> Markdown version of [/jobs/ext/517911-security-architect](https://www.wearedevelopers.com/jobs/ext/517911-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Architect - **Company:** The Smart - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, ARM Architecture, Bash Shell, Cyber Security, Linux, Intrusion Detection and Prevention, Python (Programming Language), Performance Tuning, Windows PowerShell, Runbook, Security Information and Event Management, Mitre Att&ck, Information Technology - **Published:** June 10, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=9327cd19b68064e0 ## About the Role Do you have experience in Stakeholder relationship building?, Do you have a Bachelor's degree?, Senior Level (5 or more years of relevant experience), * Bachelor's degree in Information Technology, Information Security, or related field, or equivalent professional experience * 5 or more years of experience supporting large IT environments or system deployments * 5 or more years of experience with scripting and automation using Python, Bash, PowerShell, or similar languages * Experience with Sigma, YARA, and other industry-standard detection languages * Experience working with the MITRE ATT&CK framework * Proven experience with detection rule development, tuning, or security monitoring improvement * Strong written and verbal communication skills, * Experience with the Palo Alto Cortex XSIAM platform * Deep understanding of Windows and Linux artifacts * Experience working in multi-tenant environments * Experience supporting multi-agency or enterprise security service projects * CISSP, CISA, CISO, or equivalent advanced security certification * Additional security certifications such as CEH, OSCP, or GPEN * Vendor certifications in detection engineering * Candidate located in or near Columbia, South Carolina Core Skills & Attributes * Strong analytical and investigative mindset * Ability to identify detection gaps and translate findings into actionable improvements * Strong scripting and automation capabilities * Clear communication with technical and non-technical stakeholders * Customer-focused approach for agency-facing engagement * Strong documentation discipline and attention to operational detail * Ability to collaborate effectively across SOC, engineering, and stakeholder teams ## Description The Security Architect - Consultant serves as a detection engineer supporting enterprise security monitoring and response capabilities. This role focuses on creating, tuning, and maintaining detection rules within a centralized monitoring environment. The position works closely with SOC analysts, threat hunters, engineering teams, and agency stakeholders to improve detection coverage, reduce false positives, and strengthen enterprise security operations., Detection Engineering & Rule Development * Review, tune, and maintain existing detection rules within the SIEM environment * Develop new detection rules and solutions to address identified coverage gaps * Monitor threat intelligence sources to identify new detection use cases * Use industry-standard detection approaches to improve threat visibility and response effectiveness Coverage Analysis & Threat Alignment * Perform gap analysis of current detection coverage * Partner with threat hunting teams to identify and remediate detection gaps * Align detection logic with known adversary tactics, techniques, and procedures * Apply MITRE ATT&CK mapping to support detection strategy and coverage analysis SOC Collaboration & Operational Support * Work with SOC analysts to create, validate, and tune detection rules * Coordinate with engineering, SOC, and agency staff to meet security operations goals * Support troubleshooting and refinement of monitoring workflows * Provide technical input for security operations improvement initiatives Documentation, Runbooks & Reporting * Document detection processes, runbooks, and troubleshooting steps * Create and maintain documentation supporting detection engineering and monitoring workflows * Support dashboard creation and reporting for security operations visibility * Communicate detection updates, findings, and recommendations to stakeholders Stakeholder Engagement & Service Adoption * Engage with agency stakeholders to promote and improve adoption of centralized security services * Provide clear communication and customer-focused support for agency-facing security needs * Support multi-agency and enterprise service delivery through consistent processes and documentation ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [MCP doesn’t suck — your agent does](https://www.wearedevelopers.com/videos/100202-mcp-doesn-t-suck-your-agent-does) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)