Description: Our client is currently seeking a Sr SOC Architect
Job Purpose and Summary:
The Sr. Security Operations Center Architect is responsible for designing, implementing, and optimizing the NextGen Security Operations Center infrastructure. This role involves working closely with cross-functional teams to ensure SOC capabilities align with industry best practices and effectively mitigate security risks. The position requires a high level of proficiency and operates under limited supervision.
Key Responsibilities:
Develop and maintain a robust SOC architecture supporting threat detection, incident response, and threat hunting across a hybrid cloud environment.
Evaluate and integrate security tools and platforms (e.g., SIEM, EDR, SOAR, NDR) to enhance SOC operations.
Create and maintain incident response playbooks, SOPs, and runbooks for efficient SOC operations.
Conduct SOC capability assessments and maturity analysis to identify gaps and areas for improvement.
Establish and optimize monitoring strategies and use cases to improve threat detection and proactive monitoring.
Develop strategic relationships with internal and external stakeholders to align SOC with broader security strategies.
Provide guidance and technical mentorship to SOC analysts and security engineers within the ESO.
Ensure SOC compliance with internal and regulatory requirements (e.g., NIST SP 800-53) and contribute to audit readiness efforts.
Stay current with emerging threats and trends, recommending changes to SOC architecture and processes as needed.
Prepare detailed emerging threat reports using threat feeds and share findings with agency stakeholders.
Assist in developing metrics and dashboards for senior management reporting.
Review alerts and findings from LogRhythm and cloud-based security tools (e.g., AWS Security Hub, AWS Guard Duty, MS Defender for Endpoints, Trend Micro Vision One).
Continuously monitor existing information security solutions and security control effectiveness.
Proactively identify threats and vulnerabilities, and analyze data to detect unauthorized access to networks and systems.
Evaluate the type and severity of security events, resolve issues, or follow escalation procedures as needed. Lead forensics investigations when required.
Triage information security events, prioritize them, and escalate as necessary.
Analyze alerts and log events to identify potential security threats and initiate incident response procedures.
Gather relevant documentation and evidence related to incidents.
Collaborate with various teams to identify technical controls to meet specific security requirements.
Perform self-assessments of security controls to determine effectiveness, sufficiency, and gaps.
Contact: chamilton@judge.com
This job and many more are available through The Judge Group. Find us on the web at www.judge.com
