SOC Architect
Core
Design and implement detection strategies, automation workflows, and governance for Microsoft Sentinel, Azure, and Defender XDR to build a SOC ready for 24/7 operations.
Role type
Senior SOC Architect (Security Operations Center)
Builds
Detection logic, KQL queries, playbooks, and integrations for SIEM/SOAR platforms
Domain
Cybersecurity / Cloud Security (Microsoft Sentinel, Azure, Defender XDR)
Required skills
Microsoft Sentinel, SIEM/SOAR architecture, KQL, Python, Bash, PowerShell, Java, MITRE ATT&CK, API integrations, cloud security (Azure, AWS, SaaS), threat hunting, forensic analysis
Preferred skills
Splunk, QRadar, Elastic, SOAR platforms
Responsibilities
Develop advanced threat detection scenarios; Deploy and manage security technologies (SIEM, SOAR, SaST/DaST); Automate incident response using scripting; Conduct threat research and hunting; Manage SOC technologies and processes; Develop security automation workflows; Design use cases and playbooks; Assess and enhance security processes
Seniority
Senior, hands-on IC
