Cyber Security Engineer - AlienVault

Avertium is the managed security and consulting provider that companies turn to when they want more than check-the-box cybersecurity. In today’s threat landscape, your not-so-standard processes, workflows, and vulnerabilities require more than just a standard approach to cybersecurity. You need a smarter, stronger, show-no-weakness approach based on more rigor, more relevance, and more responsiveness. That is why more than 1,200 organizations in every sector from manufacturing to financial services, healthcare to technology and business services to hospitality rely on Avertium for cybersecurity services.  We are looking for a Cyber Security Engineer to join our Managed Security Services Team. In this role, you will focus on providing excellent customer experiences centered on great technical support to our AlienVault SIEM customers worldwide.  You will help our customers along their security journey through research, diagnoses, troubleshooting, and resolution of SIEM issues in an accurate and timely manner. You will be responsible for working with different systems, software, and hardware including cloud environments in AWS and Azure.  

Required Qualifications:

• Three or more years in an enterprise technical support or similar role.
• Experience with USM Anywhere application, server, and networking support.
• Experience troubleshooting performance and application-based issues on Windows and Linux environments.
• In-depth understanding of networking concepts and technologies. Including supporting Network IDS sensors, and port mirroring.
• Excellent problem solving and communication skills.
• Ability to provide step by step technical help via phone, remote session, and email.

Qualifications for Success:

• Some software or scripting experience with Regex and PowerShell.
• Experience with managing system logging agents including NXLog, AlienVault Agent and OSQuery.  
• Experience with writing Orchestration and Suppression rules in USM Anywhere
• Familiar with setting up and troubleshooting AlienApps
• Exposure to using SIGMA Rules and using API’s
• Vendor Certification (AVSE)
• Ability to create internal documentation including architectural diagrams.
• Familiarity with cloud administration best practices and principles in AWS and(or)Azure.
• Experience using enterprise ticketing systems such as ServiceNow.