Senior SIEM/SOAR Architect — Remote (Microsoft Sentinel)

BAA CONSULTING; Richmond (VA); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

401(k)

Employee discounts

Health insurance

Paid time off

Competitive salary

Job summary

BAA Consulting is seeking a talented and driven Senior SIEM/SOAR Architect to join our growing cybersecurity team in Richmond, VA. In this high-impact role, you will design, architect, deploy, configure, and optimize advanced SIEM and SOAR solutions for enterprise and Federal clients.

The role emphasizes threat detection engineering, automation, and integrations with security tools, threat feeds, and APIs, while guiding junior engineers and coordinating with SOC teams.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field.
• 5+ years in hands-on SIEM/SOAR design, deployment, and operations for enterprise security.

Responsibilities

• Architect and deploy enterprise SIEM/SOAR platforms focusing on Microsoft Sentinel.
• Design data ingestion, retention, correlation, and security monitoring capabilities.
• Develop and tune analytics rules, playbooks, and automated incident responses.
• Lead detection engineering, log source onboarding, and use case optimization.
• Support Federal logging requirements and collaborate with SOC teams to reduce MTTD/MTTR.
• Mentor junior engineers and communicate complex security concepts to stakeholders.

Skills

SIEM/SOAR

Microsoft Sentinel

Automation

Threat detection

Education

Bachelor's degree in Cybersecurity

Tools

Microsoft Sentinel

Splunk

IBM QRadar

Palo Alto Cortex XSOAR

ServiceNow Security Operations

Azure

Job description

BAA Consulting is seeking a talented and driven Senior SIEM/SOAR Architect to join our growing cybersecurity team in Richmond, VA. In this high-impact role, you will design, architect, deploy, configure, and optimize advanced SIEM and SOAR solutions for enterprise and Federal clients.

The role emphasizes threat detection engineering, automation, and integrations with security tools, threat feeds, and APIs, while guiding junior engineers and coordinating with SOC teams.