Senior Cyber Security Architect/Engineer

About the role

The Senior Cyber Security Engineer is a technical leader within the Security Operations function, driving advanced analytics, investigations, and tool engineering to mature the SOC. Reporting to the Cyber Security Director, the role focuses on proactive threat identification, detection capability enhancement, and automation to achieve Gartner L4 maturity.

Key responsibilities

• Assess emerging threats and continuously improve SOC tools, architectures, and workflows.
• Define and implement standardized, scalable SOC processes, SLAs, KPIs, and reporting.
• Lead investigation, remediation, and evidence handling for advanced security incidents.
• Develop and enforce cybersecurity policies, DLP standards, and risk controls.
• Provide Tier‑3 escalation support and collaborate with architecture, network, legal, and third‑party teams.
• Mentor SOC engineers and analysts, and lead modernization projects.
• Design and optimize SIEM, SOAR, and XDR detection content and automation.
• Conduct deep‑dive threat hunting, hypothesis‑driven investigations, and cloud‑native monitoring.

Required profile

• Minimum 5 years of experience in cybersecurity or SOC environments.
• Strong documentation and communication abilities in English.
• Relevant certifications such as GSEC, Security+, CISSP (preferred or in progress).
• Ability to prioritize work in a fast‑paced, dynamic setting.

Required skills

• Network protocols and IDS/IPS technologies.
• SIEM, SOAR, and XDR platforms.
• Firewalls, proxies, and Data Loss Prevention (DLP) solutions.
• Incident response frameworks and advanced threat actor analysis.
• Automation/orchestration design for SOC efficiency.
• Cloud‑native security monitoring and detection engineering.
• Detection rule development, alert tuning, and log ingestion pipelines.