Security Operations Center Architect

Role Summary

The SOC Architect is responsible for designing, evolving, and governing the

Security Operations Center (SOC) architecture, ensuring effective threat

detection, investigation, and response across on-prem, cloud, and hybrid

environments.

Key Responsibilities

SOC Architecture & Design

Design and maintain end-to-end SOC architecture, including:

• SIEM
• SOAR
• EDR/XDR
• NDR
• ITDR
• Zero Trust
• SASE
• IAM
• Cloud Security tools

Define log onboarding strategy, data normalization, and correlation models

Architect use-case driven detection frameworks aligned with MITRE ATT&CK

Design multi-tenant SOC architecture (for MSSP environments)

Detection & Response Strategy

• Lead use case development, tuning, and lifecycle management
• Define alert severity, triage mo...