Lead Architect

Leading the design and technical direction of a managed OT Security Operations Center, the full-time Lead OT SOC Architect will architect the platform, define detection strategies, and mentor SOC engineers and analysts while working remotely. Key responsibilities: Architect the end-to-end OT SOC platform, including SIEM, detection pipeline, and multi-tenant service architecture Own the detection-engineering strategy, managing the lifecycle of detection content mapped to MITRE ATT&CK for ICS Serve as the top-tier technical escalation point for complex SOC issues and lead the development of SOC operational workflows Required qualifications: Extensive experience designing and operationalizing a Security Operations Center (SOC) from the ground up 10+ years in cybersecurity with 5+ years in a lead or senior technical role directing SOC design and operations Expert-level hands-on SIEM architecture and detection-engineering experience, preferably with Elastic Demonstrated experience leading and mentoring SOC analysts and engineers Strong understanding of networking fundamentals and experience with the Purdue Enterprise Reference Architecture