Presales Solutions Architect

Role Overview

Presales Solutions Architect (Managed Security, MDR/MxDR) serves as the technical bridge between the sales team, the Security Operations Center (SOC), and prospective customers. You will explain the value of the company’s managed detection and response offerings, run technical demonstrations, and help shape solution architectures based on customer environments.

Responsibilities

• Partner with Account Executives and Sales Directors to qualify opportunities and shape winning technical solution designs.
• Deliver tailored product demos of the managed security platform, translating technical capabilities into business outcomes.
• Lead technical discovery to understand the prospect’s security stack, data sources, and operational maturity; map findings to a recommended architecture.
• Explain how telemetry from endpoints, network, cloud, identity, and SaaS is ingested, normalized, correlated, and used to surface high-priority incidents.
• Describe how automation and orchestration reduce manual work for customer teams.
• Discuss alert enrichment, risk-based prioritization, and mapping to industry frameworks such as MITRE ATT&CK.
• Compare traditional SIEM/log management vs. analytics-driven security operations, including anomaly detection and UEBA.
• Respond to RFPs/RFIs and security questionnaires with accurate technical content.
• Build and maintain demo environments, sample dashboards, and proof-of-concept configurations.
• Stay current on competitive landscape, threat trends, and compliance requirements by vertical (e.g., K-12 education, healthcare, financial services, public sector).
• Coordinate with SOC, engineering, and product teams to relay customer feedback and support smooth pre-sales-to-onboarding handoffs.
• Represent the company at conferences, panels, and customer events as a subject matter expert.

Requirements

• 3–5 years experience in pre-sales architecture / sales engineering / solutions architect / SOC or security analyst roles supporting managed security services or MDR/MxDR.
• Strong knowledge of SOC functions: alert triage, incident investigation, and escalation workflows.
• Hands-on familiarity with SIEM and SOAR; direct experience with Google Chronicle / Google Security Operations (SecOps) is strongly preferred.
• Solid understanding of endpoint security and EDR/XDR, and how they integrate into detection & response strategies.
• Working knowledge of cloud security, identity security, and network security concepts and how telemetry feeds unified security operations.
• Familiarity with risk-based alert prioritization, anomaly/behavioral detection concepts, and MITRE ATT&CK.

Preferred / Nice-to-haves

• Direct experience with Google Chronicle / Google SecOps (strongly preferred).
• Ability to communicate fluently with CISO/exec stakeholders and run both whiteboard architecture sessions and live demos.