Security Operations Centre Architect

HCLTech; Singapore; Vor Ort; SGD 140.000 - 220.000; Vollzeit

Zusammenfassung

HCL Technologies Limited seeks an experienced SOC Architect to design and enhance enterprise security monitoring and incident-response architecture across cloud, network, identity, database, application and endpoint environments.

You will lead the design of scalable SOC and security monitoring architectures, with hands-on work on SIEM and SOAR solutions such as Microsoft Sentinel, and develop detection rules, playbooks and technical standards.

Qualifikationen

• Minimum 8 years in cybersecurity, security monitoring, security engineering or SOC technologies.
• Minimum 3 years in a SOC/security architecture or senior technical role.
• Relevant certification such as CISSP, Microsoft Certified: Cybersecurity Architect Expert, or equivalent.
• Strong hands-on knowledge of SIEM, SOAR and enterprise security monitoring architecture.
• Experience with security analytics, detection rules, correlation and automated response.
• Good understanding of threat hunting, UEBA, incident investigation and security automation.
• Strong technical, analytical, communication and stakeholder-management skills.

Aufgaben

• Design enterprise SOC and security monitoring architecture.
• Architect and enhance SIEM and SOAR solutions, preferably including Microsoft Sentinel.
• Design monitoring solutions covering log ingestion, correlation, detection, analytics, alerting and incident-response integration.
• Develop and improve security monitoring use cases, detection logic and correlation rules.
• Design and improve automated incident-response playbooks.
• Define security monitoring and incident-response technical standards and guidelines.
• Integrate security telemetry across cloud, network, identity, database, application and endpoint security controls.
• Support threat detection, threat hunting, UEBA and incident-investigation capabilities.
• Review SOC architecture for scalability, resilience, performance and effectiveness.
• Recommend improvements as security threats and technology environments evolve.

Kenntnisse

SOC architecture

Security monitoring

Threat hunting

UEBA

Incident investigation

Security automation

Stakeholder management

Cloud security

Log analytics

Ausbildung

CISSP or equivalent

Microsoft Certified: Cybersecurity Architect Expert

Tools

Microsoft Sentinel

SIEM

SOAR

Jobbeschreibung

We are looking for an experienced SOC Architect to design and enhance enterprise security monitoring and incident-response architecture.

This position focuses on building scalable and effective security monitoring capabilities across cloud, network, identity, database, application and endpoint environments.

Key Responsibilities

• Design enterprise SOC and security monitoring architecture.
• Architect and enhance SIEM and SOAR solutions, preferably including Microsoft Sentinel.
• Design monitoring solutions covering log ingestion, correlation, detection, analytics, alerting and incident-response integration.
• Develop and improve security monitoring use cases, detection logic and correlation rules.
• Design and improve automated incident-response playbooks.
• Define security monitoring and incident-response technical standards and guidelines.
• Integrate security telemetry across cloud, network, identity, database, application and endpoint security controls.
• Support threat detection, threat hunting, UEBA and incident-investigation capabilities.
• Review SOC architecture for scalability, resilience, performance and effectiveness.
• Recommend improvements as security threats and technology environments evolve.

Requirements

• Minimum 8 years of experience in cybersecurity, security monitoring, security engineering or SOC technologies.
• Minimum 3 years in a SOC/security architecture or senior technical role.
• Relevant certification such as CISSP, Microsoft Certified: Cybersecurity Architect Expert, or equivalent.
• Strong hands-on knowledge of SIEM, SOAR and enterprise security monitoring architecture.
• Experience with security analytics, detection rules, correlation and automated response.
• Good understanding of threat hunting, UEBA, incident investigation and security automation.
• Strong technical, analytical, communication and stakeholder-management skills.