AI-Driven SOC Architect for SIEM, SOAR & CTEM

Skillfield; Melbourne; Hybrid; AUD 140,000 - 210,000; Full time

Job summary

Skillfield in Melbourne is seeking a Solutions Architect to design the next generation of security operations for clients. You will own solution design for Agentic SOC and continuous threat exposure management (CTEM), architecting SIEM, SOAR and AI integration.

You’ll work with clients from first conversation to delivery, collaborating with engineers to turn designs into working solutions, and you’ll shape proposals and proofs of concept.

Qualifications

• Substantial experience as a solutions or security architect with a strong grounding in security operations.
• Hands-on experience designing and implementing SIEM and SOAR platforms, including detection engineering and automation playbooks.
• Experience with vulnerability and exposure management tools such as Tenable, Qualys, Rapid7, Wiz or XM Cyber.
• Experience with Microsoft Azure infrastructure, including Microsoft Sentinel, Microsoft Defender XDR and Azure Logic Apps.
• Practical experience building or integrating large language model (LLM) or agent-based automation on Azure AI Foundry, including Azure OpenAI, with a clear view of its risks in an operational setting.
• Familiarity with frameworks such as MITRE ATT&CK and the Gartner CTEM model.
• Scripting or programming skills (Python, KQL, SPL or similar) and experience with infrastructure as code.
• Strong client-facing skills: workshops, design writing and executive-level explanations.
• Consulting or managed security services experience is highly regarded.
• Full Australian working rights.

Responsibilities

• Design agentic SOC architectures where AI agents handle triage, enrichment, investigation and response under clear human oversight.
• Architect SIEM, SOAR and XDR platforms such as Microsoft Sentinel, Splunk, Google Security Operations or Cortex XSOAR, and integrate AI agents into them.
• Design CTEM programs that prioritise what the SOC acts on across vulnerability and exposure management, attack surface management, cloud security posture and simulations.
• Define guardrails for autonomous response and ensure actions are logged and auditable.
• Lead discovery and solution workshops with client SOC leaders, security architects and executives, translating operational pain into practical designs.
• Shape proposals, estimates and statements of work with our sales team, and present solutions with confidence.
• Build proofs of concept hands-on, including detection content, automation playbooks and agent workflows to validate designs.
• Act as design authority during delivery, guiding engineers and making trade-off calls.
• Define metrics to prove value (MTTD/MTD, analyst workload, exposure reduction).
• Track SOC, CTEM and AI vendor landscape and provide well-founded recommendations.

Skills

Solutions architecture

Security operations

SIEM

SOAR

XDR

Azure

Azure AI Foundry

Azure OpenAI

MITRE ATT&CK

Python

KQL

Cloud security

Tools

Microsoft Sentinel

Splunk

Cortex XSOAR

Azure AI Foundry

Azure OpenAI

Ten able

Job description

Skillfield in Melbourne is seeking a Solutions Architect to design the next generation of security operations for clients. You will own solution design for Agentic SOC and continuous threat exposure management (CTEM), architecting SIEM, SOAR and AI integration.

You’ll work with clients from first conversation to delivery, collaborating with engineers to turn designs into working solutions, and you’ll shape proposals and proofs of concept.