Senior Cybersecurity Solutions Architect

Cybersecurity Jobs; New York (NY); On-site; USD 190,000 - 260,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Short and long term disabilityBenefits

401(k) + match

Life insurance

Paid holidays

Paid time off

Wellness programs

Merit increases

Incentive compensation (exempt roles)

Job summary

Bloomberg’s Cyber Security Operations Center (CSOC) is seeking a PTO staff member to design, build, and integrate scalable process and technology solutions that improve cyber security operations. You will own CSOC tech areas, mentor staff, and partner with teams across Event Analysis, Threat Hunting, Incident Response, and more to drive measurable improvements.

You will evaluate new technologies, automate workflows, and ensure solutions align with CSOC vision, while maintaining robust

Qualifications

• 5+ years of experience in engineering, systems design, or a cybersecurity operations center role (analyst, detection engineer, security engineer, or incident responder)
• Experience with data storage and retrieval systems (SIEM, databases, data lakes)
• Ability to analyze complex processes and identify optimization opportunities
• Ability to quickly learn new technologies and products in a frequently evolving security landscape
• Experience with automation and Low Code/No Code platforms such as SOAR
• Experience managing vendor relationships or driving delivery through external engineering or product teams
• Proven ability to break down complex technical and operational problems into components
• Creative, strategic mindset focused on ambitious improvements
• Inquisitive, attentive listening style
• Clear and concise written and verbal communication
• Expert knowledge sharing by acquiring key context and communicating it effectively to other team members
• Experience providing feedback, coaching, or mentorship

Responsibilities

• Own one or more CSOC technology and process areas and manage/integrate associated vendor products
• Represent CSOC to external stakeholders and ensure solutions align with CSOC vision
• Identify systemic cybersecurity operations issues and coordinate remediation
• Formalize and disseminate security operations best practices
• Pilot and evaluate emerging technologies for practical adoption
• Mentor PTO and CSOC staff for growth toward ownership
• Collaborate with Event Analysis, Threat Hunting, Incident Response, Detection Engineering, and Threat Intelligence
• Transform CSOC operations to improve analyst speed, capabilities, and coverage using automation
• Surface measurable metrics from PTO-managed products to drive process improvement
• Design and prioritize scalable, robust, and innovative solutions
• Validate and adapt solutions to fit vision and execution paths
• Develop internally built products using code or Low Code/No Code (including SOAR)
• Build tooling to surface right information; direct product access when practical
• Oversee development and implementation of technical solutions with quality and timelines

Skills

CSOC experience

Automation

SOAR

Python

Cloud security

Vendor management

Tools

SIEM

Databases

Data lakes

EDR

Threat Intelligence Platforms

Email Analysis

Malware Sandboxing

GenAI

Network Intrusion Detection

Data Loss Prevention

IaaS

PaaS

SaaS

Job description

Bloomberg’s Cyber Security Operations Center (CSOC) is hiring a PTO (Process & Technology Optimization) staff member to design, build, and integrate scalable process and technology solutions that improve cyber security operations.

Responsibilities

• Own one or more CSOC technology and process areas (examples: Network Security, EDR, Cloud, AI, Telemetry) and manage/integrate associated vendor products
• Represent CSOC to external stakeholders and ensure solutions align with CSOC vision through ongoing oversight
• Identify systemic cybersecurity operations issues, document resolution methods, and coordinate with management to prioritize enterprise remediation
• Formalize and disseminate security operations best practices to make operations more repeatable
• Pilot and evaluate emerging technologies to determine practical adoption
• Mentor PTO and broader CSOC staff earlier in their careers, supporting growth toward greater ownership over time
• Work closely with CSOC functions including Event Analysis, Threat Hunting, Incident Response, Detection Engineering, and Threat Intelligence to understand blockers and mission challenges
• Transform CSOC operations to improve analyst speed, capabilities, and coverage using automation and new controls, technologies, or processes
• Identify, collect, and surface measurable metrics from PTO-managed products to enable data-driven process improvement across CSOC
• Design and prioritize scalable, robust, and innovative process and technology solutions
• Validate, reframe, and adapt user-originated solutions to ensure alignment with overall vision and an ideal execution and maintenance path (self-initiated, engineering-managed, or vendor-designed)
• When appropriate, design, execute, and maintain internally built products using code or Low Code/No Code options (including SOAR)
• Build tooling and processes that surface the right information when needed; default to direct product access only when it is not practical
• Oversee development and implementation of technical solutions, ensuring quality standards and delivery timelines are met

Requirements

• 5+ years of experience in engineering, systems design, or a cybersecurity operations center role (analyst, detection engineer, security engineer, or incident responder)
• Experience with data storage and retrieval systems (examples: SIEM, databases, data lakes)
• Ability to analyze complex processes and identify optimization opportunities
• Ability to quickly learn new technologies and products in a frequently evolving security landscape
• Experience with or exposure to automation and Low Code/No Code platforms such as SOAR
• Experience managing vendor relationships or driving delivery through external engineering or product teams
• Proven ability to break down complex technical and operational problems into components
• Creative, strategic mindset focused on ambitious improvements
• Inquisitive, attentive listening style
• Clear and concise written and verbal communication
• Expert knowledge sharing by acquiring key context and communicating it effectively to other team members
• Experience providing feedback, coaching, or mentorship

Technologies

• SIEM
• Databases
• Data lakes
• SOAR
• EDR
• Python
• Low Code/No Code
• GenAI
• Threat Intelligence Platforms
• Email Analysis
• Malware Sandboxing
• Network Intrusions Detection
• Data Loss Prevention
• IaaS
• PaaS
• SaaS

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Short and long term disability benefits
• 401(k) + match
• Life insurance
• Paid holidays
• Paid time off
• Various wellness programs
• Merit increases
• Incentive compensation (exempt roles only)

We’d love to see

• 7+ years of experience working in or with a cybersecurity operations center (analyst, detection engineer, security engineer, or incident responder)
• 7+ years of experience as a security engineer supporting or designing security operations systems, including capabilities such as EDR, Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusions Detection, and Data Loss Prevention
• Python or scripting skills sufficient to design and build custom integrations, or extend automation platforms beyond built-in capabilities
• Experience protecting cloud infrastructure (IaaS, PaaS, SaaS), operating security tooling running in the cloud, or applying GenAI capabilities to security use cases

Location: New York, NY (onsite)
Salary: USD 190,000 - 260,000 per year