 创建内部文档和架构图表。· 帮助预测 SIEM 部署的持续增长以及新部署的建设。成功资格：· 要求资格：• 在这些年中至少两年的 IT 经验在网络安全工程工作中。· 技术故障解决和先进问题解决五年的经验。· Azure 和 AWS 中云安全最佳实践的基本理解。· 有弹性搜索，SQL 和 SQL Studio 的知识，包括但不限于编写查询进行搜索，维护和迁移。· 2年以上支持和管理分布式 LogRhythm 部署经验。· 专家级别的知识 LogRhythM SIEM 组件。· 基本了解 LogRytm 检测及其支持它们的机制。· 在以下一个或多个领域的强自动化背景：Powershell,SQL,Bash,Python. · 包括 IPSEC 道故障解决和 VPN 创建等网络管理经验。
查看英文原文
Avertium is a cyber fusion and MXDR leader, delivering comprehensive security and compliance services to mid-market and enterprise customers. Our unique “Assess, Design, Protect” methodology addresses and improves security strategy, reduces attack surface risk, strengthens compliance, and provides continuous threat protection. Avertium maximizes customer security investments and enables customers to focus on growth, innovation, and business outcomes, while assuring that their security infrastructure is resilient and adaptive to evolving threats. That’s why customers trust Avertium to deliver better security, improved compliance, and greater ROI.
Avertium is currently seeking a Senior LogRhythm Engineer/Architect. In this role will protect customer information and information systems from unauthorized access, modification, or destruction. The role will also be responsible for implementing, configuring, optimizing, and administering dedicated LogRhythm systems.
Responsibilities:
- Develop and secure Avertium internal cloud environments for multitenant distributed LogRhythm deployments.
- Create and manage Security Groups, EC2 instances, EBS volumes and S3 buckets.
- Maintain managed SIEM SQL and Elasticsearch databases to industry best practices.
- Serve as technical escalation point for other Avertium SIEM engineers.
- Create Internal Documentation and Architectural Diagrams.
- Help Forecast for continuous growth of SIEM deployments and the build out of new deployments.
Qualifications for success:
- Required Qualifications:
- Five years overall IT experience with at least two of those years working in a Cyber Security Engineering role.
- Five years of experience in technical troubleshooting and advanced problem solving.
- Foundational understanding of Cloud Security best practices in both Azure and AWS.
- Knowledgeable in Elastic Search and SQL and SQL Studio including but not limited to writing queries to perform searches, maintenance, and migration.
- 2+ years of experience supporting and managing distributed LogRhythm deployments.
- Expert Level of knowledge for LogRhythm SIEM Components
- Foundational understanding of LogRhythm detections and the underlying mechanisms that support them.
- Strong Automation background in one or more of the following: Powershell, SQL, Bash, Python
- Network Administration Experience including IPSEC Tunnel Troubleshooting and VPN creation.
- Preferred Qualifications
- Bachelor's Degree in Computer Science, Information Security, Information Systems, or equivalent professional experience in information security.
- Strong understanding of Windows and Linux operating system administration
- Familiarity with SRE practices and principles Strong written and verbal communication to document and communicate findings.
- Familiarity with standard CAB request, approval and fulfillment best practices
- Technical/professional security certifications (such as: LRPA, LRCA, LRSE, LRDE, CCNP, SANS GIAC or vendor-specific).Familiarity with MIRTE ATT&CK Framework.
Originally posted on Himalayas