Security Architect - SC Cleared

- Must have active SC clearance - Proven experience in architecting a SIEM capability using the Elastic Stack (Elasticsearch, Logstash, Kibana, Beats) - Strong skills in defining and implementing SIEM architecture - Experience designing log ingestion pipelines, data models, and correlation rules for security monitoring - Familiarity with developing observability frameworks integrating logs, metrics, and traces - Experience deploying and configuring ElasticSearch clusters, Kibana dashboards, and Logstash pipelines - Knowledge of integrating SIEM with cloud-native observability tools (AWS CloudWatch, Azure Monitor, GCP Operations Suite) - Ability to automate log collection and enrichment using Beats, OpenTelemetry, and scripting - Experience in building and maintaining SIEM use cases, alerts, and dashboards for threat detection - Knowledge of mapping detection rules to frameworks like MITRE ATT&CK, STRIDE, and NIST CSF - Experience collaborating with SOC teams to refine incident response workflows - Understanding of aligning SIEM architecture with Secure by Design and Zero Trust principles - Knowledge of compliance with ISO 27001, PCI DSS, etc. - Strong documentation skills for architecture, SyOps, and security standards