Lead OT SOC Architect

Posted 3 days ago

virtual vocationsNew York (NY)
Computer Systems Engineers/ArchitectsComputer Systems Design Services

SENIORITY

Manager

Apply

About the role

Leading the design and technical direction of a managed OT Security Operations Center, the full-time Lead OT SOC Architect will architect the platform, define detection strategies, and mentor SOC engineers and analysts while working remotely. Key responsibilities:Architect the end-to-end OT SOC platform, including SIEM, detection pipeline, and multi-tenant service architecture Own the detection-engineering strategy, managing the lifecycle of detection content mapped to MITRE ATT&CK for ICS Serve as the top-tier technical escalation point for complex SOC issues and lead the development of SOC operational workflowsRequired qualifications:Extensive experience designing and operationalizing a Security Operations Center (SOC) from the ground up 10+ years in cybersecurity with 5+ years in a lead or senior technical role directing SOC design and operations Expert-level hands-on SIEM architecture and detection-engineering experience, preferably with Elastic Demonstrated experience leading and mentoring SOC analysts and engineers Strong understanding of networking fundamentals and experience with the Purdue Enterprise Reference Architecture

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this