LogRhythm SIEM Engineer

We are seeking a skilled LogRhythm Resident Engineer (RE) to join our team on an onsite basis. The ideal candidate will be responsible for deploying, administering, optimizing, and supporting the LogRhythm SIEM platform, ensuring effective security monitoring, log management, and incident response support for our clients. This is a high-impact role requiring technical expertise, strong troubleshooting abilities, and excellent customer-facing communication skills.

Key Responsibilities:

LogRhythm Platform Administration

• Install, configure, and maintain LogRhythm SIEM components.
• Perform upgrades, patches, and routine health checks.
• Monitor system performance, storage, and log retention policies.

Security Monitoring

• Develop, tune, and optimize correlation rules, alarms, and AI Engine rules.
• Minimize false positives and improve detection accuracy.
• Customize dashboards, reports, and alerts for SOC teams.

Log Source Integration

• Onboard and normalize logs from:
• Network devices (firewalls, routers, IDS/IPS)
• Servers (Windows, Linux, Unix)
• Security tools (EDR, AV, IAM, cloud platforms)
• Troubleshoot log parsing and data ingestion issues.

Incident Response & SOC Support

• Support SOC analysts during security incidents.
• Assist in threat investigations and root-cause analysis.
• Provide guidance on incident response workflows using LogRhythm.

Customer Advisory & Enablement

• Act as a trusted security advisor to stakeholders.
• Provide hands-on training to SOC and IT teams.
• Recommend SIEM best practices and architecture improvements.

Collaboration & Escalation

• Work with LogRhythm TAC (Technical Assistance Center) on escalated issues.
• Document configurations, procedures, and runbooks.

Required Skills & Qualifications:

Technical Skills:

• Strong experience with LogRhythm SIEM.
• Solid understanding of:
• Security operations (SOC)
• Network security concepts
• Windows/Linux administration
• TCP/IP, DNS, HTTP, SSL, firewalls
• Experience with log analysis and threat detection.
• Scripting skills: PowerShell, Python, Bash (preferred).

Experience:

• 37+ years in SIEM, SOC, or cybersecurity operations.
• Prior experience in one or more of the following roles:
• SIEM Engineer
• SOC Analyst (Tier 2/3)
• Security Engineer
• LogRhythm Administrator

Certifications (Preferred):

• LogRhythm Certified Professional / Admin
• CISSP, GCIH, GCED, Security+
• ITIL (good to have)