全职 Security Operations Centre Architect 工作, 薪水, HCLTech 公司招聘中 - Ricebowl

About the Role

We are looking for an experienced SOC Architect to design and enhance enterprise security monitoring and incident-response architecture.

This position focuses on building scalable and effective security monitoring capabilities across cloud, network, identity, database, application and endpoint environments.

Key Responsibilities

• Design enterprise SOC and security monitoring architecture.
• Architect and enhance SIEM and SOAR solutions, preferably including Microsoft Sentinel.
• Design monitoring solutions covering log ingestion, correlation, detection, analytics, alerting and incident-response integration.
• Develop and improve security monitoring use cases, detection logic and correlation rules.
• Design and improve automated incident-response playbooks.
• Define security monitoring and incident-response technical standards and guidelines.
• Integrate security telemetry across cloud, network, identity, database, application and endpoint security controls.
• Support threat detection, threat hunting, UEBA and incident-investigation capabilities.
• Review SOC architecture for scalability, resilience, performance and effectiveness.
• Recommend improvements as security threats and technology environments evolve.

Requirements

• Minimum 8 years of experience in cybersecurity, security monitoring, security engineering or SOC technologies.
• Minimum 3 years in a SOC/security architecture or senior technical role.
• Relevant certification such as CISSP, Microsoft Certified: Cybersecurity Architect Expert, or equivalent.
• Strong hands-on knowledge of SIEM, SOAR and enterprise security monitoring architecture.
• Experience with security analytics, detection rules, correlation and automated response.
• Good understanding of threat hunting, UEBA, incident investigation and security automation.
• Strong technical, analytical, communication and stakeholder-management skills.