About the Role
We are looking for an experienced SOC Architect to design and enhance enterprise security monitoring and incident-response architecture.
This position focuses on building scalable and effective security monitoring capabilities across cloud, network, identity, database, application and endpoint environments.
Key Responsibilities
- Design enterprise SOC and security monitoring architecture.
- Architect and enhance SIEM and SOAR solutions, preferably including Microsoft Sentinel.
- Design monitoring solutions covering log ingestion, correlation, detection, analytics, alerting and incident-response integration.
- Develop and improve security monitoring use cases, detection logic and correlation rules.
- Design and improve automated incident-response playbooks.
- Define security monitoring and incident-response technical standards and guidelines.
- Integrate security telemetry across cloud, network, identity, database, application and endpoint security controls.
- Support threat detection, threat hunting, UEBA and incident-investigation capabilities.
- Review SOC architecture for scalability, resilience, performance and effectiveness.
- Recommend improvements as security threats and technology environments evolve.
Requirements
- Minimum 8 years of experience in cybersecurity, security monitoring, security engineering or SOC technologies.
- Minimum 3 years in a SOC/security architecture or senior technical role.
- Relevant certification such as CISSP, Microsoft Certified: Cybersecurity Architect Expert, or equivalent.
- Strong hands-on knowledge of SIEM, SOAR and enterprise security monitoring architecture.
- Experience with security analytics, detection rules, correlation and automated response.
- Good understanding of threat hunting, UEBA, incident investigation and security automation.
- Strong technical, analytical, communication and stakeholder-management skills.