Security Architect

This opportunity involves leading cybersecurity operations initiatives, overseeing incident response activities, mentoring SOC analysts, and implementing continuous improvements across security processes and procedures. Take a leadership role in advancing enterprise cybersecurity operations, strengthening threat detection and response capabilities, and improving Security Operations Center (SOC) maturity.

Job Title: Cybersecurity Operations Lead – SOC & Incident Response

Position Overview

Take a leadership role in advancing enterprise cybersecurity operations, strengthening threat detection and response capabilities, and improving Security Operations Center (SOC) maturity.

This opportunity involves leading cybersecurity operations initiatives, overseeing incident response activities, mentoring SOC analysts, and implementing continuous improvements across security processes and procedures. The role works closely with IT, application development, business, and compliance teams to strengthen enterprise security capabilities across on-premises and cloud-based environments.

The ideal candidate brings extensive IT experience, enterprise infrastructure design and deployment expertise, and a strong background in SOC leadership, cyber threat response, and security operations.

What You'll Do / Key Responsibilities

• Drive innovation and continuous improvement in Security Operations Center capabilities.

• Serve as an escalation point while providing leadership, mentorship, and guidance to SOC Analyst I, II, and III.

• Oversee the identification, analysis, and response to security incidents, ensuring rapid containment and resolution.

• Lead and mentor Security Operations analysts, ensuring they are well-trained and motivated.

• Assist with staffing Security Operations personnel.

• Perform threat identification and analyze risks to the enterprise.

• Assist in implementing and advancing continuous monitoring and incident response processes and procedures.

• Review and refine security playbooks, processes, and alerts to identify opportunities for improvement.

• Assist with advanced threat hunting to identify potential attacker presence within the environment.

• Collaborate with IT, application development, and business teams to advance enterprise security initiatives.

• Lead security team projects and continuous improvement initiatives.

• Collaborate with compliance teams to maintain audit-ready status.

Required Qualifications

• 10+ years of IT experience working with Windows, Linux, and web-based applications.

• 5+ years of experience with enterprise infrastructure design and deployment.

• 5 years of related experience in a SOC Lead capacity.

• Must possess any one of the following certifications:

  • Certified Information Systems Security Professional (CISSP).

  • GIAC Certified Incident Handler (GCIH).

  • Security+.

• Ability to communicate clearly, both verbally and in writing, and interact effectively with internal and external vendors, project team members, management, and technical and non-technical stakeholders.

• Experience organizing technical information and communicating it appropriately to different audiences.

• Ability to work independently and collaborate with multiple teams and vendors.

• Ability to multitask, prioritize tasks, and meet deadlines.

• Intermediate to advanced skills in Microsoft Office applications, including Word, Excel, PowerPoint, and Visio.

• Strong attention to detail and ability to maintain a broader organizational perspective.

• Experience evaluating and selecting products and vendors to support initiatives.

• Ability to adapt to changes and constructive feedback in a fast-paced environment.

• Strong understanding of cloud service provider offerings and capabilities.

Preferred Qualifications

• Experience identifying, testing, and leading remediation efforts related to OWASP Top Ten and CWE/SANS Top 25 Most Dangerous Software Errors.

• Prior experience performing penetration testing and vulnerability assessments in organizations subject to FISMA or similar requirements.

• Prior experience working with eGRC systems.

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a similar discipline.

• Cloud certification (e.g., CASP+).

• Network security certifications.