Senior SecOps Architect - Cloud Security & SIEM Lead

Softthink Solutions; Washington (District of Columbia); On-site; USD 180,000 - 240,000; Full time

Job summary

Softthink Solutions is seeking a Lead SecOps Engineer (Cloud Sec Spec 3) to design, build, and operationalize the SBA Google SecOps Enterprise Plus environment in Washington, DC. The role oversees SIEM/SOAR architecture, data ingestion pipelines, threat-intelligence integration, and FedRAMP High compliance.

You will lead enterprise-scale security modernization, integrate telemetry across Azure, AWS, and on-prem, and guide the team through Initiate, Build, Detect, and Transition phases.

Qualifications

• 10+ years of experience in cloud security engineering, SIEM/SOAR, or enterprise security operations.
• Experience with Google SecOps, BigQuery UDM, and cloud-native security platforms.
• Experience integrating multi-cloud telemetry (Azure, AWS, on-prem).
• Experience leading enterprise-scale security modernization projects.

Responsibilities

• Lead the design and implementation of the Google SecOps Enterprise Plus tenant.
• Architect ingestion pipelines from Microsoft Sentinel, Entra ID, AWS GovCloud, and on-prem logs.
• Validate parser coverage across 700+ log types.
• Oversee deployment of detections, UEBA, and investigation workflows.
• Direct integration of Zero Trust and IAM telemetry (Okta, Entra).
• Ensure alignment with insider-threat and privileged-access monitoring requirements.

Skills

Cloud security engineering

SIEM/SOAR architecture

Google SecOps

BigQuery UDM

Multi-cloud telemetry

Enterprise security modernization

Education

Bachelor's degree in Cybersecurity/CS/IS

Master's degree preferred

Job description

Softthink Solutions is seeking a Lead SecOps Engineer (Cloud Sec Spec 3) to design, build, and operationalize the SBA Google SecOps Enterprise Plus environment in Washington, DC. The role oversees SIEM/SOAR architecture, data ingestion pipelines, threat-intelligence integration, and FedRAMP High compliance.

You will lead enterprise-scale security modernization, integrate telemetry across Azure, AWS, and on-prem, and guide the team through Initiate, Build, Detect, and Transition phases.