Security Solutions Architect: SIEM, EDR & Automation Lead

CACI International Inc; Maryland; Hybrid; USD 121,000 - 266,000; Full time

Job summary

CACI International Inc. seeks a Security Solutions Architect to lead security tool design, integration, and automation across SIEM, EDR, PAM, and vulnerability management.

You will advise leadership, ensure secure-by-design practices, and align efforts with federal guidance and enterprise architecture. The role focuses on architecture, modernization, and collaboration with senior engineers and government stakeholders to strengthen the program's security posture in a hybrid National Harbor, MD

Qualifications

• Ability to attain DHS EOD
• ITIL V4 Foundations certification (or obtained in first 6 months)
• Bachelor's degree plus 15 years of relevant experience, or Master's degree plus 12 years of relevant experience (equivalent experience considered in lieu of degree)
• 8 or more years of hands-on experience in enterprise IT support to include SIEM, EDR, Vulnerability Management, PAM, network detection, etc.
• Experience with vulnerability management platform; experience with Qualys specially preferred.
• Demonstrated experience evaluating, architecting, and integrating security tools within a complex technical environment
• Experience evaluating and onboarding new security tools into an existing environment
• Experience presenting technical material in client- and government-facing settings
• Sound technical judgment and the ability to communicate complex technical material clearly to varied audiences
• Experience managing technicians with varying skill levels and supporting end users remotely
• Experience with security tools and technologies, like SIEM, IDS/IPS, and firewalls)
• Professional, customer-oriented, and even-keeled under pressure
• Effective communicator at all levels, both written and verbal

Responsibilities

• Lead and facilitate solutioning technical cybersecurity challenges across the portfolio of security tools
• Maintain and evolve the Security Engineering roadmap, ensuring alignment with organizational priorities, risk management objectives, and operational needs
• Advise tool teams on configuration approaches and integration strategy across the security stack, including SIEM, EDR, PAM, network detection, and vulnerability management platforms
• Evaluate new and replacement tools for onboarding, including vulnerability management platforms such as Qualys, and assess technical fit against program requirements and the existing environment
• Represent the program in meetings with senior government officials, presenting and defending technical approaches
• Provide technical analysis and recommendations to program leadership on tool-portfolio direction and investment decisions
• Automate security tool health checks, status reporting, and availability monitoring as well as the enrichment of alerts with asset, identity, vulnerability, threat intelligence, and log data to create automated alert triage workflows
• Lead modernization efforts by consolidating overlapping security tools, reducing duplicative capabilities, migrate legacy tools and applications, standardize tool configurations, and improve data ingestion pipelines.
• Direct innovation objectives by introducing SOAR capabilities to orchestrate repeatable security operation workflows, use machine learning or analytics to identify tool performance trends and alert patterns, develop integrated dashboards, create predictive reporting, build API-based integrations, create reusable automation libraries, and establish a security tools innovation backlog
• Support proof-of-concept activities, pilots, and evaluations of new security technologies.
• Ensure security engineering solutions align with applicable policies, standards, compliance requirements, and enterprise architecture principles.
• Provide technical input for budget planning, acquisition activities, vendor evaluations, and technology refresh planning.

Skills

Security tool integration

SIEM

EDR

Vulnerability management

PAM

Network detection

Automation scripting

Cloud security

Stakeholder communication

Cybersecurity operations

Education

Bachelor's degree + 15 years exp

Master's degree + 12 years exp

Tools

Qualys

SOAR platforms

Job description

CACI International Inc. seeks a Security Solutions Architect to lead security tool design, integration, and automation across SIEM, EDR, PAM, and vulnerability management.

You will advise leadership, ensure secure-by-design practices, and align efforts with federal guidance and enterprise architecture. The role focuses on architecture, modernization, and collaboration with senior engineers and government stakeholders to strengthen the program's security posture in a hybrid National Harbor, MD