Implement, configure, optimize, and administer distributed LogRhythm SIEM deployments in AWS and Azure environments. Develop secure cloud infrastructure, manage security groups and storage, maintain SQL and Elasticsearch databases, troubleshoot networks and VPNs, automate operational tasks, document architectures, forecast deployment growth, and provide technical escalation support to SIEM engineers.
Avertium is a cyber fusion and MXDR leader, delivering comprehensive security and compliance services to mid-market and enterprise customers. Our unique “Assess, Design, Protect” methodology addresses and improves security strategy, reduces attack surface risk, strengthens compliance, and provides continuous threat protection. Avertium maximizes customer security investments and enables customers to focus on growth, innovation, and business outcomes, while assuring that their security infrastructure is resilient and adaptive to evolving threats. That’s why customers trust Avertium to deliver better security, improved compliance, and greater ROI.
Avertium is currently seeking a Senior LogRhythm Engineer/Architect. In this role will protect customer information and information systems from unauthorized access, modification, or destruction. The role will also be responsible for implementing, configuring, optimizing, and administering dedicated LogRhythm systems.
Responsibilities:
- Develop and secure Avertium internal cloud environments for multitenant distributed LogRhythm deployments.
- Create and manage Security Groups, EC2 instances, EBS volumes and S3 buckets.
- Maintain managed SIEM SQL and Elasticsearch databases to industry best practices.
- Serve as technical escalation point for other Avertium SIEM engineers.
- Create Internal Documentation and Architectural Diagrams.
- Help Forecast for continuous growth of SIEM deployments and the build out of new deployments.
Qualifications for success:
- Required Qualifications:
- Five years overall IT experience with at least two of those years working in a Cyber Security Engineering role.
- Five years of experience in technical troubleshooting and advanced problem solving.
- Foundational understanding of Cloud Security best practices in both Azure and AWS.
- Knowledgeable in Elastic Search and SQL and SQL Studio including but not limited to writing queries to perform searches, maintenance, and migration.
- 2+ years of experience supporting and managing distributed LogRhythm deployments.
- Expert Level of knowledge for LogRhythm SIEM Components
- Foundational understanding of LogRhythm detections and the underlying mechanisms that support them.
- Strong Automation background in one or more of the following: Powershell, SQL, Bash, Python
- Network Administration Experience including IPSEC Tunnel Troubleshooting and VPN creation.
- Preferred Qualifications
- Bachelor's Degree in Computer Science, Information Security, Information Systems, or equivalent professional experience in information security.
- Strong understanding of Windows and Linux operating system administration
- Familiarity with SRE practices and principles Strong written and verbal communication to document and communicate findings.
- Familiarity with standard CAB request, approval and fulfillment best practices
- Technical/professional security certifications (such as: LRPA, LRCA, LRSE, LRDE, CCNP, SANS GIAC or vendor-specific).Familiarity with MIRTE ATT&CK Framework.
- #LI-CS1
In addition to a career in the challenging world of cyber security, Avertium offers competitive salaries, full benefits, unlimited paid time off, participation in 401(k), and opportunities for professional growth and development. We offer the opportunity to work with cutting-edge security technologies in a stimulating work environment.
Avertium provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
Similar Jobs
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Conduct AWS cloud threat hunting for global clients using Falcon, threat intelligence, cloud logs, queries, and scripts. Review configurations, identify adversarial activity and unauthorized access risks, develop defensive recommendations, and manage client projects. Communicate findings through technical reports, presentations, and stakeholder briefings, including to CISO-level audiences, regulators, and legal counsel.
Top Skills:
AWSAws-Native ServicesCi/CdCloud Control PlaneCloud LoggingCloud NetworkingCloud SecurityData SecurityFalconGoIdentity And Access ManagementPythonThreat IntelligenceWorkload Security
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Delivers strategic cybersecurity advisory engagements for organizational leaders. Assesses and develops cybersecurity and incident response programs, creates exercises and scenarios, identifies emerging cyber trends, and produces reports, presentations, recommendations, and findings. The role also contributes to thought leadership, methodology development, and internal initiatives while managing multiple projects and client relationships independently. Travel up to 30% is required, often on short notice.
Top Skills:
Artificial Intelligence (Ai)Computer Security Incident Response Teams (Csirt)CybersecurityIncident ResponseSecurity Operations Centers (Soc)
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Lead incident response engagements, investigate intrusions and advanced threats, perform host and network forensics, conduct basic malware analysis, and develop remediation plans. Communicate findings to customers, regulators, executives, and legal counsel through reports and presentations. Lead teams, mentor colleagues, contribute industry thought leadership, and use AI to improve workflows and decision-making. Travel on short notice up to 30% of the time.
Top Skills:
Ai TechnologiesAWSAzureBro/ZeekGCPLinuxmacOSSuricataWindows
What you need to know about the Chicago Tech Scene
With vibrant neighborhoods, great food and more affordable housing than either coast, Chicago might be the most liveable major tech hub. It is the birthplace of modern commodities and futures trading, a national hub for logistics and commerce, and home to the American Medical Association and the American Bar Association. This diverse blend of industry influences has helped Chicago emerge as a major player in verticals like fintech, biotechnology, legal tech, e-commerce and logistics technology. It’s also a major hiring center for tech companies on both coasts.
Key Facts About Chicago Tech
- Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
- Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
- Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
- Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory
