Principal Security Architect (Security Operations & Engineering)

THOUGHT BYTE; Región Centro; On-site; MXN 1,200,000 - 2,000,000; Full time

Job summary

THOUGHT BYTE seeks a Principal Security Architect to lead enterprise Security Operations and Security Engineering managed services for strategic clients. You will translate customer requirements into scalable MSS, platforms, and cloud security offerings, driving automation and governance across SOC, engineering, and data analytics.

Responsibilities include shaping operating models, developing proposals, and guiding delivery through workshops and reviews.

Qualifications

• 12+ years cybersecurity experience with at least 5 years designing enterprise security architectures or managing security services.
• Proven experience developing technical solutions for managed service engagements.
• Deep understanding of SOC operations, cloud security, security engineering, and security platform management.

Responsibilities

• Analyze customer requirements and develop comprehensive Managed Security Services (MSS) solutions.
• Design target operating models, governance frameworks, service delivery processes, and transition strategies.
• Develop technical proposal content, solution diagrams, staffing models, assumptions, and implementation roadmaps.
• Participate in customer workshops, technical presentations, and solution review sessions.
• Security Operations: Define processes for security request management, analyst triage, incident response, alert validation, exception management, and escalation workflows.
• Develop operational models for firewall, proxy, Active Directory, cloud security, and access exception requests.
• Establish service-level objectives (SLOs), SLAs, KPIs, operational dashboards, and continuous improvement initiatives.
• Security Platform Engineering: Architect support models for enterprise security platforms including DLP, Palo Alto, Zscaler, CrowdStrike, Qualys, Tanium, Nexus IQ, CSPM, and SSPM.
• Design platform administration, policy lifecycle management, upgrades, configuration management, monitoring, and remediation processes.
• Integrate vulnerability management with ServiceNow, JIRA, and enterprise workflow platforms.
• Define platform health monitoring, rule tuning, and operational governance.
• Security Engineering: Design AWS and Azure security architectures and cloud security operating models.
• Develop preventive and detective cloud guardrails and cloud-native security controls.
• Define DevSecOps capabilities including CI/CD security integration, Infrastructure as Code (IaC) security, Secure SDLC, SAST, DAST, Software Composition Analysis (SCA), and API security.
• Develop security automation using Python, REST APIs, and orchestration platforms.
• Architect continuous compliance and vulnerability remediation frameworks.
• Security Data, Analytics & Detection Engineering: Design secure security data architectures leveraging Splunk, Cribl, Snowflake, and observability platforms.
• Develop security data pipelines, normalization strategies, OCSF-aligned data models, and governance frameworks.
• Lead detection engineering initiatives for endpoint, network, identity, cloud, and behavioral analytics.
• Design AI-powered and agentic workflows for threat detection, response automation, and security operations optimization.
• Develop executive dashboards, operational reporting, metrics, and remediation tracking.

Skills

SOC operations

Cloud security

Security engineering

Security platforms

DevSecOps

Managed security services

Python automation

Education

Bachelor's degree in computer science, Cybersecurity, Information Technology, or related discipline

Tools

Splunk

ServiceNow

JIRA

Palo Alto

Zscaler

CrowdStrike

Qualys

Tanium

Job description

Role: Principal Security Architect (Security Operations & Engineering)

Duration: Long-Term Contract

• Client is seeking a Principal Security Architect to lead the design of enterprise Security Operations and Security Engineering managed service solutions for strategic clients. This role will be responsible for translating customer requirements into scalable, outcome-based managed services spanning Security Operations, Security Platform Support, Security Engineering, Cloud Security, and Security Data & Detection Engineering.
• The Principal Security Architect will collaborate with Sales, Solution Architects, Delivery Leaders, Product Engineering, and Subject Matter Experts to develop technical solutions, operating models, transition strategies, automation roadmaps, staffing models, and proposal responses. The successful candidate will possess deep technical expertise across cloud security, security platforms, SIEM, detection engineering, DevSecOps, and managed security services.

Qualifications:

• Bachelor's degree in computer science, Cybersecurity, Information Technology, or a related discipline.
• 12+ years of cybersecurity experience with at least 5 years designing enterprise security architectures or managing security services.
• Proven experience developing technical solutions for managed service engagements.
• Deep understanding of SOC operations, cloud security, security engineering, and security platform management.
• Experience designing enterprise operating models, governance structures, SLAs, KPIs, and service management frameworks.

Responsibilities:

• Analyze customer requirements and develop comprehensive Managed Security Services (MSS) solutions.
• Design target operating models, governance frameworks, service delivery processes, and transition strategies.
• Develop technical proposal content, solution diagrams, staffing models, assumptions, and implementation roadmaps.
• Participate in customer workshops, technical presentations, and solution review sessions.
• Security Operations:
• Define processes for security request management, analyst triage, incident response, alert validation, exception management, and escalation workflows.
• Develop operational models for firewall, proxy, Active Directory, cloud security, and access exception requests.
• Establish service-level objectives (SLOs), SLAs, KPIs, operational dashboards, and continuous improvement initiatives.

Security Platform Engineering:

• Architect support models for enterprise security platforms including DLP, Palo Alto, Zscaler, CrowdStrike, Qualys, Tanium, Nexus IQ, CSPM, and SSPM.
• Design platform administration, policy lifecycle management, upgrades, configuration management, monitoring, and remediation processes.
• Integrate vulnerability management with ServiceNow, JIRA, and enterprise workflow platforms.
• Define platform health monitoring, rule tuning, and operational governance.

Security Engineering:

• Design AWS and Azure security architectures and cloud security operating models.
• Develop preventive and detective cloud guardrails and cloud-native security controls.
• Define DevSecOps capabilities including CI/CD security integration, Infrastructure as Code (IaC) security, Secure SDLC, SAST, DAST, Software Composition Analysis (SCA), and API security.
• Develop security automation using Python, REST APIs, and orchestration platforms.
• Architect continuous compliance and vulnerability remediation frameworks.

Security Data, Analytics & Detection Engineering:

• Design secure security data architectures leveraging Splunk, Cribl, Snowflake, and observability platforms.
• Develop security data pipelines, normalization strategies, OCSF-aligned data models, and governance frameworks.
• Lead detection engineering initiatives for endpoint, network, identity, cloud, and behavioral analytics.
• Design AI-powered and agentic workflows for threat detection, response automation, and security operations optimization.
• Develop executive dashboards, operational reporting, metrics, and remediation tracking.