Senior Cloud-Native SOC Architect

LTM; Irving (TX); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Comprehensive Medical Plan

Short/Long-Term Disability

401(k) Plan with company match

Life Insurance

Vacation & Holidays

Paid parental leave

Job summary

LTIMindtree is seeking a senior CyberTech Engineer in Irving, TX (Hybrid) to lead cloud-native security platform engineering for SIEM, data lake, and SOAR ecosystems. You will architect and deploy scalable solutions, design federated query capabilities, and drive AI-enabled incident workflows.

The role emphasizes hands-on Cribl tooling, SIEM optimization, data pipeline engineering, and collaboration with threat intelligence teams to improve detection and response across enterprise environments.

Qualifications

• 7+ years in cybersecurity or security platform engineering with hands-on experience across SIEM, data pipeline, data lake and SOAR in enterprise environments.
• Experience with modern cloud-native SIEM platforms such as Google Chronicle, Microsoft Sentinel, Elastic SIEM or equivalents.
• Experience designing federated search, data normalization (e.g. UDM/OCSF) and large-scale detection content management.

Responsibilities

• Architect, deploy and operate modern cloud-native SIEM platforms at enterprise scale.
• Design federated query capabilities enabling cross-domain search across SOC data.
• Develop detection content, correlation rules and dashboards for SOC operations.

Skills

Senior Cybertech

SIEM

Cloud-native security

SOAR

Cribl

Data Lake

Threat Intelligence

Tools

Cribl Stream

Cribl Edge

Google Chronicle

Microsoft Sentinel

Elastic SIEM

Job description

LTIMindtree is seeking a senior CyberTech Engineer in Irving, TX (Hybrid) to lead cloud-native security platform engineering for SIEM, data lake, and SOAR ecosystems. You will architect and deploy scalable solutions, design federated query capabilities, and drive AI-enabled incident workflows.

The role emphasizes hands-on Cribl tooling, SIEM optimization, data pipeline engineering, and collaboration with threat intelligence teams to improve detection and response across enterprise environments.