As a Senior SecOps Security Architect, you will play a key role in protecting SGS's global technology
landscape by combining security architecture, engineering, operational excellence and technical
leadership.
You will work across multiple security domains, partnering with infrastructure, cloud, networking and
application teams to design, implement and optimize security controls while ensuring our security
platforms operate effectively at scale.
A key part of the role will be strengthening our Security Information and Event Management (SIEM)
capabilities, helping improve security monitoring, log management, detection engineering, alerting and
incident investigation across our global environment.
This position offers a rare opportunity to combine architecture, project work, technical ownership,
automation and operational security in a truly global environment.
What You'll Do
Security Architecture & Engineering
- Design and improve enterprise security controls, technical standards and security baselines.
- Define security requirements for new infrastructure, cloud and application initiatives.
- Contribute to security architecture decisions, risk mitigation and security-by-design across projects.
Security Platform & SIEM Ownership
- Own and continuously improve key security platforms, including CrowdStrike Falcon / NG SIEM, Netskope, Cisco Umbrella and F5 WAF.
- Strengthen SIEM capabilities across log ingestion, correlation, alerting, dashboards and security monitoring use cases.
- Develop and optimize detection rules and integrate security data from endpoint, cloud, identity, network and application environments.
- Work with SOC teams to improve detection coverage, reduce false positives and enhance overall monitoring effectiveness.
Security Operations
- Support incident response, threat detection, threat hunting and security investigations.
- Troubleshoot security alerts and contribute to remediation, forensic analysis and root cause investigations.
- Identify gaps in controls, monitoring or detection capabilities and drive technical improvements.
Innovation, Automation & Governance
- Automate security processes and identify opportunities to improve operational efficiency.
- Evaluate new cybersecurity technologies and contribute to PoCs and solution assessments.
- Maintain security documentation, runbooks and operational procedures.
- Support audit and compliance activities where required.