Cyber Security Lead Architect at Netrio

Golden Valley, Minnesota, United States -

Full Time

Start Date

Immediate

Expiry Date

22 Jul, 26

Salary

0.0

Posted On

23 Apr, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity, SOC Architecture, Incident Response, SIEM, SOAR, EDR, XDR, Vulnerability Management, Threat Detection, Network Protocols, Cloud Security, Malware Analysis, Detection Engineering, Leadership, Mentoring, Compliance

Industry

IT Services and IT Consulting

Description

About the role The Cyber Security Lead Architect – SOC & Incident Response is the senior technical authority responsible for architecting, governing, and continuously improving security detection, response, and incident handling capabilities within a Managed Security Services Provider (MSSP) environment. This role bridges security architecture and frontline SOC execution, ensuring tools, detections, workflows, and response processes are designed for scale, speed, and consistency across multiple clients. The Lead Architect serves as the highest escalation point for complex incidents and ensures SOC operations remain defensible, repeatable, and mature. What you'll do SOC Architecture & Operational Leadership · Define SOC architecture standards across SIEM, SOAR, EDR, XDR, and vulnerability platforms · Architect SOC workflows supporting 24x7 monitoring, triage, and escalation · Partner with SOC leadership to reduce alert noise and increase analyst effectiveness · Ensure SOC tooling scales across diverse client environments Incident Response Architecture & Escalation · Act as senior escalation point for high-severity incidents · Design and maintain incident response playbooks and runbooks · Provide architectural guidance during active incidents · Ensure incident handling aligns with SLAs and regulatory obligations Detection Engineering & Threat Enablement · Architect and govern SIEM and EDR detection strategies · Oversee detection lifecycle management · Ensure detection logic reflects real-world attacker behavior Leadership & Collaboration · Act as regional team lead / manager for SOC team members · Mentor SOC leads, senior analysts, and engineers · Serve as trusted advisor to leadership and clients · Collaborate with Cyber Platform Engineering, vCISO, and Compliance teams Qualifications Required: 8+ years practical experience in cybersecurity with SOC or MSSP focus, including threat detection, incident response, and vulnerability management. Proficiency with SIEM tools (Stellarcyber, LevelBlue, Splunk, QRadar, etc.) and vulnerability scanners (Tenable, Qualys etc.). Strong understanding of network protocols, operating systems (Windows/Linux), firewalls, IDS/IPS, VPN’s, cloud security platforms (AWS, Azure) and endpoint security solutions. Familiarity with security frameworks like MITRE, NIST, ISO 27001, or CIS benchmarks. Experience with incident response processes and malware analysis. Excellent analytical skills, attention to detail, and ability to work under pressure. Strong communication skills to effectively collaborate with technical and non-technical teams Having experience in a client-facing role is beneficial for offering insights into the client's security posture Preferred: Bachelor’s degree in Cybersecurity, Computer Science, or a related field. Relevant certifications are a plus, such as CISSP-ISSEP, CISSP-ISSAP, CEH (Certified Ethical Hacker), CompTIA CySA+, CompTIA CASP+ or equivalent.

Responsibilities

The Lead Architect is responsible for designing and governing SOC architecture, including SIEM, SOAR, and incident response workflows. They also serve as a senior escalation point for high-severity incidents and provide mentorship to the SOC team.