Lead OT SOC Architect
Posted 3 days ago
virtual vocationsNew York (NY)
Computer Systems Engineers/ArchitectsComputer Systems Design Services
SENIORITY
Manager
About the role
Leading the design and technical direction of a managed OT Security Operations Center, the full-time Lead OT SOC Architect will architect the platform, define detection strategies, and mentor SOC engineers and analysts while working remotely.
Key responsibilities:Architect the end-to-end OT SOC platform, including SIEM, detection pipeline, and multi-tenant service architecture
Own the detection-engineering strategy, managing the lifecycle of detection content mapped to MITRE ATT&CK for ICS
Serve as the top-tier technical escalation point for complex SOC issues and lead the development of SOC operational workflowsRequired qualifications:Extensive experience designing and operationalizing a Security Operations Center (SOC) from the ground up
10+ years in cybersecurity with 5+ years in a lead or senior technical role directing SOC design and operations
Expert-level hands-on SIEM architecture and detection-engineering experience, preferably with Elastic
Demonstrated experience leading and mentoring SOC analysts and engineers
Strong understanding of networking fundamentals and experience with the Purdue Enterprise Reference Architecture
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
More like this
