Position: Principal Security Architect (Security Operations & Engineering)
Location: Irvine, CA (Remote)
Duration: Contract
Qualifications:
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related discipline.
12+ years of cybersecurity experience with at least 5 years designing enterprise security architectures or managing security services.
Proven experience developing technical solutions for managed service engagements.
Deep understanding of SOC operations, cloud security, security engineering, and security platform management.
Experience designing enterprise operating models, governance structures, SLAs, KPIs, and service management frameworks.
Responsibilities:
Solution Architecture:
Analyze customer requirements and develop comprehensive Managed Security Services (MSS) solutions.
Design target operating models, governance frameworks, service delivery processes, and transition strategies.
Develop technical proposal content, solution diagrams, staffing models, assumptions, and implementation roadmaps.
Participate in customer workshops, technical presentations, and solution review sessions.
Security Operations:
Define processes for security request management, analyst triage, incident response, alert validation, exception management, and escalation workflows.
Develop operational models for firewall, proxy, Active Directory, cloud security, and access exception requests.
Establish service-level objectives (SLOs), SLAs, KPIs, operational dashboards, and continuous improvement initiatives.
Security Platform Engineering:
Architect support models for enterprise security platforms including DLP, Palo Alto, Zscaler, CrowdStrike, Qualys, Tanium, Nexus IQ, CSPM, and SSPM.
Design platform administration, policy lifecycle management, upgrades, configuration management, monitoring, and remediation processes.
Integrate vulnerability management with ServiceNow, JIRA, and enterprise workflow platforms.
Define platform health monitoring, rule tuning, and operational governance.
Security Engineering:
Design AWS and Azure security architectures and cloud security operating models.
Develop preventive and detective cloud guardrails and cloud-native security controls.
Define DevSecOps capabilities including CI/CD security integration, Infrastructure as Code (IaC) security, Secure SDLC, SAST, DAST, Software Composition Analysis (SCA), and API security.
Develop security automation using Python, REST APIs, and orchestration platforms.
Architect continuous compliance and vulnerability remediation frameworks.
Security Data, Analytics & Detection Engineering:
Design secure security data architectures leveraging Splunk, Cribl, Snowflake, and observability platforms.
Develop security data pipelines, normalization strategies, OCSF-aligned data models, and governance frameworks.
Lead detection engineering initiatives for endpoint, network, identity, cloud, and behavioral analytics.
Design AI-powered and agentic workflows for threat detection, response automation, and security operations optimization.
Develop executive dashboards, operational reporting, metrics, and remediation tracking.
Never miss an opportunity! Create an alert based on the job you applied for.