Senior Cybersecurity Solutions Architect (NYC)

Senior Cybersecurity Solutions ArchitectBloomberg's Cyber Security Operations Center (CSOC) plays a critical role in safeguarding the company's digital environment, actively monitoring systems and networks for any signs of suspicious activity. When a confirmed incident occurs, CSOC leads containment and response efforts, formalizing lessons learned and hardening defenses against future attacks. The Process & Technology Optimization (PTO) team within CSOC is at the forefront of designing, building, and integrating process and technology solutions to enable CSOC functions to thrive and improve. As a PTO staff member, you will play a crucial role in understanding the evolving challenges faced by CSOC teams, driving moonshot goals, and implementing scalable, innovative solutions that shape the future of cyber security operations at Bloomberg.We will trust you to:Own one or more areas of CSOC's technology and process landscape (e.g., Network Security, EDR, Cloud, AI, Telemetry), managing and integrating the vendor products within them, representing CSOC to external stakeholders, and ensuring vision-consistent implementation and ongoing oversightIdentify systemic cybersecurity operations issues, document potential methods to resolve, and align with management to prioritize resolution efforts across the enterpriseFormalize and disseminate best practices, turning security operations from art into repeatable sciencePilot and evaluate emerging technologies to evaluate practical adoptionMentor and provide guidance to PTO and broader CSOC staff earlier in their careers, helping them build skills and take on greater ownership over timeIdentify OptimizationsEngage deeply with CSOC functions (Event Analysis, Threat Hunting, Incident Response, Detection Engineering, Threat Intelligence, etc.) to understand and empathize with challenges that prevent teams from accomplishing their core missionsLook for opportunities to transform CSOC operations, including improving analyst speed, capabilities and coverage through automation and introduction of new technology, controls, or processes that were previously out of reachIdentify, collect, and surface measurable data and metrics from PTO-managed products, enabling data-driven process improvement across CSOCDesign & Implement SolutionsDesign and prioritize scalable, robust, and innovative process and technology solutionsValidate, reframe, and adapt user-originated solutions to ensure alignment with broader vision and ideal execution and maintenance path (e.g. self-initiated, engineering-managed, or vendor-designed)When it makes sense for solutions to be built internally, design, execute, and maintain these products (through code or Low Code/No Code options like SOAR)Understand how the CSOC teams you support actually work, and design tooling and process to surface the right information at the moment they need it, falling back to granting direct product access only when that's not a practical pathOversee the development and implementation of technical solutions, ensuring adherence to quality standards and project timelinesYou'll need to have:5+ years of experience in engineering, systems design, or a cybersecurity operations center role (as an analyst, detection engineer, security engineer, or incident responder)Experience with data storage and retrieval systems (e.g. SIEM, databases, data lakes, etc.)Able to consider a complex process and identify optimization opportunitiesAs security is a frequently evolving field, able to quickly understand new technologies and productsExperience with, or exposure to, automation and Low Code/No Code platforms such as a SOARExperience managing vendor relationships or driving delivery through external engineering or product teamsAmbitious Problem Solving & Critical Thinking SkillsProven ability to dissect complex technical and operational problems into their component partsCreative, strategic mindset with the drive to pursue ambitious improvementsStrong Collaboration & Communication AbilityInquisitive and curious listenerUses clear & concise written and verbal communication patternsExpert knowledge sharer who can acquire key context and provide it effectively to other team membersExperience providing feedback, coaching, or mentorship to othersWe'd love to see:7+ years of experience working in or with a cybersecurity operations center (as an analyst, detection engineer, security engineer, or incident responder)7+ years of experience as a security engineer (supporting or designing cybersecurity operations systems), specifically with products and capabilities like End Point Detection & Response (EDR), Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusions Detection, Data Loss Prevention, etc.Python or scripting skills sufficient to design and build custom integrations, or extend automation platforms beyond their built-in capabilities, when the situation calls for itExperience protecting cloud infrastructure (IaaS, PaaS, or SaaS), operating security tooling that runs in the cloud, or applying GenAI capabilities to security use cases