SOC Architect

SOC Architect at IBS, remote. Salary discussed at interview. Focus on secure SIEM architecture, threat modeling, security requirements, incident response, and certification.

Responsibilities: • Analyze standards and regulatory requirements in information security. • Analyze and design secure architecture for a SIEM solution. • Conduct threat modeling with mitigation recommendations. • Define information security requirements for the development team and monitor compliance. • Consult the development team on information security matters. • Collaborate with the information security team on secure software development. • Track SIEM/SOC trends and current threats to improve solution security. • Participate in vulnerability and information security incident handling affecting the solution. • Interact with information security units, auditors, and the customer regarding solution security. • Participate in solution certification.

• 3+ years working with SIEM, SOC, or information security monitoring projects as an architect, pre-sales engineer, implementation engineer, or SOC specialist. • Experience designing, implementing, or operating SIEM in production. • Understanding of monitoring, alert processing, investigation, and incident response processes. • Familiarity with at least one common SIEM platform (KUMA, MaxPatrol SIEM, ArcSight, Splunk, Microsoft Sentinel, IBM QRadar, Elastic Security, Wazuh, or similar) and anti-fraud systems. • Understanding of security event collection, transmission, processing, and storage architecture; ability to work with logs (Syslog, JSON, CEF, LEEF). • Ability to write search and analytical queries in KQL, SPL, PDQL, or similar languages. • Ability to design technical solutions and document them as clear architectural diagrams and documents. • Ability to explain complex technical topics to engineers and managers. • Ability to independently manage tasks and coordinate work with the customer, sales, SOC, and development. • English at a level sufficient to read technical documentation.

Remote work possible. Salary discussed at interview.