Security Researcher / SOC Architect

fortmind.ai; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Remote work

Job summary

fortmind.ai is seeking a seasoned SOC professional to help shape investigation workflows and AI-assisted security tools. You will translate hands-on SOC expertise into scalable workflows, test scenarios, and guidance for engineers building AI-powered defenses.

You will document methods, assess autonomous agent investigations, and create realistic attack scenarios while advising on integrating security tools into daily operations. Remote role with flexible arrangement.

Qualifications

• At least five years of experience in SOC operations or security analysis.
• Strong understanding of attack techniques and security investigations.
• Practical experience with SIEM, EDR, and related security tools.
• Clear communication skills and an interest in AI supporting analysts.

Responsibilities

• Document SOC investigation methods and operational workflows.
• Assess the quality of investigations performed by autonomous agents.
• Create realistic attack scenarios to test investigation capabilities.
• Advise on integrating security tools into investigation workflows.
• Explain security practices clearly to engineers without a security background.

Skills

SOC operations experience

Security investigations

SIEM & EDR

Communication skills

AI for security

Tools

SIEM

EDR

Job description

Role overview

Help shape how automated security systems investigate threats by capturing the methods experienced SOC analysts use. You will translate hands-on security expertise into investigation workflows, test scenarios, and guidance for engineers building AI-assisted tools.

Responsibilities

• Document SOC investigation methods and operational workflows.
• Assess the quality of investigations performed by autonomous agents.
• Create realistic attack scenarios to test investigation capabilities.
• Advise on integrating security tools into investigation workflows.
• Explain security practices clearly to engineers without a security background.

Requirements

• At least five years of experience in SOC operations or security analysis.
• Strong understanding of attack techniques and security investigations.
• Practical experience with SIEM, EDR, and related security tools.
• Clear communication skills and an interest in AI supporting analysts.

Nice to have

• SANS or GIAC certifications, such as GCIH or GCFA.
• Experience creating SOC playbooks and procedures.
• Scripting or automation skills, including Python or PowerShell.
• Red team or penetration testing experience.

Benefits and work setup

• Remote position; Singapore time zone is preferred.
• Full-time or contract arrangement.