Lead OT SOC Architect

Job Summary

Leading the design and technical direction of a managed OT Security Operations Center, the full-time Lead OT SOC Architect will architect the platform, define detection strategies, and mentor SOC engineers and analysts while working remotely.

Key responsibilities:

• Architect the end-to-end OT SOC platform, including SIEM, detection pipeline, and multi-tenant service architecture
• Own the detection-engineering strategy, managing the lifecycle of detection content mapped to MITRE ATT&CK for ICS
• Serve as the top-tier technical escalation point for complex SOC issues and lead the development of SOC operational workflows

Required qualifications:

• Extensive experience designing and operationalizing a Security Operations Center (SOC) from the ground up
• 10+ years in cybersecurity with 5+ years in a lead or senior technical role directing SOC design and operations
• Expert-level hands-on SIEM architecture and detection-engineering experience, preferably with Elastic
• Demonstrated experience leading and mentoring SOC analysts and engineers
• Strong understanding of networking fundamentals and experience with the Purdue Enterprise Reference Architecture