Senior Security Architect: Platform & Customer Advisory

Rippling; United States; Remote; USD 180,000 - 280,000; Full time

Job summary

Bespin Global US is seeking a Senior Security Architect to own and evolve the managed security services platform. You will design the multi-tenant SIEM/SOAR stack, deploy EDR tooling across customer estates, and develop detection content mapped to MITRE ATT&CK to reduce false positives.

You will lead customer onboarding and workshops, advise security leaders on program maturity, and create reference architectures and runbooks for the SOC and delivery teams.

Qualifications

• 7+ years in security engineering, security operations, or security consulting.
• Hands-on ownership of a SIEM platform and data onboarding.
• Experience with Google SecOps, Elastic, or Coralogix for detection.
• Deploying and operating EDR/XDR platforms (SentinelOne, CrowdStrike).
• Experience with Wiz CSPM/CNAPP and policy baselines.
• Knowledge of SOAR platforms and automation.
• Cloud security fundamentals across AWS, Google Cloud, or Azure.
• Scripting/automation (Python/PowerShell) and IaC familiarity.
• Ability to communicate with customers and present findings.
• Familiarity with MITRE ATT&CK, NIST CSF, CIS Benchmarks, SOC 2.

Responsibilities

• Own architecture and build-out of multi-tenant SIEM and SOAR environments.
• Design and deploy EDR tooling across customer estates.
• Develop detection content mapped to MITRE ATT&CK and tune to reduce false positives.
• Develop SOAR playbooks for automated triage and containment workflows.
• Engineer log ingestion and normalization pipelines; manage data volume and costs.
• Stand up Wiz for cloud security posture management and define baselines.
• Design secure connectivity into customer environments with least privilege.
• Automate deployment and configuration via infrastructure-as-code and scripting.
• Evaluate new security tooling and provide build-vs-buy guidance.

Skills

SIEM ownership

Modern SIEM expertise

EDR/XDR deployment

CSPM/CNAPP (Wiz)

SOAR automation

Cloud security fundamentals

Scripting & IaC

Customer communication

MITRE/NIST/CIS/SOC 2 familiarity

Tools

SentinelOne

CrowdStrike

Wiz

BindPlane

OpenTelemetry

Cribl

Tailscale

Terraform

Job description

Bespin Global US is seeking a Senior Security Architect to own and evolve the managed security services platform. You will design the multi-tenant SIEM/SOAR stack, deploy EDR tooling across customer estates, and develop detection content mapped to MITRE ATT&CK to reduce false positives.

You will lead customer onboarding and workshops, advise security leaders on program maturity, and create reference architectures and runbooks for the SOC and delivery teams.