CyberSecurity Engineer | Microsoft

A security engineer in Avertium's managed security services team who keeps customers' security tooling healthy and effective, working across Microsoft XDR, Sentinel, SentinelOne and Azure and AWS environments.

The engineer diagnoses and fixes problems with the security tools Avertium manages, carries out routine maintenance, watches the health of those systems, and uses SIEM, firewall and IDS/IPS data to support network investigations and look back through logs and traffic for signs of malicious activity. Advising clients on their security posture and transferring knowledge to them is part of the job. Avertium asks for three or more years in a security engineering role, KQL, some PowerShell and regex scripting, Windows and Linux troubleshooting and familiarity with MITRE ATT&CK; Microsoft security certifications such as SC-200 are preferred. Remote in the US.