Remote Security Health Technician

Summary

Join BlueVoyant as a Security Health Technician to work on a rotating day/night shift pattern of 12-hour shifts. The ideal candidate will have experience working across various security platforms, understand event ingestion/normalization for security analytics, and be well-versed in core IT security and network fundamentals.

Requirements

• Experience working with cloud based Next-Gen AV software (Sentinel One, CrowdStrike, Carbon Black, Microsoft Sentinel)
• Understanding of core network protocols (DNS, DHCP, ARP, TCP/UDP, SSL, SSH, FTP)
• Linux systems and networking administration/troubleshooting
• Understanding of Cloud Providers and their services (AWS, Microsoft Azure, Google)
• Familiarity with virtualization platforms (VMWare, Hyper V)
• Familiarity with event ingestion (Syslog, REST API, HTTP Event Collector, Splunk Universal Forwarder)
• Experience with SIEM/SOAR platforms
• Knowledge of technology solutions in one or more of the following functional areas: Cyber Security, IT Network/Cloud Environment data
• Experience writing custom queries in SIEM (ideally in Spunk and Microsoft Sentinel)
• Ownership mindset
• Troubleshooting mindset
• Good written and oral communications
• Service Delivery experience a plus

Responsibilities

• Triage and troubleshoot service health issues with respect to our managed security solutions
• Troubleshoot network connectivity, Linux operating system problems, event data flow issues with respect to a clients SIEM
• Troubleshoot software installation issues and application incompatibilities with next-gen AV
• Work in a client facing role
• Handle account management requests from various business units

Preferred Qualifications

• 1-3 years of hands-on System/Network Administration experience
• Experience with SIEM platforms and Security concepts
• Security +, Network + preferred, but not required