Security Architect

Role Overview

The Security Architect (Orchestration & Automation) is responsible for integrating and connecting disparate security toolsets to improve the effectiveness and efficiency of the firm’s security operations. The architect will apply SOAR principles across existing systems and look for new opportunities to expand these capabilities.

Responsibilities

• Analyze and evaluate proposed and existing solutions for alignment with firm design requirements, including ISMS Policy, client contract obligations, regulatory requirements, and professional standards.
• Provide expert counsel on information security obligations and help stakeholders reach outcomes consistent with the firm’s Risk Management Framework.
• Architect, implement, and support event management and logging solutions needed to protect firm assets.
• Integrate security systems to enable synergistic incident detection, reporting, and response.
• Identify and drive new opportunities for SOAR technologies, principles, and concepts across teams, processes, and platforms.
• Develop and maintain SOAR infrastructure including toolsets, scripts, dashboards, and metrics.
• Partner with SOC/IR and other constituents to deliver SOAR capabilities aligned to design requirements.
• Create, review, and contribute to information security policies and procedures documentation.
• Use common security tooling (e.g., SIEM, sniffers, IDS) to identify issues and assess compliance with policies/procedures.
• Produce business-level management reporting.
• Contribute to internal security information repositories (web, databases, SharePoint).
• Monitor and report on compliance with information security policies and procedures.
• Monitor internal controls to ensure correct access levels and security clearances.
• Stay current on the threat, capability, and technology landscape.
• Report compliance failures for immediate remediation.
• Support definition of IT disaster recovery and continuity plans for security event management systems.
• Act as an internal consultant/mentor for security event logging and knowledge development.
• Serve as 3rd-level support for ticket resolution and change management.
• Analyze, recommend, and implement security controls as determined by management.
• Support standard firm security applications/utilities/processes, using remote control/remote access tools as needed.

Requirements / Qualifications

• Expert understanding of security concepts, technologies, controls, and best practices.
• Working knowledge of security operations tooling (including SIEM, IDS, and event logging systems).

Nice-to-haves

• Experience working with SOAR infrastructure, including tooling/scripts/dashboards/metrics.
• Ability to provide business-level reporting and mentor technical teams (SOC/IR and others).

Location / Remote Policy

• Remote role, but must live in Illinois, Texas, Florida, New York, California, or Virginia.
• Occasional travel to provide information security services.