Sr SOC Architect
The Judge Group Inc.

Job Info

---

Location: Harrisburg, PA
Description: Our client is currently seeking a Sr SOC Architect

Job Purpose and Summary:

The Sr. Security Operations Center Architect is responsible for designing, implementing, and optimizing the NextGen Security Operations Center infrastructure. This role involves working closely with cross-functional teams to ensure SOC capabilities align with industry best practices and effectively mitigate security risks. The position requires a high level of proficiency and operates under limited supervision.

Key Responsibilities:

• Develop and maintain a robust SOC architecture supporting threat detection, incident response, and threat hunting across a hybrid cloud environment.
• Evaluate and integrate security tools and platforms (e.g., SIEM, EDR, SOAR, NDR) to enhance SOC operations.
• Create and maintain incident response playbooks, SOPs, and runbooks for efficient SOC operations.
• Conduct SOC capability assessments and maturity analysis to identify gaps and areas for improvement.
• Establish and optimize monitoring strategies and use cases to improve threat detection and proactive monitoring.
• Develop strategic relationships with internal and external stakeholders to align SOC with broader security strategies.
• Provide guidance and technical mentorship to SOC analysts and security engineers within the ESO.
• Ensure SOC compliance with internal and regulatory requirements (e.g., NIST SP 800-53) and contribute to audit readiness efforts.
• Stay current with emerging threats and trends, recommending changes to SOC architecture and processes as needed.
• Prepare detailed emerging threat reports using threat feeds and share findings with agency stakeholders.
• Assist in developing metrics and dashboards for senior management reporting.
• Perform scenario-based retroactive threat hunting periodically.
• Review alerts and findings from LogRhythm and cloud-based security tools (e.g., AWS Security Hub, AWS Guard Duty, MS Defender for Endpoints, Trend Micro Vision One).
• Continuously monitor existing information security solutions and security control effectiveness.
• Proactively identify threats and vulnerabilities, and analyze data to detect unauthorized access to networks and systems.
• Evaluate the type and severity of security events, resolve issues, or follow escalation procedures as needed. Lead forensics investigations when required.
• Triage information security events, prioritize them, and escalate as necessary.
• Analyze alerts and log events to identify potential security threats and initiate incident response procedures.
• Gather relevant documentation and evidence related to incidents.
• Collaborate with various teams to identify technical controls to meet specific security requirements.
• Perform self-assessments of security controls to determine effectiveness, sufficiency, and gaps.

Contact: chamilton@judge.com

This job and many more are available through The Judge Group. Find us on the web at www.judge.com

---