The Role
We are seeking a Security Architect with deep expertise in SIEM platforms (ArcSight preferred), log processing technologies (Logstash or similar) and security data architectures. This role focuses on scoping and sizing workloads, defining technical architecture, and helping delivery teams overcome blockers related to integrations, data flows and complex onboarding.
* Scope and size SIEM onboarding/integration workloads.
* Define end-to-end SIEM and log ingestion architectures.
* Provide architectural leadership for ArcSight (ESM, Logger, Smart/FlexConnectors).
* Support teams by resolving blockers in parsing, ingestion and data pipeline design.
* Ensure reliable, scalable, high-quality security telemetry.
* Produce architecture standards, diagrams and design reviews.
Skills
* Expertise in Security Architecture, SIEM engineering, or similar technical roles.
* Experience with ArcSight (ESM, Logger, SmartConnectors, FlexConnectors).
* Solid understanding of SIEM design principles, schema/taxonomy design and event normalisation.
* Experience with Logstash, LogPipeline frameworks, or similar ETL/log processing technologies.
* Strong knowledge of enterprise logging, network/security infrastructure and event sources.
* Ability to translate business/security requirements into scalable technical solutions.