CyberSecurity Engineer | LogRhythm

Accountabilities:

• • Design, develop, secure, and maintain internal cloud environments supporting multitenant and distributed LogRhythm deployments.
  • Configure and manage AWS infrastructure components, including Security Groups, EC2 instances, EBS volumes, and S3 buckets.
  • Administer and optimize managed SIEM SQL and Elasticsearch databases, including searches, maintenance, migrations, and performance improvements.
  • Implement, configure, optimize, and administer LogRhythm SIEM systems and their underlying components.
  • Act as a technical escalation point for other SIEM and cybersecurity engineers, providing advanced troubleshooting and problem resolution.
  • Investigate complex security, infrastructure, networking, and SIEM issues and develop durable technical solutions.
  • Build automation and operational tooling using technologies such as PowerShell, SQL, Bash, or Python to improve efficiency and reliability.
  • Support network administration activities, including IPsec tunnel troubleshooting and VPN creation.
  • Create and maintain technical documentation, architectural diagrams, and operational guidance.
  • Help forecast infrastructure requirements and plan for the continued growth of SIEM deployments and new implementations.
  • Contribute to secure, reliable, and scalable cloud and cybersecurity engineering practices across the environment.

  Requirements:

  • 5+ years of overall IT experience, including at least 2 years in a cybersecurity engineering role, with strong experience in technical troubleshooting and advanced problem solving.
  • 2+ years of hands-on experience supporting and managing distributed LogRhythm deployments, with expert-level knowledge of LogRhythm SIEM components.
  • Strong understanding of LogRhythm detections and the underlying technologies and mechanisms that support them.
  • Experience with AWS and Azure cloud security fundamentals, including secure infrastructure configuration and administration.
  • Strong knowledge of Elasticsearch and SQL/SQL Server Management Studio, including writing queries, performing searches, maintenance, and migrations.
  • Strong automation capabilities using one or more of PowerShell, SQL, Bash, or Python.
  • Network administration experience, including IPsec troubleshooting and VPN creation.
  • Strong written and verbal communication skills, with the ability to document technical findings and communicate solutions clearly.
  • Familiarity with Windows and Linux system administration, SRE principles, and standard change-management/CAB practices is preferred.
  • A bachelor's degree in Computer Science, Information Security, Information Systems, or a related discipline is preferred, although equivalent professional experience may be considered.
  • Security or technical certifications such as LRPA, LRCA, LRSE, LRDE, CCNP, SANS GIAC, or relevant vendor certifications are advantageous.
  • Familiarity with the MITRE ATT&CK framework is a plus.
  • The ideal candidate combines strong technical depth with an analytical mindset, ownership, adaptability, and the ability to operate effectively in a remote environment.

  Benefits:

  • Competitive salary and comprehensive employee benefits.
  • Unlimited paid time off (PTO).
  • 401(k) participation to support long-term financial planning.
  • Opportunities for professional growth, learning, and career development.
  • Exposure to cutting-edge cybersecurity, SIEM, cloud, and infrastructure technologies.
  • A stimulating environment focused on solving complex cybersecurity challenges.
  • Remote work arrangement within the United States.