Sr. SIEM AI Architect

Overview

We are seeking a Sr. SIEM AI Architect to design and build a cloud-native security analytics and observability platform. This is a hands-on architecture role responsible for designing scalable telemetry pipelines, security monitoring capabilities, and enterprise SIEM solutions across modern cloud environments.

This is not a SIEM administrator or project management role. The ideal candidate is a senior technical architect who can design end-to-end solutions, make architectural decisions, and work closely with security, cloud, platform, and engineering teams to deliver highly scalable, resilient systems.

Key Responsibilities

• Design and implement enterprise-scale SIEM and observability platforms.
• Architect scalable log collection, telemetry ingestion, and data processing pipelines from cloud platforms, applications, APIs, and security tools.
• Develop standardized telemetry models, data normalization, and enrichment strategies.
• Build high-throughput streaming architectures for security analytics and real-time monitoring.
• Design detection capabilities, correlation rules, behavioral analytics, alerting, and risk scoring frameworks.
• Support multi-cloud environments across AWS, Azure, and GCP.
• Develop resilient, highly available platform architectures with strong scalability, security, and governance.
• Partner with Security, Cloud Engineering, DevOps, Data Engineering, and Application Development teams to deliver enterprise observability solutions.
• Provide technical leadership, architecture guidance, documentation, and best practices for SIEM and observability initiatives.

Required Qualifications

• 10+ years of experience in SIEM architecture, security engineering, cloud security, observability, or platform engineering.
• Hands-on experience with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, Chronicle, or similar technologies.
• Experience designing large-scale log ingestion, telemetry, and security analytics platforms.
• Strong experience with cloud platforms including AWS, Azure, and/or GCP.
• Experience with streaming technologies such as Kafka, Kinesis, Event Hub, Pub/Sub, Flink, or similar.
• Experience with OpenTelemetry and modern observability frameworks.
• Knowledge of Kubernetes, microservices, distributed systems, and cloud-native architectures.
• Experience building detection logic, correlation rules, alerting, and security monitoring capabilities.
• Strong understanding of scalable platform design, security best practices, and enterprise architecture.
• Excellent communication and collaboration skills.

Preferred Qualifications

• Experience with AI/ML-driven anomaly detection or behavioral analytics.
• Familiarity with Infrastructure as Code (IaC) and platform automation.
• Knowledge of MITRE ATT&CK, threat detection methodologies, and security analytics.
• Experience building enterprise-scale, multi-tenant SaaS platforms.

Ideal Candidate

• Senior hands-on architect with strong SIEM and cloud expertise.
• Experienced designing scalable telemetry and observability platforms.
• Comfortable working across security, cloud, engineering, and DevOps organizations.
• Able to balance technical architecture leadership with hands-on implementation.