{"id":65055,"url":"https://alion.io/job/avertium-cybersecurity-engineer-logrhythm","title":"CyberSecurity Engineer | USM Anywhere","company":{"id":7184,"name":"Avertium","domain":"avertium.com","url":"https://alion.io/company/avertium","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":87,"open_postings":6,"ghost_share":0,"stale_share":0.333,"repost_share":0,"time_to_fill_p50_days":147,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Guadalajara, Mexico"],"countries":["MX"],"hiring_countries":["MX"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":45000,"max_usd":105000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"DNS","optional":false},{"name":"LogRhythm","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"SQL","optional":false},{"name":"TCP/IP","optional":false},{"name":"ElasticSearch","optional":true},{"name":"Linux","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"SentinelOne","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-08-19T21:09:08Z","employer_posted_date":"2026-08-19","last_verified_at":"2026-10-16T18:43:52Z","board_verified":true,"closed_at":null,"days_open":57,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":57},"description":"Avertium is seeking a Senior Cybersecurity Engineer with strong hands-on experience with USM Anywhere and modern SIEM/XDR technologies. This role will focus on designing, implementing, optimizing, and supporting security monitoring and response solutions across customer environments.\nThe ideal candidate understands how SIEM and XDR technologies work together to provide centralized visibility, threat detection, investigation, incident response, and security automation. You will serve as a senior technical resource for complex security issues, help improve the effectiveness of our security monitoring capabilities, and support the continued evolution and scalability of our security operations.\nWhile USM Anywhere is the primary platform for this role, candidates with strong experience in other major SIEM/XDR platforms such as Microsoft Sentinel, Splunk, FortiSIEM, LogRhythm, or comparable technologies will also be considered.\nResponsibilities:\nDesign, implement, configure, and optimize USM Anywhere SIEM/XDR environments.\n\nConfigure and manage security monitoring, log collection, data sources, integrations, agents, and supporting infrastructure.\n\nDevelop, tune, and maintain detections, correlation rules, alerts, dashboards, and other security monitoring capabilities.\n\nSupport threat detection, investigation, and incident response using SIEM and XDR technologies.\n\nLeverage endpoint, network, cloud, application, and other security telemetry to improve threat visibility and detection.\n\nTroubleshoot complex SIEM, XDR, security, infrastructure, and networking issues and serve as a technical escalation point for other engineers.\n\nSupport integrations between USM Anywhere and endpoint, cloud, network, identity, and other security technologies.\n\nDevelop automation and scripting to improve operational efficiency and enhance security response capabilities.\n\nIdentify opportunities to improve detection quality, system performance, reliability, scalability, and operational processes.\n\nSupport the architecture and deployment of new SIEM/XDR environments and customer solutions.\n\nCreate and maintain technical documentation, architecture diagrams, procedures, and operational standards.\n\nCollaborate with Security Operations, Engineering, Service Delivery, and other technical teams to resolve complex customer and operational issues.\n\nParticipate in change management and CAB processes.\n\nStay current with emerging SIEM, XDR, threat detection, automation, and security operations technologies.\n\nRequired Qualifications:\n5+ years of overall IT experience, including at least 2 years in cybersecurity engineering, security operations, or a related security role.\n\n2+ years of hands-on experience implementing, administering, troubleshooting, or engineering SIEM and/or XDR solutions.\n\nStrong hands-on experience with USM Anywhere or a comparable enterprise SIEM/XDR platform.\n\nStrong understanding of SIEM concepts, including log collection, normalization, correlation, alerting, detection, dashboards, and security event analysis.\n\nExperience developing, tuning, or troubleshooting security detections and understanding the underlying data supporting those detections.\n\nStrong technical troubleshooting and advanced problem-solving skills.\n\nExperience with security automation or scripting using PowerShell, Python, Bash, SQL, or similar technologies.\n\nFoundational understanding of cloud security and infrastructure in AWS and/or Azure.\n\nWorking knowledge of networking concepts, including TCP/IP, DNS, VPNs, and IPsec.\n\nStrong written and verbal communication skills.\n\n#LI-CS1\nPreferred Qualifications:\nAdvanced experience with USM Anywhere and/or related LevelBlue security technologies.\n\nExperience with Open XDR and security orchestration, automation, and response (SOAR) capabilities.\n\nExperience with Microsoft Sentinel, SentinelOne, Splunk, FortiSIEM, LogRhythm, or other major SIEM/XDR platforms.\n\nExperience working in an MSSP, managed security services, or professional services environment.\n\nExperience supporting multiple customer environments or multitenant security platforms.\n\nStrong Windows and Linux administration experience.\n\nExperience with SQL, Elasticsearch, or other security data platforms.\n\nFamiliarity with MITRE ATT&CK and the NIST Cybersecurity Framework.\n\nRelevant cybersecurity or vendor certifications.\n\nBachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.","description_format":"text","description_chars":4485,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Mexico","iso":"MX","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Incident Response","Security Operations"],"lifecycle":[{"event":"open","at":"2026-08-19T21:09:08Z"}],"visa":[],"liveness":{"score":77,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.857,"p_room":0.9,"age_days":57,"expected_fill_days":147,"reasons":["conf:0","win:mid"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/avertium-cybersecurity-engineer-logrhythm","json_url":"https://alion.io/job/avertium-cybersecurity-engineer-logrhythm.json","meta":{"generated_at":"2026-10-16T18:46:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4081,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7184},"rest":"https://alion.io/mcp/rest/get_company?id=7184"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Favertium-cybersecurity-engineer-logrhythm"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Favertium-cybersecurity-engineer-logrhythm"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Favertium-cybersecurity-engineer-logrhythm"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/avertium-cybersecurity-engineer-logrhythm\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Favertium-cybersecurity-engineer-logrhythm"}]}