Lead SecOps discovery workshops, capture current-state SOC maturity, map detection, response, escalation, and operational gaps, and translate findings into pragmatic modernization roadmaps. Develop KQL hunting logic, incident triage workflows, response playbooks, and reusable delivery assets that reduce manual effort and improve analyst productivity. Apply agentic SOC patterns using SOCBot / Autonomous SOC concepts, with clear human-in-the-loop approval, read/write separation, auditability, and safe automation guardrails. Partner with security architects, customer SOC leaders, product groups, and engineering teams to resolve delivery risks, validate design choices, and drive customer outcomes. Support pre-sales and solution shaping through effort estimation, technical assumptions, discovery questions, solution narratives, and customer-facing demos. 5+ years of experience in cybersecurity consulting, security operations, SOC engineering, incident response, SIEM/SOAR, or related security delivery roles. Strong understanding of detection engineering, incident triage, threat hunting, investigation lifecycle, containment / remediation options, and SOC governance.. Ability to produce high-quality customer-facing deliverables such as architecture documents, discovery outputs, deployment plans, design decisions, risk registers, and operational runbooks. Experience communicating complex security concepts to technical teams, program stakeholders, and executive audiences. Degree or equivalent experience in Computer Science, Engineering, Information Security, Cybersecurity, or a related discipline.
Want jobs like this matched to you?
SimpleCareer scores fresh postings against your résumé so you only see the matches that matter.