SecOps Security Architect - North Central region (Remote in the U.S.)

The role

The Security Operations and Data Architect supports presales, solution architecture, engagement scoping, and technical delivery for SecOps and Data Analytics services. This person develops target architectures, professional-services solutions, and technology roadmaps.

What you will do

• Lead technical discovery and translate client objectives into architectures
• Provide presales support through solution approaches, diagrams, and proposals
• Define engagement scope, activities, assumptions, and level-of-effort estimates
• Provide architectural leadership and technical oversight across engagements
• Evaluate SIEM, SOAR, data pipeline, observability, automation, and AI technologies
• Develop reference architectures, scoping tools, and estimation models
• Mentor SecOps Engineers and SecOps Data Engineers
• Partner with account executives to qualify opportunities and identify technical risks
• Support strategic client engagements, workshops, and technical escalations

Required qualifications

• Seven to ten years of experience in security operations, security architecture, SIEM engineering, data engineering, observability, consulting, or related fields
• Demonstrated experience designing or leading SIEM, SOAR, security telemetry, data pipeline, observability, or security analytics engagements
• Experience conducting client discovery, developing solution architectures, scoping professional-services engagements, and estimating engineering effort
• Advanced understanding of SOC operating models, SIEM, SOAR, detection engineering, automation, security telemetry, data pipelines, and observability
• Experience identifying technical assumptions, dependencies, delivery risks, acceptance criteria, and scope boundaries
• Working knowledge of cloud architecture, APIs, authentication, networking, data formats, schemas, integration patterns, and access-control concepts
• Ability to review technical queries, scripts, transformations, detection logic, automation workflows, and architecture documentation
• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field, or equivalent professional and military experience
• Sedentary work
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day

Nice to have

• Security architecture certification such as CISSP, ISSAP, SABSA, or a comparable credential
• SIEM certification from Splunk, Microsoft, Google, Elastic, Palo Alto Networks, CrowdStrike, Rapid7, Sumo Logic, or Datadog
• SOAR or automation certification from Splunk SOAR, XSOAR, Fusion, SentinelOne HyperAutomation, Torq, or Tines
• Data pipeline or observability certification from Cribl, Onum, Databahn, Datadog, Dynatrace, Splunk, or Elastic
• Cloud architecture or security certification from AWS, Microsoft Azure, or Google Cloud
• Experience supporting account executives through technical presales, proposal development, and client presentations
• Experience developing service offerings, estimation models, reference architectures, or reusable consulting methodologies

Benefits

• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA
• Group Dental Insurance
• 12 corporate holidays
• Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Before you apply

• Applicants must be authorized to work for any employer in the U.S.
• Unable to sponsor or take over sponsorship of an employment visa for this role

About the company

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. It serves as a trusted advisor to more than 6,200 customers.