Cloud Engineer - Security Logging (remote) - Remote Eligible

Security Logging Engineer

Since 1953, Ferguson has been a source of quality supplies for a variety of industries. Together We Build Better infrastructure, better homes and better businesses. We exist to make our customers' complex projects simple, successful, and sustainable. We proactively solve problems, adapt and grow to continuously serve our customers, communities and each other. Ferguson, a Fortune 500 company, is proud to provide best-in-class products, service and capabilities across the following industries: Commercial/Mechanical, Facilities Supply, Fire and Fabrication, HVAC, Industrial, Residential Trade, Residential Building and Remodel, Waterworks and Residential Digital Commerce. Ferguson has approximately 36,000 associates across 1,700 locations. Ferguson is a community of proud associates who operate with the shared purpose of building something meaningful. You will build a career that you are proud of, at a company you can believe in.

The Security Logging Engineer is a technical contributor whose mission is to develop, test, configure, deploy, and monitor security logging infrastructure supporting Ferguson compliance and incident response objectives. This position will collaborate across towers to ensure alignment to defined security logging standards in addition to developing documentation to support consistent ingestion of logs, maintenance of managed infrastructure, and remediation of log outages.

This includes subject-matter leadership for the operation and stewardship of Security Logging technology and processes that support detection, prevention, and response to threats to Ferguson's IT infrastructure and services. Technology platforms include operating and/or integrating with platforms across service areas and products such as Security Information and Event Management (SIEM), Microsoft Azure, Email Security, Threat Intelligence, Firewalls, DDoS prevention solutions, Wireless Security, URL Filtering, Intrusion Prevention, and related systems. This position works directly with IT, headquarters, branch management, and with external business partners to achieve the vital business goals. This position requires strong partnership with teams in IT, GRC, Security Operations Center and other collaborators, to ensure that Ferguson can execute its business plans.

Location: This role is approved to be fully remote and can be based anywhere in the United States.

Duties and Responsibilities:

• Ingest and parse large volumes of data from many diverse sources such as network appliances (switches, firewalls, routers), Web Application Firewalls, Linux and Windows systems, email gateways, containers, databases, etc.
• Ensure all data handling and processing of logs adheres to security and compliance standards.
• Assist in the development and implementation of compliance monitoring tools and processes.
• Conduct regular audits to ensure alignment to relevant laws, regulations, and industry standards (ex. PCI, SOX, etc).
• Supervise integrity of ingested data and resolve any identified issues quickly and efficiently.
• Investigate anomalies in audit logs and other security related sources to support compliance and security initiatives.
• Develop, test, deploy, and maintain current Security Logging infrastructure.
• Provide technical support for Security Logging team solutions by collaborating with Systems Analysts, Developers, Infrastructure Engineers, Business Analysts, and project teams.
• Write, complete, and peer review Security Logging team playbooks and Standard Operating Procedures.
• Ensure team documentation is populated with resolutions, workarounds, known issues.
• Serve as a domain expert in assigned Security Logging solutions to team members, internal customers, and related teams, providing guidance and answering inquiries to clarify the work activities.
• Configure and fine-tune alerts and thresholds to avoid alert fatigue while ensuring critical events are flagged for immediate attention.
• Collaborate with other teams to identify performance bottlenecks and help optimize system performance through monitoring insights and root cause analysis.
• Work closely with internal security teams to ensure in-scope systems are fully integrated and perform successfully.
• Maintain life cycle management for Security Logging solutions to include upgrades, patches and system optimization.
• Create and maintain strong relationships with platform vendors to expedite issue resolutions and review offerings that provide value to business.
• Stay up-to-date with new Security Logging related technologies, industry best practices, and emerging trends, contributing to the evolution of monitoring practices and tools to enhance overall system reliability and performance.

Qualifications and Requirements

• Minimum of 5 years of systems engineering/system administration experience.
• BA or BS degree preferred.
• Excellent customer service and soft skills.
• Familiarity with a wide range of data ingestion, and parsing technologies such as Logstash, Fluentd, Beats, Splunk, Log Analytics, Cribl, Azure Event Hub, etc.
• Demonstrable experience in working with audit logs or security-centric data sets.
• Preferred experience with the following platforms; Logstash, ServiceNow, Azure Logic Apps, Azure Function apps, Datadog, xMatters, Azure Monitoring including Log Analytics, Microsoft Sentinel, and SolarWinds.
• Recent experience and proficiency with Cloud computing platforms, such as AWS, Azure, Oracle Cloud, and GCP.
• Proficiency administrating applications running on both windows and Linux based operating systems including RHEL, Ubuntu, Solaris, CentOS, Windows Server 2016, Windows Server 2019, etc.
• Experience in proactively monitoring system health and reacting accordingly.
• Strong organizational and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work multi-functionally in a team environment and independently.
• Solid ability to manage time appropriately and optimally prioritize tasks.
• Demonstrated ability to effectively understand and apply instructions, while also using acquired knowledge to go above and beyond when necessary.

At Ferguson, we care for each other. We value our well-being just as much as our hard work. We are committed to a holistic approach towards benefits plans and programs that support the mental, physical and financial well-being of our associates. Our competitive offering not only includes benefits like health, dental, vision, paid time off, life insurance and a 401(k) with a company match, but our associates also enjoy additional meaningful and inclusive enhancements that are adaptable to their diverse situations and needs, including mental health coverage, gender affirming and family building benefits, paid parental leave, associate discounts, community involvement opportunities and more!

Pay Range: $5,444.76 - $9,537.00 Actual pay rate may vary depending upon location. The estimated pay range for this position is below. The specific rate will depend on a candidate's qualifications and prior experience. Estimated Ranges displayed are Monthly for Salaried roles OR Hourly for all other roles. This role is Bonus or Incentive Plan eligible. Ferguson complies with all wage regulations. The starting wage may be higher in certain locations based on local or state wage requirements.

The company is an equal opportunity employer as well as a government contractor that shall abide by the requirements of 41 CFR 60-300.5(a), which prohibits discrimination against qualified protected Veterans and the requirements of 41 CFR 60-741.5(A), which prohibits discrimination against qualified individuals on the basis of disability. Ferguson Enterprises, LLC. is an equal employment employer F/M/Disability/Vet/Sexual Orientation/Gender Identity.