Sr Advanced Cyber Security Architect Engineer

Sr Advanced Cyber Security Architect Engineer

Location: Duluth, Georgia, United States (Hybrid)

Industry: Automation Machinery Manufacturing

Work Setting: Hybrid

Are you passionate about protecting critical systems from cyber threats and building advanced security operations that keep organizations resilient? Join a high-performing cybersecurity team where you'll play a key role in monitoring, analyzing, and responding to security events while developing automation and incident response capabilities that strengthen security operations across complex industrial and enterprise environments.

Key Responsibilities

• Monitor and analyze security events, alerts, system logs, and network activity across critical infrastructure, operational technology (OT), and enterprise environments.
• Design, implement, test, and continuously improve security orchestration, automation, and response (SOAR) workflows and processes.
• Develop, troubleshoot, and optimize automated security playbooks to accelerate incident detection and response activities.
• Investigate escalated security alerts and accurately determine true-positive and false-positive findings.
• Conduct threat hunting, malware analysis, and threat modeling activities to identify emerging risks and vulnerabilities.
• Support digital forensic investigations by gathering evidence, preparing reports, and providing technical analysis.
• Evaluate existing security controls and recommend improvements to strengthen defensive capabilities and monitoring effectiveness.
• Develop practical remediation recommendations and communicate technical findings in a manner easily understood by both technical and non-technical stakeholders.
• Enhance detection capabilities through tuning of security rules, correlation logic, alert configurations, parsers, and automation scripts.
• Participate in incident investigations, root cause analysis, and remediation coordination efforts.
• Apply layered security principles and defense-in-depth strategies to improve organizational security posture.
• Create and distribute security advisories, awareness communications, and updates regarding emerging threats and vulnerabilities.
• Serve as an escalation point for complex security incidents and provide guidance during investigation and response activities.
• Mentor junior security analysts and support their technical development and operational effectiveness.
• Develop and maintain operational runbooks, knowledge base articles, standard operating procedures, and technical documentation.
• Stay current with cybersecurity trends, threat intelligence, regulatory developments, security advisories, and evolving attack techniques.
• Maintain expertise in security technologies, monitoring platforms, and incident response methodologies.

Required Qualifications

Security Operations & Incident Response

• Proven experience in cybersecurity, information technology, or a related technical discipline.
• Strong background in Security Operations Center (SOC) environments, cyber defense operations, incident response, and threat management.
• Experience investigating security events, conducting incident analysis, and supporting remediation activities.

SIEM & Security Monitoring

• Hands-on experience with Security Information and Event Management (SIEM) platforms and security monitoring technologies.
• Ability to analyze security logs, correlate events, and identify suspicious activity across diverse technology environments.
• Experience tuning detection rules, alerts, and monitoring use cases to improve security visibility.

SOAR & Security Automation

• Experience developing and managing Security Orchestration, Automation, and Response (SOAR) solutions.
• Strong knowledge of workflow automation, security playbook development, and response orchestration.
• Ability to streamline repetitive security processes through automation and integration.

Scripting & Technical Expertise

• Proficiency in Python or similar scripting languages for automation, analysis, and security tool integration.
• Experience developing custom scripts and automation solutions for cybersecurity operations.
• Strong troubleshooting, analytical, and problem-solving skills.

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related technical field.
• Industry-recognized certifications such as Security+, CEH, GCIH, GCFA, CCNA, ITIL Foundation, or equivalent credentials.
• Experience with modern SIEM, SOAR, security analytics, and log management platforms.
• Familiarity with threat intelligence, digital forensics, malware analysis, and incident investigation methodologies.
• Knowledge of cloud security, network security architecture, and operational technology (OT) security concepts.
• Strong communication and stakeholder management skills with the ability to explain complex security issues to varied audiences.
• Experience mentoring team members and contributing to continuous improvement initiatives.