Cyber Security Architect/Engineer II

About the role

The Cyber Security Architect/Engineer II is a core member of a global Security Operations Center (SOC) operating at Gartner Level 4 maturity. Reporting to the Cyber Security Director, the professional will enhance detection, response, and automation capabilities across a multi‑cloud environment.

Key responsibilities

• Monitor emerging threats and continuously evaluate SOC tools, workflows, and processes.
• Maintain and improve SLAs, operational metrics, and reporting on detection effectiveness.
• Develop and update SOC documentation, policies, and procedures.
• Support incident triage, investigation, containment, and remediation while ensuring proper audit trails.
• Provide Tier 2/3 escalation support and collaborate with Network, Architecture, Data Center, HR, and Legal teams.
• Participate in the evaluation, configuration, and deployment of new security tools, including SIEM, SOAR, and XDR.
• Conduct threat hunting, forensic analysis, and basic penetration testing.
• Mentor junior analysts and contribute to automation initiatives.

Required profile

• Minimum three years of experience in cybersecurity or SOC operations.
• Strong understanding of network technologies and protocols.
• Excellent written and verbal English communication skills.
• Ability to work independently, meet deadlines, and adapt to fast‑paced priorities.

Required skills

• IDS/IPS, firewalls, and proxy technologies.
• SIEM platforms (e.g., Splunk, Microsoft Sentinel, QRadar).
• SOAR and XDR tuning and rule engineering.
• Threat hunting, forensic analysis, and basic penetration testing.
• Cloud security monitoring in Azure, AWS, and GCP.
• Relevant certifications such as GSEC, PenTest+, Security+, or CISSP.