Sr SOC Architect at The Judge Group Inc. in Harrisburg, Pennsylvania

Job Description:

Location: Harrisburg, PA

Description: Our client is currently seeking a Sr SOC Architect

Job Purpose and Summary:



The Sr. Security Operations Center Architect is responsible for designing, implementing, and optimizing the NextGen Security Operations Center infrastructure. This role involves working closely with cross-functional teams to ensure SOC capabilities align with industry best practices and effectively mitigate security risks. The position requires a high level of proficiency and operates under limited supervision.



Key Responsibilities:

• Develop and maintain a robust SOC architecture supporting threat detection, incident response, and threat hunting across a hybrid cloud environment.


• Evaluate and integrate security tools and platforms (e.g., SIEM, EDR, SOAR, NDR) to enhance SOC operations.


• Create and maintain incident response playbooks, SOPs, and runbooks for efficient SOC operations.


• Conduct SOC capability assessments and maturity analysis to identify gaps and areas for improvement.


• Establish and optimize monitoring strategies and use cases to improve threat detection and proactive monitoring.


• Develop strategic relationships with internal and external stakeholders to align SOC with broader security strategies.


• Provide guidance and technical mentorship to SOC analysts and security engineers within the ESO.


• Ensure SOC compliance with internal and regulatory requirements (e.g., NIST SP 800-53) and contribute to audit readiness efforts.


• Stay current with emerging threats and trends, recommending changes to SOC architecture and processes as needed.


• Prepare detailed emerging threat reports using threat feeds and share findings with agency stakeholders.


• Assist in developing metrics and dashboards for senior management reporting.


• Perform scenario-based retroactive threat hunting periodically.


• Review alerts and findings from LogRhythm and cloud-based security tools (e.g., AWS Security Hub, AWS Guard Duty, MS Defender for Endpoints, Trend Micro Vision One).


• Continuously monitor existing information security solutions and security control effectiveness.


• Proactively identify threats and vulnerabilities, and analyze data to detect unauthorized access to networks and systems.


• Evaluate the type and severity of security events, resolve issues, or follow escalation procedures as needed. Lead forensics investigations when required.


• Triage information security events, prioritize them, and escalate as necessary.


• Analyze alerts and log events to identify potential security threats and initiate incident response procedures.


• Gather relevant documentation and evidence related to incidents.


• Collaborate with various teams to identify technical controls to meet specific security requirements.


• Perform self-assessments of security controls to determine effectiveness, sufficiency, and gaps.

Contact: chamilton@judge.com


This job and many more are available through The Judge Group. Find us on the web at www.judge.com Apply Now