Cyber Security Architect

About the role

We are looking for an experienced Cyber Security Architect to lead our security operations, incident response, and threat‑hunting initiatives. You will design, implement, and continuously improve security controls across Windows, Linux, cloud, and network environments.

Key responsibilities

• Monitor security events using SIEM, EDR and XDR tools, investigate incidents end‑to‑end, and lead containment and remediation efforts.
• Perform proactive threat hunting using logs, endpoint telemetry and network data; develop and tune detection rules aligned with MITRE ATT&CK.
• Conduct vulnerability scans, assess risk severity, track remediation with owners, and validate fixes within defined SLAs.
• Implement and maintain security baselines for Windows, Linux, Active Directory, O365 and cloud platforms; harden endpoints, servers, network devices and workloads.
• Operate, tune and integrate security tools such as Microsoft Sentinel, Splunk, Microsoft Defender, CrowdStrike, firewalls, IDS/IPS and WAF.
• Support audits and compliance activities aligned to ISO 27001, NIST CSF, PCI‑DSS and regional regulations; prepare evidence reports and dashboards.
• Maintain incident reports, runbooks, dashboards and operational metrics (MTTD, MTTR); provide executive‑level summaries of security posture.

Required profile

• 7‑10 years of experience in cyber security operations, incident response or related roles.
• Hands‑on experience with SIEM, EDR, firewalls and vulnerability management tools.
• Strong knowledge of Windows, Linux, networking and cloud security concepts.
• Familiarity with MITRE ATT&CK, NIST, ISO 27001 frameworks.
• Preferred certifications: CISSP, CISM, GCIH, GCED, Microsoft SC‑200, AZ‑500, CompTIA CySA+.

Required skills

• SIEM (Microsoft Sentinel, Splunk)
• EDR/XDR (Microsoft Defender, CrowdStrike)
• Firewalls, IDS/IPS, WAF
• PowerShell, Python, KQL for automation and detection engineering
• MITRE ATT&CK, NIST, ISO 27001
• Windows, Linux, Active Directory, O365, cloud platforms
• Vulnerability scanning and remediation tools