SecOps安全架构师 - 北中部地区（美国远程）
SecOps Security Architect - North Central region (Remote in the U.S.)
GuidePoint Security 提供值得信赖的网络安全专业知识、解决方案和服务，帮助组织做出更好的决策并降低风险。通过采用三层、全面的方法来评估安全态势和生态系统，GuidePoint 使一些国内顶级组织，如财富 500 强公司和美国政府机构，能够识别威胁、优化资源并集成最适合的解决方案以降低风险。
职位概述
我们正在寻找一位经验丰富的安全运营与数据架构师，以支持售前、解决方案架构、项目范围定义和技术交付，涵盖 SecOps 和数据分析服务。该角色将参与目标架构的开发、专业服务解决方案和技术创新路线图的制定，同时为客户提供“让他们惊艳”的服务，包括内部客户和同事。
安全运营与数据架构师必须展示出强大的架构能力、咨询能力、售前能力和高管沟通能力。该架构师必须通过影响力进行领导，并在制定与交付目标、客户优先事项、技术可行性、工作量、交付风险和预期业务成果一致的解决方案时，展现出强大的商业和财务敏锐度。
关于北美中部地区 SecOps 业务
安全运营业务负责帮助客户设计、实施、优化和成熟用于管理安全和运营数据的技术和运营模型。我们在 SOC、SIEM、SOAR、安全遥测、数据分析、可观测性、检测工程、自动化和新兴 AI 支持的安全运营领域提供咨询和工程服务。
我们的架构师、顾问、SecOps 工程师、数据工程师和平台专家团队专注于架构、技术交付、平台集成、数据质量、检测覆盖范围、自动化和运营成熟度。我们与客户经理、项目经理、技术供应商、客户管理层和工程团队合作，开发实用且可支持的解决方案。
重点领域包括：
- 将客户需求与适当的技术和服务产品对接。
- 提高技术范围定义和交付的准确性和一致性。
- 开发可重复使用的架构、估算模型和实施标准。
职位和职责：
- 领导技术调研并转化客户目标、环境和需求到技术方案。
查看英文原文
GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.
General Description
We are looking for an experienced Security Operations and Data Architect to support presales, solution architecture, engagement scoping, and technical delivery across SecOps and Data Analytics services. This role will engage in the development of target architectures, professional-services solutions, and technology roadmaps while providing “Wow Them” service to clients, internal customers, and co-workers.
The Security Operations and Data Architect must demonstrate strong architecture, consulting, presales, and executive communication skills. The architect must lead through influence and apply strong business and financial acumen when developing solutions that align delivery objectives, client priorities, technical feasibility, level of effort, delivery risk, and expected business outcomes.
About the North Central region SecOps Practice
The Security Operations Practice is responsible for helping clients design, implement, optimize, and mature the technologies and operating models used to manage security and operational data. We deliver advisory and engineering services across SOC, SIEM, SOAR, security telemetry, data analytics, observability, detection engineering, automation, and emerging AI-enabled Security Operations.
Our team of architects, consultants, SecOps engineers, data engineers, and platform specialists focuses on architecture, technical delivery, platform integration, data quality, detection coverage, automation, and operational maturity. We partner with account executives, project managers, technology providers, client leadership, and engineering teams to develop practical and supportable solutions.
Key areas of focus include:
- Connecting client requirements to appropriate technologies and service offerings.
- Improving the accuracy and consistency of technical scoping and delivery.
- Developing repeatable architectures, estimation models, and implementation standards.
Roles and Responsibilities:
- Lead technical discovery and translate client objectives, environments, constraints, and risks into current-state and target-state architectures.
- Provide presales support by developing solution approaches, architecture diagrams, technical presentations, proposals, and responses to client requirements.
- Define engagement scope, activities, assumptions, dependencies, responsibilities, exclusions, deliverables, acceptance criteria, and level-of-effort estimates.
- Provide architectural leadership and technical oversight across SecOps Engineering and Data Analytics engagements.
- Evaluate SIEM, SOAR, data pipeline, observability, automation, AI, and related technologies against client use cases, integration requirements, operating models, and existing investments.
- Develop and maintain reference architectures, discovery questionnaires, scoping tools, estimation models, implementation patterns, and technical standards.
- Mentor SecOps Engineers and SecOps Data Engineers while reviewing designs and deliverables for technical accuracy, scope alignment, and maintainability.
- Partner with account executives and regional sales teams to qualify opportunities, shape services, identify technical risks, and establish realistic client expectations.
- Support strategic client engagements, architecture workshops, technical escalations, and delivery-quality reviews.
- Maintain awareness of regional pipeline, delivery capacity, technology demand, and skills requirements to help align opportunities with available practice capabilities.
Required Experience and Education:
- Seven to ten years of experience in security operations, security architecture, SIEM engineering, data engineering, observability, consulting, or related fields.
- Demonstrated experience designing or leading SIEM, SOAR, security telemetry, data pipeline, observability, or security analytics engagements.
- Experience conducting client discovery, developing solution architectures, scoping professional-services engagements, and estimating engineering effort.
- Advanced understanding of SOC operating models, SIEM, SOAR, detection engineering, automation, security telemetry, data pipelines, and observability.
- Experience identifying technical assumptions, dependencies, delivery risks, acceptance criteria, and scope boundaries.
- Working knowledge of cloud architecture, APIs, authentication, networking, data formats, schemas, integration patterns, and access-control concepts.
- Ability to review technical queries, scripts, transformations, detection logic, automation workflows, and architecture documentation.
- Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field, or equivalent professional and military experience.
- Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.
Preferred Experience and Education
- Security architecture certification such as CISSP, ISSAP, SABSA, or a comparable credential.
- SIEM certification from Splunk, Microsoft, Google, Elastic, Palo Alto Networks, CrowdStrike, Rapid7, Sumo Logic, or Datadog.
- SOAR or automation certification from Splunk SOAR, XSOAR, Fusion, SentinelOne HyperAutomation, Torq, or Tines.
- Data pipeline or observability certification from Cribl, Onum, Databahn, Datadog, Dynatrace, Splunk, or Elastic.
- Cloud architecture or security certification from AWS, Microsoft Azure, or Google Cloud.
- Experience supporting account executives through technical presales, proposal development, and client presentations.
- Experience developing service offerings, estimation models, reference architectures, or reusable consulting methodologies.
Travel Requirements:
- Up to 10% travel
Physical Requirements:
- Sedentary work
- Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
- Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day
We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.
Why GuidePoint?
GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.
Some added perks….
- Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
- Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)
- Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
- 12 corporate holidays and a Flexible Time Off (FTO) program
- Healthy mobile phone and home internet allowance
- Eligibility for retirement plan after 2 months at open enrollment
- Pet Benefit Option