Senior Security Orchestration & SOAR Architect

Koitecc Solutions; Denver, Northern (CO, KY); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Bank of America is seeking a Security Incident Response Orchestration Lead to set vision and architecture for enterprise‑scale security automation across SOAR platforms. You will drive cross‑functional alignment and govern AI‑enabled security operations at scale.

As a principal contributor, you will shape long‑term strategy, establish engineering standards, and ensure measurable outcomes through orchestration, governance, and cross‑team collaboration.

Qualifications

• 10+ years in Security Operations, Incident Response, Detection Engineering, or Security Automation.
• 5+ years with Splunk SOAR (Phantom) and hands-on with Tines in enterprise environments.
• Led large-scale SOAR or automation programs with measurable outcomes.
• Deep expertise in incident response lifecycle, SOC models, and automation strategy.
• Experience designing scalable, governed automation architectures.

Responsibilities

• Serve as enterprise technical authority for security orchestration across SOAR platforms.
• Define long-term architecture, strategy, and roadmap for SOAR and automation.
• Establish enterprise standards, reusable frameworks, and orchestration patterns.
• Lead end-to-end design authority for cross-platform automation initiatives.
• Shape portfolio prioritization and strategic investments with senior leadership.
• Drive intake governance to ensure automation aligns with measurable outcomes.
• Define and track enterprise value metrics (MTTR, analyst efficiency, risk reduction).
• Influence 15+ security teams to adopt standardized automation patterns.
• Provide technical leadership to senior/principal engineers across SOAR platforms.
• Escalation point for high-risk orchestration challenges and platform issues.
• Lead enterprise integrations (Microsoft Graph, Entra ID, M365 Defender, CrowdStrike, Tanium, ServiceNow).
• Drive platform reliability, resilience, and auditability across automations.

Skills

Influence

Result Orientation

Solution Design

Stakeholder Management

Technical Strategy Development

Access and Identity Management

Cyber Security

Information Systems Management

Risk Management

Solution Delivery Process

Collaboration

Critical Thinking

DevOps Practices

Financial Management

Test Engineering

Education

BA/BS in CS/Engineering

Tools

Splunk SOAR (Phantom)

Tines

Microsoft Graph

Entra ID / M365 Defender

CrowdStrike Falcon

Tanium

ServiceNow

AI governance frameworks

Job description

Bank of America is seeking a Security Incident Response Orchestration Lead to set vision and architecture for enterprise‑scale security automation across SOAR platforms. You will drive cross‑functional alignment and govern AI‑enabled security operations at scale.

As a principal contributor, you will shape long‑term strategy, establish engineering standards, and ensure measurable outcomes through orchestration, governance, and cross‑team collaboration.