SOC Architect
Openkyber
Senior SOC Detection Engineer CrowdStrike Falcon & SOAR / AI Client: State of Texas
Location: Austin, TX Remote within Texas
Duration: 12 Months + Extension
Interview: Team Interview
Work Authorization: Must be authorized to work in the U.S.
Candidate Location: Texas Residents Only No Out-of-State or Relocation Candidates
IMPORTANT REQUIREMENT Candidates must have a minimum of 2+ years of experience working in government, legal, law-enforcement, or law-enforcement-adjacent security environments.
Position Overview The State of Texas is seeking a Senior SOC Detection Engineer with strong hands-on experience in CrowdStrike Falcon, SOAR automation, detection engineering, threat hunting, incident response, and AI/LLM-assisted security operations . The ideal candidate will have Tier 3/Senior SOC experience and the ability to develop custom detections, automate security workflows, conduct forensic investigations, and support advanced security operations in a highly regulated environment.
Key Responsibilities Develop, tune, maintain, and optimize CrowdStrike Falcon detections and Indicators of Attack (IOAs). Work extensively with CrowdStrike Falcon Insight XDR, Discover, and Fusion SOAR . Develop and utilize Falcon Query Language (FQL) for threat hunting, detection engineering, investigations, and analytics. Build and maintain SOAR automation workflows , with Torq experience strongly preferred. Develop security automation and integrations using Python, PowerShell, FQL, APIs, and other scripting technologies . Conduct advanced threat hunting and forensic investigations of cybersecurity incidents and attacks. Determine attack vectors, root causes, indicators of compromise, and recommendations for preventing recurrence. Create detailed hunt reports, incident reports, investigation documentation, runbooks, and technical security documentation . Design and maintain dashboards and security analytics supporting SOC operations. Leverage AI/LLM technologies such as GPT-based tools and Claude to improve SOC efficiency, detection engineering, investigation, and automation. Design AI-assisted playbooks and analyst copilots while maintaining strict data sanitization, privacy, and security controls. Apply appropriate data-handling safeguards when using AI tools in regulated environments. Support Zero Trust security architecture initiatives based on NIST SP 800-207 principles. Develop, review, and update security policies, procedures, standards, and technical controls across public, private, and hybrid cloud environments. Collaborate with cybersecurity, infrastructure, application, compliance, and other cross-functional teams. Communicate complex technical findings clearly to both technical and non-technical audiences. Troubleshoot and resolve complex cybersecurity issues across decentralized and diverse environments. Research, evaluate, communicate, and help implement emerging security technologies.
Regulatory / Compliance Knowledge Candidates should have familiarity with regulated security environments and frameworks including: IRS Publication 1075 FBI CJIS Security Policy HIPAA NIST Zero Trust Architecture SP 800-207
Required Experience Progressive SOC / Security Operations experience. 2+ years at Tier 3 / Senior SOC Analyst / Detection Engineering level. 2+ years in government, legal, law-enforcement, or law-enforcement-adjacent security environments. Hands-on production experience with CrowdStrike Falcon. Experience authoring custom detections/IOAs and using FQL. Experience developing or maintaining SOAR automation. Hands-on experience with AI/LLM tools supporting cybersecurity operations. Strong scripting and automation experience using Python, PowerShell, or FQL-based automation. Experience conducting forensic investigations and advanced threat hunting. Experience documenting investigations and communicating technical findings. Experience creating or updating security policies and standards. Ability to work independently and effectively within cross-functional cybersecurity teams.
Education & Certifications Education: Bachelor's degree in Computer Science, Information Security, Cybersecurity, or related field preferred. Equivalent professional experience may be considered. Preferred Certifications: GIAC certifications such as GCIH, GCIA, FA , or equivalent. CrowdStrike Certified Falcon Responder (CCFR) or CrowdStrike Certified Falcon Administrator (CCFA) , or equivalent CrowdStrike certification. Torq certification or demonstrated portfolio of SOAR automation workflows.
Location: Austin, TX Remote within Texas
Duration: 12 Months + Extension
Interview: Team Interview
Work Authorization: Must be authorized to work in the U.S.
Candidate Location: Texas Residents Only No Out-of-State or Relocation Candidates
IMPORTANT REQUIREMENT Candidates must have a minimum of 2+ years of experience working in government, legal, law-enforcement, or law-enforcement-adjacent security environments.
Position Overview The State of Texas is seeking a Senior SOC Detection Engineer with strong hands-on experience in CrowdStrike Falcon, SOAR automation, detection engineering, threat hunting, incident response, and AI/LLM-assisted security operations . The ideal candidate will have Tier 3/Senior SOC experience and the ability to develop custom detections, automate security workflows, conduct forensic investigations, and support advanced security operations in a highly regulated environment.
Key Responsibilities Develop, tune, maintain, and optimize CrowdStrike Falcon detections and Indicators of Attack (IOAs). Work extensively with CrowdStrike Falcon Insight XDR, Discover, and Fusion SOAR . Develop and utilize Falcon Query Language (FQL) for threat hunting, detection engineering, investigations, and analytics. Build and maintain SOAR automation workflows , with Torq experience strongly preferred. Develop security automation and integrations using Python, PowerShell, FQL, APIs, and other scripting technologies . Conduct advanced threat hunting and forensic investigations of cybersecurity incidents and attacks. Determine attack vectors, root causes, indicators of compromise, and recommendations for preventing recurrence. Create detailed hunt reports, incident reports, investigation documentation, runbooks, and technical security documentation . Design and maintain dashboards and security analytics supporting SOC operations. Leverage AI/LLM technologies such as GPT-based tools and Claude to improve SOC efficiency, detection engineering, investigation, and automation. Design AI-assisted playbooks and analyst copilots while maintaining strict data sanitization, privacy, and security controls. Apply appropriate data-handling safeguards when using AI tools in regulated environments. Support Zero Trust security architecture initiatives based on NIST SP 800-207 principles. Develop, review, and update security policies, procedures, standards, and technical controls across public, private, and hybrid cloud environments. Collaborate with cybersecurity, infrastructure, application, compliance, and other cross-functional teams. Communicate complex technical findings clearly to both technical and non-technical audiences. Troubleshoot and resolve complex cybersecurity issues across decentralized and diverse environments. Research, evaluate, communicate, and help implement emerging security technologies.
Regulatory / Compliance Knowledge Candidates should have familiarity with regulated security environments and frameworks including: IRS Publication 1075 FBI CJIS Security Policy HIPAA NIST Zero Trust Architecture SP 800-207
Required Experience Progressive SOC / Security Operations experience. 2+ years at Tier 3 / Senior SOC Analyst / Detection Engineering level. 2+ years in government, legal, law-enforcement, or law-enforcement-adjacent security environments. Hands-on production experience with CrowdStrike Falcon. Experience authoring custom detections/IOAs and using FQL. Experience developing or maintaining SOAR automation. Hands-on experience with AI/LLM tools supporting cybersecurity operations. Strong scripting and automation experience using Python, PowerShell, or FQL-based automation. Experience conducting forensic investigations and advanced threat hunting. Experience documenting investigations and communicating technical findings. Experience creating or updating security policies and standards. Ability to work independently and effectively within cross-functional cybersecurity teams.
Education & Certifications Education: Bachelor's degree in Computer Science, Information Security, Cybersecurity, or related field preferred. Equivalent professional experience may be considered. Preferred Certifications: GIAC certifications such as GCIH, GCIA, FA , or equivalent. CrowdStrike Certified Falcon Responder (CCFR) or CrowdStrike Certified Falcon Administrator (CCFA) , or equivalent CrowdStrike certification. Torq certification or demonstrated portfolio of SOAR automation workflows.
For applications and inquiries, contact:View email address on us.fitly.work
Vacancy posted 2 days ago
Similar jobs that could be interesting for youBased on the SOC Architect in Atlanta, GA vacancy
- ...RESPONSIBILITIES: OpenKyber has a client in Jacksonville, FL that is seeking a highly motivated SOC Analyst to join our cybersecurity team. Summary: This individual will be responsible for monitoring, investigating, and responding to security incidents across...SuggestedHourly payContract work
- ...Position: TPM (Advanced SoC Physical Design) Location: Bay Area Remote Duration: 12+ Months Contract Role Summary The Technical Program Manager (TPM) Advanced SoC Physical Design is responsible for leading end-to-end execution of complex SoC implementation...SuggestedContract workRemote work
- ...). Platform Architecture & Multi-Tenant Administration: Architect, implement, and maintain the state-wide CrowdStrike Falcon platform... ...vulnerabilities, and persistent malware identified by Tier 1/2 SOC analysts. Execute advanced containment, remediation, and live...Suggested
- ...Job Title: Senior SOC L3 Analyst / Incident Response Lead Location: San Jose, CA (4 days onsite, 1 day remote) About The AES Group: The AES Group is a premier technology and engineering consulting company that has been bringing businesses and talent together...SuggestedRemote work
- ...We are looking for a Security Analyst II (SOC) to join a security operations team in Los Angeles, California as part of a Long-term Contract engagement. This role focuses on monitoring security activity, investigating alerts, and helping drive incident response efforts...SuggestedLong term contractPermanent employmentContract workTemporary work
$35 - $41 per hour
...opportunities Maintain awareness of current and relevant threat landscapes Provide feedback and recommendations to enhance existing SOC processes and content Assist with implementation of process improvements Engineer and enrich data to improve analytic capabilities Research...Full timeContract workMonday to FridayShift workNight shiftDay shift- ...Requirements 8 or more years of experience in security operations center (SOC) environments and Tier 3 incident response. Proficiency in... ..., and correlation rules inside CrowdStrike Falcon. Architect automated SOAR playbooks in Torq, connecting CrowdStrike, identity...
$196.5k - $294.75k
...business and society. The Challenge We're looking for a Principal Architect to set technical direction across OneTrust's product platform as... ...Points For Experience with compliance frameworks such as GDPR, SOC 2, and ISO/IEC 27001 or 27701Experience applying Team Topologies...Work experience placementWork at officeLocal areaWorldwideFlexible hours3 days per week1 day per week- ...Technology - System Development Job Description As the Principal Systems Architect, you will lead the design of scalable, secure, and high-impact... ...compliant FinTech systems within the framework of PCI DSS, SOC 2, and other regulatory obligations. (Preferred) With cloud-...Full timeWork at office3 days per week
- ...Job Description IT Security Architect Role Summary: Conduent is building an architecture function responsible for defining enterprise... ...aligned to regulatory and industry frameworks (NIST, ISO 27001, SOC 2, NYDFS) and translated into enforceable architectural controls...Remote workWork from homeFlexible hours
- ...Experience designing identity solutions aligned with: NIST CSF COBIT SOC GDPR Strong understanding of: Zero Trust Architecture Least... ...Conditional Access Passwordless Authentication Identity Federation Architect solutions for: Entra ID Azure AWS Microsoft 365 Okta...
$145.6k - $209.3k
...UKG is seeking an experienced Identity & Access Management (IAM) Architect to help define, design, and evolve the identity security... ...Support audit, compliance, and regulatory requirements including SOC, ISO 27001, PCI, and privacy frameworks.• Identify and mitigate...- ...platform level. The role partners with Security on AI governance and architects controls for unified data governance. This is a hands-on... ..., Acceldata, or open-source equivalents. Translate GDPR, CCPA, SOC 2, and HIPAA requirements into enforceable technical controls....Contract work
- ...Security Ownership & SME Role Serve as the primary SME and architect for Microsoft Office 365 security across the enterprise.... ...Microsoft 365 security to enterprise compliance frameworks (NIST, ISO, SOC, GDPR) Managerial experience in leading Microsoft 365 and collaboration...Work at office
- Job DescriptionApply statistical modeling and data science techniques to transaction and TCP L4 telemetry to identify anomalous traffic and behavioral patterns.Build behavioral baselines and anomaly detection models using time-series analysis, clustering, correlation, outlier...
- ...Services.Job DescriptionClear understanding of RPA concepts.Good hands on knowledge in OpenSpan implementation.Should have worked in architect position and have experience in handling implementations.Knowledge of design patterns and architecture, RPA best practices.Should...Permanent employmentFull timeH1b
$186k - $257k
...Prototype modernization accelerators and proof-of-concepts using LLMs, code analysis tools, and custom pipelines.* Collaborate with architects, operators, and data engineers to ensure secure and efficient modernization patterns.What you will bring:* Hands-on experience...Temporary workLocal area- Job ID: 22902162Reference Number: 24-00900Title: Opentext Exstream ArchitectLocation: Atlanta, GA, 08830Posted Date: 2024-09-12Company: HAN Staffing Title: Opentext Exstream ArchitectLocation: Atlanta, GA (Hybrid role) 3 days a week onsite.JD:Should have 6 years of experience...Flexible hoursWeekend work3 days per week
- Company DescriptionSonsoft , Inc. is a USA based corporation duly organized under the laws of the Commonwealth of Georgia. Sonsoft Inc. is growing at a steady pace specializing in the fields of Software Development, Software Consultancy and Information Technology Enabled...Permanent employmentFull timeH1b
- ...version 10 or higher (Version 11 preferable) with proven experience in the following areas: Experience in developing, design / architecting BI SolutionsExperience in sourcing data from disparate systems with a good understanding of Data Models and ETL procedures.Strong...Permanent employmentFull timeH1b
- ...creativity in problem solving to promote technical and design excellence while ensuring building code and regulatory compliance. The Lead Architect will need the ability to coordinate with internal and external parties, manage multiple complex tasks, establish priorities and...Work at officeRemote work
$148.5k - $223.9k
...into elegant, workable solutions in a fast-paced, AI-forward environment? We want to talk to you!Slack is looking for an Experience Architect on the Solution Design team to join our global project delivery organization supporting enterprise customer implementations. We...Full timeRemote workWorldwide- ...career where your contributions are valued, your growth is supported, and your work makes a lasting impactJob Summary:The Integration Architect defines the enterprise integration strategy and provides hands-on architecture leadership for its adoption. This role establishes...Full timeContract workTemporary work
$100k - $150k
...impact that transforms your career—and the lives of people across the world.Visit us at UST.com.You Are:UST is searching for a GCP Architect who will design enterprise-scale Google Cloud architectures aligned with security, scalability, reliability, and cost optimization...Full timeTemporary workPart timeWork at officeLocal areaRemote workFlexible hours- ...: Atlanta, GA; Dallas, TXEmployment Type: Full TimeClient: TechMContact: Meghana GorusuCompany: SRI Tech SolutionsJob Title: PaaS Architect - Tanzu Location: Atlanta, GA and Dallas, TXDuration: FulltimeJob Description: PaaS Solution Architect - VMware TanzuSkills: Multi...Work experience placement
$186k - $255k
...culture that values trust, accountability, and shared success where your work truly matters.Job SummaryJob SummaryAs a Principal Architect, you will serve as a trusted executive advisor responsible for influencing our clients’ cybersecurity transformation strategies. This...Full timeRemote workVisa sponsorshipWork visa- ...Fortinet is growing and we are looking to hire Principal Software Developer to join our team.The Global Advanced Field Training Solution Architect is a highly knowledgeable and skilled professional who will be responsible for:The development of advanced content material with...Local areaWorldwideFlexible hours
- ...critical, and corporate facilities. As an employee‑owned firm, we foster a collaborative, growth‑oriented environment where engineers, architects, designers, and project management professionals come together to solve complex challenges and help clients realize ambitious...Permanent employmentContract workFor contractorsWork at office
$85k - $148.7k
...initiative of Beyond Zero workplace injuries, we believe that you'll find a flourishing career here at Jacobs .We are seeking an architect who brings a growth mindset, continuously seeking new ideas, technologies, and design approaches that elevate project outcomes, team...Full timeContract workWork at officeLocal areaRemote workWorldwideOverseas2 days per week- Stantec’s Buildings team is on a mission to become the world’s leading integrated design practice. Our architects, engineers, interior designers, consultants, sustainability specialists, and technologists are passionate about the power of design. Our collaborative culture...Full timeContract workTemporary workPart timeFor contractorsFor subcontractorCasual workWork at officeLocal areaFlexible hours
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to SOC Architect. Be the first to apply!



