Security Architect – Lead SOC Operations

About the role

We are seeking a seasoned Security Architect to lead our 24x7 Security Operations Center (SOC). The role combines strategic oversight with hands‑on technical expertise to protect our enterprise infrastructure, applications, and cloud environments.

Key responsibilities

• Lead and manage 24x7 SOC operations, including monitoring, detection, triage, investigation, containment, and response.
• Develop and maintain SOC procedures, workbooks, playbooks, runbooks, escalation matrices, and incident‑handling standards.
• Ensure continuous monitoring of security events across endpoints, applications, and cloud services.
• Establish and track SOC KPIs, SLAs, MTTR, MTTD, and overall operational effectiveness.
• Conduct SOC maturity assessments and drive continuous‑improvement initiatives such as use‑case tuning and threat hunting.
• Manage SOC staffing, shift planning, analyst development, and coverage.
• Oversee detection and response for malware, ransomware, phishing, insider threats, data exfiltration, and cloud security incidents.
• Coordinate incident response during major security events and cyber crises.

Required profile

• 8+ years of cybersecurity experience with 3‑5 years in SOC leadership or management.
• Proven experience managing enterprise SOC operations and cloud security.
• Strong knowledge of the Microsoft security ecosystem.
• Relevant security certifications.
• Excellent leadership, analytical, and stakeholder communication skills.
• Ability to perform under pressure and collaborate across functions.

Required skills

• Microsoft Sentinel
• Kusto Query Language (KQL)
• Microsoft Defender XDR
• SIEM tools
• SOAR platforms
• Threat Intelligence platforms
• Operating system, application, database, and middleware security knowledge
• Digital forensics
• Cloud security management
• Identity and Access Management principles