AI Threat Monitoring Architect - Remote & SIEM-Driven Security

KellyMitchell Group; Dallas (TX); Remote; USD 154,000 - 220,000; Full time

Benefits offered by this job

Medical, Dental, & Vision Insurance

Employee-Owned Profit Sharing (ESOP)

401K offered

Job summary

KellyMitchell is seeking an AI Cybersecurity Threat Monitoring Architect for a remote, US-based engagement under a 12-month contract. You will develop AI threat modeling, map threats to controls, build SIEM/SOAR detections, and collaborate with Threat Intelligence, Incident Response, Operations and Purple Team groups.

This role emphasizes telemetry, logging strategy, and practical AI security within a high-availability enterprise environment. Experience with AWS security and agentic AI is valued.

Qualifications

• Hands-on experience in detection engineering and threat hunting.
• Experience building SIEM and SOAR use cases, with detection rules.
• Experience defining telemetry across cloud, API, data, and AI workloads (AWS or hybrid).
• Experience threat modeling and mapping threats to preventive, detective and responsive controls.
• Strong enterprise consulting skills with clear leadership presentations.

Responsibilities

• Develop AI threat-modeling capabilities using OWASP, MITRE and MITRE ATLAS.
• Translate AI threats into actionable security guidance for teams.
• Create AI attack scenarios and map them to controls.
• Define telemetry and logging for AI applications, data, identities, tools, APIs.
• Build and tune SIEM/SOAR detections and playbooks.
• Develop AI-focused threat-hunting playbooks and initial hunts.
• Collaborate with Threat Intelligence, IR, Operations and Purple Team groups to test coverage.
• Assess visibility, gaps and establish coverage metrics.
• Create durable processes, ownership and roadmaps integrating AI threat response.

Skills

Threat Hunting

Incident Response

Detection Engineering

SIEM / SOAR

Security Architecture

Adversary Emulation

Telemetry & Logging

Cross-functional Leadership

AWS Security

Education

Bachelor’s degree in cybersecurity / CS

Tools

SIEM

SOAR

AWS Cloud

Job description

KellyMitchell is seeking an AI Cybersecurity Threat Monitoring Architect for a remote, US-based engagement under a 12-month contract. You will develop AI threat modeling, map threats to controls, build SIEM/SOAR detections, and collaborate with Threat Intelligence, Incident Response, Operations and Purple Team groups.

This role emphasizes telemetry, logging strategy, and practical AI security within a high-availability enterprise environment. Experience with AWS security and agentic AI is valued.