Solution Architect - Security Investigations, SIEM

About the role

Service Owner – Security Operations, Incident Response & Cyber Defense Role Purpose The Service Owner – Security Operations, Incident Response & Cyber Defense is accountable for the strategy, governance, operational effectiveness, and continuous improvement of enterprise cyber defense capabilities.

What you'll do

• Define and maintain the cyber defense and security operations strategy, roadmap, and future-state capability model
• Own the lifecycle management and continuous improvement of security operations capabilities
• Govern enterprise SOC services, including: o Security alert monitoring and triage o Threat detection and analysis o Incident investigation and response o Security event…
• Establish and improve incident response processes, playbooks, operating procedures, and lessons-learned practices
• Oversee digital forensic capabilities, including investigation support, evidence handling, and post-incident analysis

What you need

• 10–18 yrs of experience
• SIEM
• Incident response
• Vulnerability assessment
• Compliance
• Any graduate