Infosec Solutions Architect (Managed Security Services)

The successful candidate will work closely with sales, solution architects, delivery leaders, and subject matter experts to develop technical solutions, operating models, staffing strategies, transition approaches, and proposal responses that align with client security objectives and industry best practices.

Required Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related discipline.
• 10+ years of cybersecurity experience with at least 5 years designing enterprise security solutions or managed security services.
• Strong understanding of managed service operating models, governance, SLAs, and service management.
• Experience designing enterprise-scale security operations and engineering services.

Key Responsibilities:

Solution Development:

• Analyze client requirements and define comprehensive managed security service solutions, design target operating models, service delivery approaches, governance structures, and support organizations.
• Participate in customer workshops, clarification meetings, and solution reviews.
• Support effort estimation, staffing models, transition planning, and pricing inputs.

Security Operations:

• Design service models for Security Operations Centers (SOC), L1/L2/L3 support, and 24x7 operations.
• Define processes for security request management, alert triage, incident escalation, exception management, and evidence-based handoffs.
• Develop operational workflows for firewall, proxy, Active Directory, cloud security, and security request fulfillment.
• Establish operational KPIs, SLAs, reporting, and continuous improvement initiatives.

Security Platform Solutions:

• Develop operational support models for security platforms including DLP, Palo Alto, Zscaler, CrowdStrike, Tanium, Qualys, Nexus IQ, CSPM, and SSPM.
• Design platform administration, monitoring, upgrades, configuration management, policy lifecycle, and remediation processes.

Security Engineering:

• Design cloud security architecture across AWS and Azure.
• Define preventive and detective security controls, cloud guardrails, and Infrastructure-as-Code security.
• Develop secure SDLC practices incorporating SAST, DAST, Software Composition Analysis, API Security, and DevSecOps.
• Design security automation using Python and cloud-native services.
• Develop integration strategies across security scanning, remediation, ticketing, and reporting platforms.

Security Data & Detection Engineering:

• Design secure security-data platforms leveraging Splunk, Cribl, Snowflake, and observability technologies.
• Develop security data pipelines, normalization strategies, OCSF alignment, and detection engineering frameworks.
• Define detection use cases for endpoint, network, cloud, identity, and behavioral analytics.
• Develop AI-enabled security automation and analytics capabilities.