Cyber Security Architect/Engineer II

About the role

The Cyber Security Architect/Engineer II is a core member of a global Security Operations Center (SOC) operating at Gartner Level 4 maturity. The role focuses on enhancing threat detection, incident response, and security engineering while driving continuous improvement of SOC tools and processes.

Key responsibilities

• Monitor emerging threats and evaluate SOC tools, workflows, and processes for automation and efficiency.
• Maintain SLAs, operational metrics, and reporting on detection effectiveness.
• Develop and update SOC documentation, policies, and procedures.
• Support identification, triage, investigation, containment, and remediation of security incidents.
• Provide Tier 2/3 escalation support and collaborate with cross‑functional teams during investigations.
• Participate in evaluation, configuration, and deployment of new security tools, including SIEM, SOAR, and XDR.
• Contribute to cloud security monitoring (Azure, AWS, GCP) and perform threat hunting, forensic analysis, and basic penetration testing.
• Mentor junior SOC analysts and drive automation initiatives to reduce manual workload.

Required profile

• Minimum 3 years of experience in cybersecurity or SOC environments.
• Strong understanding of network technologies and protocols.
• Excellent English communication skills, both verbal and written.
• Ability to work independently and meet deadlines in a fast‑paced environment.

Required skills

• IDS/IPS
• SIEM platforms (e.g., Splunk, Sentinel, QRadar)
• Firewalls and proxy technologies
• Network protocols
• Threat hunting
• Forensic analysis
• Basic penetration testing
• Azure, AWS, GCP cloud environments
• SOAR and XDR tuning
• Rule engineering for detection