Cyber Engineer Architect - SIEM Security Architect

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Cyber Engineer Architect – SIEM Security Architect based in the United States. The Cyber Engineer Architect – SIEM Security Architect will lead the design, deployment, and integration of advanced cybersecurity solutions that strengthen security visibility, threat detection, and incident response across complex IT environments. This role focuses on Security Information and Event Management (SIEM), security orchestration, network traffic visibility, and secure infrastructure architecture. You will leverage technologies such as Splunk, Palo Alto Networks, CrowdStrike, Gigamon, ExtraHop, and Tenable to improve system protection, scalability, and operational resilience. Working closely with cross-functional engineering and security teams, you will ensure that security controls align with established compliance frameworks and enterprise logging standards. You will also provide advanced troubleshooting, architectural guidance, and technical mentorship to support continuous improvement. This fully remote opportunity is ideal for an experienced cybersecurity professional who enjoys solving complex infrastructure challenges and contributing to mission-critical security operations. Accountabilities: - Cybersecurity Architecture and Deployment: Design, architect, deploy, and maintain advanced cybersecurity solutions, including SIEM platforms, intrusion detection and prevention systems (IDS/IPS), web content filtering, network forensics, and firewall management. - Splunk Platform Engineering: Architect and implement distributed Splunk environments, optimizing log ingestion, data processing, security monitoring, scalability, and operational performance.

- Security Automation and Orchestration: Lead the integration of Splunk SOAR with SIEM platforms, Palo Alto security solutions, endpoint detection and response tools such as CrowdStrike, and ticketing systems such as ServiceNow. - Network Visibility and Traffic Analysis: Integrate Gigamon and ExtraHop visibility solutions to support deep packet inspection, network flow mapping, enhanced threat investigation, and security toolchain optimization. - Security Information Management: Develop and enhance enterprise log management capabilities, ensuring effective collection, correlation, analysis, and monitoring of security events across distributed infrastructure. - Security Controls and Compliance: Collaborate with cross-functional teams to design, implement, and enforce security controls aligned with NIST, FedRAMP, and applicable enterprise log management standards. - Infrastructure Troubleshooting: Diagnose and resolve complex cybersecurity and infrastructure issues, provide escalation support, and help restore system functionality while minimizing operational disruption. - Secure Access and Infrastructure Integration: Support secure remote access, cloud migration, load balancing, and network visibility initiatives to strengthen the security and availability of enterprise systems. - Technical Communication: Explain security architectures, technical designs, and operational capabilities to customers and support teams, improving understanding of managed security services and security best practices. - Technical Leadership and Mentorship: Work independently with limited supervision while coaching junior engineers, sharing technical knowledge, and encouraging collaboration across the team. - Continuous Improvement: Identify opportunities to improve security monitoring, automation, incident response, system availability, and the effectiveness of cybersecurity infrastructure. Requirements: - Education: Bachelor's degree in Computer Engineering, Systems Engineering, or a related technical field.