Senior Security Architect - SIEM, IR & Threat Hunting Lead

Brooksource; Denver (CO); Hybrid; USD 170,000 - 230,000; Full time

Benefits offered by this job

Competitive benefits

401k with company match

Paid time off

Job summary

Brooksource is seeking a Lead Security Engineer/Architect in a hybrid-capable role covering Denver, NYC, or LA. You will be the firm’s principal technical authority for information security, shaping the security roadmap and leading architecture, detection, and incident response efforts across Microsoft Entra ID, Defender, and cloud services.

You will act as the CISO’s trusted technical partner, partner with IT, and mentor teams while ensuring secure lifecycle delivery and client protection.

Qualifications

• Ten+ years of progressive experience in information security engineering, detection, or threat analysis.
• Expertise in security architecture and driving security programs end-to-end.
• Strong knowledge of Microsoft security stack and cloud security controls.

Responsibilities

• Provide architectural oversight across security stack and controls.
• Own detection engineering lifecycle, analytics rules, and SIEM tuning.
• Lead threat hunting using Sentinel and Defender XDR tools.
• Direct incident response activities and post-incident reviews.
• Drive Zero Trust principles and identity/data protection strategies.

Skills

Security architecture

Detection engineering

Threat analysis

Incident response

Zero Trust

MITRE ATT&CK

PowerShell

Python

Education

Security certifications

Tools

Microsoft 365

Azure

Entra ID

Microsoft Defender Suite

Job description

Brooksource is seeking a Lead Security Engineer/Architect in a hybrid-capable role covering Denver, NYC, or LA. You will be the firm’s principal technical authority for information security, shaping the security roadmap and leading architecture, detection, and incident response efforts across Microsoft Entra ID, Defender, and cloud services.

You will act as the CISO’s trusted technical partner, partner with IT, and mentor teams while ensuring secure lifecycle delivery and client protection.