Security Architect

Role Overview

Security Architect, Orchestration & Automation is responsible for integrating disparate security toolsets to improve the effectiveness and efficiency of the firm’s security operations. The architect applies SOAR (Security Orchestration, Automation, and Response) principles across existing systems and seeks new opportunities to implement these capabilities across technical teams and platforms.

Key Responsibilities

• Analyze proposed and existing security solutions for alignment with firm design requirements, including ISMS Policy, client contract requirements, regulatory environment, and professional obligations.
• Architect, implement, and support event management and logging solutions required to protect firm assets.
• Integrate and connect multiple systems to enable synergistic incident detection, reporting, and response.
• Develop, maintain, and support SOAR infrastructure, including toolsets, scripts, dashboards, and metrics.
• Work closely with SOC/IR to deliver SOAR capabilities that meet design requirements.
• Provide input, create documentation, and review information security policies and procedures.
• Use common security tooling such as SIEM, IDS, and other event logging tools to identify issues and evaluate compliance with policies and procedures.
• Produce business-level reporting for management.
• Monitor and report compliance with information security policies and procedures; report failures for immediate remediation.
• Support IT disaster recovery and continuity plans for security event management systems.
• Serve as an internal security consultant/mentor on event logging and security trends; assist with knowledge development.
• Act as a 3rd-level support resource for ticket resolution and change management.
• Analyze, recommend, and implement controls as determined by management.

Requirements / Skills (from posting)

• Expert understanding of security concepts, technologies, controls, and best practices.
• Working knowledge of security concepts and technologies used for orchestration and event logging (e.g., SIEM, IDS).

Nice-to-haves (implied)

• Strong familiarity with Risk Management Framework concepts and security compliance across organizational and regulatory obligations.
• Experience mentoring/consulting within security operations teams (e.g., SOC/IR collaboration).

Travel

• Occasional travel to provide information security services.

Location / Remote Policy

• Remote role, but the candidate must live in: Illinois, Texas, Florida, New York, California, or Virginia.