RemoteLeaf Logo
Log in Sign up

CyberSecurity Engineer | USM Anywhere

15 hours, 28 minutes ago
Mexico
Full-time
Senior
Security Engineer
Cybersecurity
AWS Azure Bash Cybersecurity DNS Elasticsearch Linux PowerShell Python SIEM Splunk SQL TCP/IP
Apply Now
Avertium

Avertium

Avertium is a cyber fusion company offering end-to-end cybersecurity solutions with a programmatic approach, driving action and influence in the boardroom for over 1,200 clients across 15 industries.

IT Services
201-500
Founded 2019
View All Jobs 8

Description

  • Design, implement, configure, and optimize USM Anywhere SIEM/XDR environments.
  • Manage security monitoring, log collection, data sources, integrations, agents, and supporting infrastructure.
  • Develop and tune detections, correlation rules, alerts, dashboards, and security monitoring capabilities.
  • Support threat detection, investigation, and incident response using SIEM/XDR technologies.
  • Use endpoint, network, cloud, and application telemetry to improve threat visibility and detection.
  • Troubleshoot complex security, SIEM/XDR, infrastructure, and networking issues as a technical escalation point.
  • Build integrations with endpoint, cloud, network, identity, and other security technologies.
  • Develop automation and scripts to improve operational efficiency and security response.
  • Improve detection quality, system performance, reliability, scalability, and operational processes.
  • Create technical documentation, architecture diagrams, procedures, and operational standards.
  • Collaborate with Security Operations, Engineering, and Service Delivery teams to resolve customer issues.
  • Support new SIEM/XDR deployments and participate in change management and CAB processes.

Requirements

  • 5+ years of overall IT experience, including 2+ years in cybersecurity engineering, security operations, or a related role.
  • 2+ years of hands-on experience implementing, administering, troubleshooting, or engineering SIEM and/or XDR solutions.
  • Hands-on experience with USM Anywhere or a comparable enterprise SIEM/XDR platform.
  • Understanding of log collection, normalization, correlation, alerting, detection, dashboards, and security event analysis.
  • Experience developing, tuning, or troubleshooting security detections and their underlying data.
  • Experience with security automation or scripting using PowerShell, Python, Bash, SQL, or similar technologies.
  • Foundational cloud security and infrastructure knowledge in AWS and/or Azure.
  • Working knowledge of TCP/IP, DNS, VPNs, and IPsec.
  • Strong troubleshooting, problem-solving, written, and verbal communication skills.
  • Advanced USM Anywhere or LevelBlue experience, Open XDR/SOAR experience, and familiarity with platforms such as Microsoft Sentinel, SentinelOne, Splunk, FortiSIEM, or LogRhythm (preferred).
  • MSSP, managed security services, professional services, multitenant platform, Windows/Linux administration, SQL/Elasticsearch, MITRE ATT&CK, or NIST Cybersecurity Framework experience (preferred).
  • Relevant cybersecurity or vendor certifications and a bachelor's degree in a related field, or equivalent professional experience (preferred).

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Venice.ai

Staff Engineer, Fraud & Abuse

Venice.ai

Venice is hiring a senior Fraud & Abuse Prevention Engineer to build and operate detection and enforcement systems that protect its privacy-focused consumer AI platform from fraud, account compromise, and automated abuse.

Anywhere Lead Security Engineer
Cloudflare Cybersecurity Machine Learning Python Rust TypeScript
15 hours, 58 minutes ago
Appspace

Cloud Security Engineer - Remote

Appspace 201-500 Internet Software & Services

Appspace is seeking a customer-facing Cloud Security Engineer to secure and support client cloud environments across GCP, Azure, and AWS, with a primary focus on GCP security operations and compliance.

United States Full-time Lead Security Engineer
AWS Azure Bash DevSecOps Docker GCP Kubernetes Network Security PowerShell Python SIEM Terraform
15 hours, 58 minutes ago
Lanterncare

Principal IAM Engineer

Lanterncare

Lantern is seeking a remote Principal IAM Engineer to own and strengthen the identity control plane that governs secure access to PHI across its specialty-care platform.

United States Full-time Lead Security Engineer
GitHub HIPAA OpenID Connect PowerShell Python SAML Terraform
2 days, 12 hours ago
Laminar Projects

Vigilant IT Security Manager - Portugal/Poland (Remote)

Laminar Projects 51-200 Construction & Engineering

Lead IT security and operations at Laminar Projects, a construction-technology consultancy, to strengthen cybersecurity, maintain compliance, and build a high-performing IT function.

Poland Portugal Romania Full-time Lead Security Engineer
Cybersecurity
2 days, 15 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers