Security Operations Center Architect

We are seeking a experienced SOC Architect with a strong background in Azure Sentinel, automation, and cloud security. The ideal candidate will have experience in managing security operations, designing and implementing technical solutions, and mentoring teams in a fast-paced SOC environment.

Key Responsibilities:

• Azure Sentinel Expertise: Architect, deploy, and manage Azure Sentinel solutions.

• Perform advanced incident response and analysis using Sentinel.

• Integration: Design and implement integrations for security tools and cloud platforms.

• Automation: Develop and implement automation solutions for incident response and security operations.

• KQL Mastery: Utilize KQL (Kusto Query Language) for log analysis and custom rule creation.

• Incident Response: Manage and respond to security incidents effectively, ensuring minimal impact on business operations.

• Cloud Security Architecture: Understanding of secure cloud network architectures, including firewalls, load balancers, VPNs, IPS, DLP, and WAF.

• Collaboration: Work closely with Security and Infrastructure teams to develop consistent technical solutions and support processes.

• Documentation: Write and manage technical documentation, including High-Level Design (HLD) and Low-Level Design (LLD) documents.

• Team Mentorship: Mentor SOC team members and provide guidance on deploying cloud networking and security solutions.

• Process Development: Develop and document threat-driven response playbooks to support security incidents.

Required Qualifications:

• 2 years of experience in information security.

• Hands-on expertise in KQL, MDC, and MDE.

• Proven experience in incident response, analysis, and security operations.

• In-depth knowledge of cloud-native tools and services.

• Strong understanding of IT Infra, networking and security engineering, including

Ability to write and manage technical documentation, policies, and procedures.

Demonstrated experience in managing security operations within a global organization.

Preferred Qualifications:

• Proficiency in scripting languages such as PowerShell, Python, or Bash.

• Security-related certifications such as GCIH, GCFA, AWS/Azure Cloud Security certifications, or equivalents.

• Excellent communication skills, with the ability to work effectively in high-performing teams within a SOC environment.

• Experience designing and implementing threat-driven response playbooks.