Plain Concepts logo
Plain Concepts

Rediscover the meaning of technology | Spain, USA, UK, Germany, Netherlands, Australia and Romania.

Security Automation Architect (SIEM/SOAR & AI)

Artificial IntelligenceArtificial IntelligenceFull TimeRemoteMid LevelTeam 201-500Since 2006H1B No SponsorCompany SiteLinkedIn

Location

Worldwide

Posted

13 days ago

Salary

0

Seniority

Mid Level

No structured requirement data.

Job Description

Security Automation Architect (SIEM/SOAR & AI)

Plain Concepts

Role Description Transform security operations for the AI era. We are looking for a senior cybersecurity professional to help redesign how modern Security Operations Centers detect, investigate and respond to threats by combining Detection & Response expertise, security automation, AI automation and agentic AI capabilities. The role will focus on turning traditional SOC processes into intelligent, controlled and scalable workflows, where AI agents can assist analysts, automate repetitive tasks, enrich investigations, recommend actions and accelerate response while maintaining human oversight, auditability and security control. This is a hands-on architecture role at the intersection of SecOps, SIEM/SOAR, Detection Engineering, Incident Response and AI-native automation. The ideal candidate will help organizations move from manual, ticket-driven security operations toward a new operating model where analysts, automation and AI agents work together to increase speed, consistency and resilience. Key Responsibilities - AI-native SOC transformation - Analyze current SOC operating models, L1/L2 activities, escalation flows and response procedures. - Identify opportunities to automate, augment or redesign detection and response processes using AI automation and agentic workflows. - Translate analyst knowledge into structured, reusable and automatable workflows. - Define how AI agents can support alert triage, enrichment, investigation, prioritization and response. - Establish clear boundaries between autonomous actions, AI-assisted recommendations and human decision points. - Help organizations evolve from traditional SOC processes to AI-enabled security operations. - Detection & Response automation architecture - Define automation blueprints for common detection and response use cases. - Convert incident response playbooks into structured workflows. - Define decision trees, enrichment steps, evidence requirements and output formats. - Support the design of automated triage, false positive reduction and incident prioritization. - Create reusable patterns for investigation, containment, escalation and reporting. - Ensure automation is reliable, explainable and operationally useful for SOC teams. - Agentic security operations design - Define agent roles, responsibilities, permissions and execution boundaries. - Design human-in-the-loop models for sensitive or high-impact actions. - Define approval workflows, escalation paths and confidence thresholds. - Ensure agent recommendations are explainable, traceable and auditable. - Define logging and evidence requirements for AI-assisted decisions. - Identify and mitigate risks such as unsafe automation, hallucination, excessive permissions, prompt injection, data leakage or incorrect response actions. - Work with AI engineering teams to ensure agentic workflows are secure, controlled and aligned with security operations needs. - SIEM, SOAR and security tooling integration - Human-in-the-loop operating model - Continuous improvement and operational impact Relevant Technology Exposure - SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, Chronicle or similar. - SOAR platforms and automation frameworks. - XDR / EDR platforms and cloud security platforms. - Identity and access management systems. - Threat intelligence platforms. - Case management and ticketing tools. - AI automation platforms, agentic AI frameworks and enterprise AI orchestration environments. - Microsoft Foundry, Microsoft Security Copilot, Logic Apps, Azure Functions or automation runbooks, where relevant. Qualifications - 6+ years of experience in cybersecurity, with strong background in Detection & Response, SOC operations, security automation, SIEM engineering or security architecture. - Proven experience designing or implementing AI automation, AI-assisted workflows, agentic automation or AI-enabled operational processes. - Strong understanding of how modern SOCs operate across L1, L2 and L3 functions. - Experience designing or improving detection use cases, triage processes, incident response procedures and SOC playbooks. - Hands-on experience with SIEM and/or SOAR platforms. - Ability to translate analyst procedures into structured workflows, decision trees and automation requirements. - Good understanding of alert enrichment, case management, incident lifecycle management and escalation models. - Practical understanding of identity, permissions, API integrations and secure automation design. - Ability to work with SOC analysts, security architects, engineering teams and senior client stakeholders. - Strong documentation skills, especially for operational procedures, use case specifications and technical architecture. - Ability to design automation that works in real SOC environments, not just theoretical diagrams. Desirable Experience - Microsoft Sentinel, Defender XDR or Microsoft Security Copilot. - Microsoft Foundry or Azure AI-based automation. - Agentic AI workflows in cybersecurity or IT operations. - Loop generation and maintenance. - SOC automation / SOAR implementation. - Logic Apps, Azure Functions or automation runbooks. - KQL, SPL or equivalent SIEM query languages. - Detection engineering and MITRE ATT&CK mapping. - Threat intelligence enrichment. - Incident response automation. - XDR / EDR platforms and cloud security operations. - Case management integration. - Enterprise SOC transformation programs. - MDR/MSSP operating models. - Purple teaming or detection validation. - DevSecOps or infrastructure automation. - GRC/control evidence automation for security operations. Benefits - Salary determined by the market and your experience šŸ¤‘ - Flexible schedule 35 Hours / Week šŸ˜Ž - Fully remote work (optional) šŸŒ - Flexible compensation (restaurant, transport, and childcare) ✌ - Fully free health insurance, with a co-payment for dental services šŸš‘ - Individual budget for training or equipment and free Microsoft certifications šŸ“š - English lessons šŸ—½ - Birthday day off 🌓🄳 - Monthly bonus for electricity and Internet expenses at home šŸ’» - Discount on gym plan and sports activities šŸ” - Plain Camp (annual team-building event) šŸŽŖ - Extra perks: events attendance and speakers, welcome pack, baby basket, Christmas basket, discount portal for employees āž• - The pleasure of always working with the latest technological tools! Company Description Plain Concepts is a global company of over 500 people passionate about technology and innovation. Since our founding, we have grown through technical proficiency and confidence in ideas that others might consider risky, creating custom solutions for our clients. With offices in more than 6 countries, our mission is to continue to drive cutting-edge projects around the world. We are highly committed to technical excellence. We are known for developing highly customized projects, offering specialized technical consultancy and training. Thanks to the great work of our technicians, we have been recognized for our ability to lead innovative projects that generate value, from artificial intelligence to blockchain, driving solutions that help companies optimize their performance.

Related Job Pages

More Artificial Intelligence Jobs

Toloka Annotators logo

Freelance: recording daily tasks for AI project

Toloka Annotators

Be a key player in crafting the high-quality data essential for AI innovation. Perfect for aspiring freelancers

Part TimeRemoteTeam 51-200

Role Description Buscamos personas para grabar actividades cotidianas desde una perspectiva en primera persona utilizando una aplicación móvil. Puedes grabar tareas que ya realizas normalmente, como: - Cocinar - Limpiar - Doblar ropa - Ordenar espacios - Hacer jardinería - Pasear al perro Los videos ayudan a entrenar sistemas de IA y robótica para comprender cómo las personas interactúan con el mundo real. Qualifications - No se requiere experiencia previa. Requirements - iPhone 16/17, Google Pixel 6+ o Samsung Galaxy S21+ o superior - Acceso a internet - Nivel bÔsico de inglés para registrarte y utilizar la plataforma Benefits - Horarios flexibles - Trabajo remoto por proyecto - USD $10 por hora de contenido aprobado - Bono adicional por la primera hora aprobada

United States
$10 / hour
Job Closed
Full TimeRemoteTeam 201-500Since 2006H1B No Sponsor

• Participate in active client AI projects as the hands-on AI specialist • Design and build AI agent workflows, prompt chains, and orchestration logic • Develop and refine prompts for specific business use cases (prompt engineering) • Analyze existing client workflows and identify opportunities for AI enhancement • Create working prototypes and proofs-of-concept to validate approaches • Collaborate with developers on implementation handoff and technical specifications • Support presales engagements with AI solution proposals and feasibility assessments • Conduct business domain analysis to identify where AI creates genuine value • Translate client business problems into AI-addressable solutions • Prepare demonstrations and prototype artifacts for client presentations • Provide input on effort estimation for AI components of proposals • Monitor AI news, model releases, tool updates, and emerging techniques • Evaluate new AI platforms, frameworks, and services for potential adoption • Experiment with new approaches and share findings • Document patterns, techniques, and lessons learned from project work • Contribute to internal knowledge bases and training materials • Design agentic workflows using orchestration frameworks (e.g., n8n, LangGraph, custom pipelines) • Optimize existing business workflows by introducing AI capabilities • Define conversation flows, tool usage patterns, and handoff logic for AI agents • Specify context management, memory strategies, and retrieval patterns

Hungary
Full TimeRemoteTeam 501-1,000H1B No Sponsor

• Manage a caseload of learners, building trusted relationships through structured one‑to‑one coaching and group workshops • Support learners at different stages of confidence and digital maturity, adapting your approach to meet individual needs • Create an inclusive, psychologically safe learning environment where learners feel comfortable asking questions, practising new skills, and learning from mistakes • Encourage learners to take ownership of their development, building confidence through practical application and reflection • Coach learners to use Microsoft 365 tools to improve everyday productivity • Guide learners in the practical use of Microsoft Copilot and other AI tools • Support learners to develop safe, ethical, and responsible AI habits • Help learners recognise opportunities to apply AI enabled workflows in real workplace tasks • Support learners to develop foundational digital support skills, such as diagnosing simple application issues, providing user support, and troubleshooting • Progress, Quality & Outcomes: Guide learners through programme milestones, assessments, and portfolio evidence • Collaborate with colleagues across Operations, Product, and Curriculum to deliver a consistent and high-quality learner experience

United Kingdom
ServiceNow logo

Solution Architect - AI & Data

ServiceNow

As the AI platform for business transformation, we're putting AI to work across organizations — freeing people for work that matters. Making old tech work with new tech. Reaching across departments, from the front office to the back office and every office in between. Our ambition? To become the AI defining enterprise software company of the 21st century (or "AI DESCO21C," as we like to call it). With more than 8,400+ customers, we serve approximately 90% of the Fortune 500Ā®, and we're proud to be a Fortune 100 Best Companies to Work ForĀ® and World's Most Admired Companiesā„¢. Explore your future career with us, visit www.careers.servicenow.com From Fortune. Ā©2026 Fortune Media IP Limited. All rights reserved. Used under license.

Full TimeRemoteTeam 10,001+Since 2004H1B Sponsor

Company Description It all started in sunny San Diego, California in 2004 when a visionary engineer, Fred Luddy, saw the potential to transform how we work. Fast forward to today - ServiceNow stands as a global market leader, bringing innovative AI-enhanced technology to over 8,100 customers, including 85% of the Fortune 500®. Our intelligent cloud-based platform seamlessly connects people, systems, and processes to empower organizations to find smarter, faster, and better ways to work. But this is just the beginning of our journey. Join us as we pursue our purpose to make the world work better for everyone. Job Description The Team The Customer Excellence Group at ServiceNow works with customers to help them achieve their business outcomes by providing prescriptive guidance. As part of the Customer Excellence Group, you will work with our customers to drive consumption, adoption, and customer satisfaction and ultimately help our customers grow their business on the ServiceNow platform by getting them to see the value of their ServiceNow investment. Solution Architect - AI & Data, Expert Services As part of the Expert Services AI Practice, the Solution Architect - AI & Data will serve as a senior strategic and technical lead, reshaping how enterprise organizations adopt AI at the core of their operating models. This role goes beyond implementation - it bridges C-suite advisory, enterprise architecture, and organizational change to deliver lasting transformation outcomes. The Solution Architect - AI & Data will operate at the intersection of AI strategy, solution architecture, and customer success - leading engagements from transformation vision and use-case definition through architecture design, governance, adoption, and ongoing value realization. What you will do in this role: AI Strategy & Transformation Advisory - Lead enterprise AI transformation engagements - from opportunity identification and business case development through to operating model design and value realization. - Advise C-suite and senior stakeholders on AI strategy, prioritization frameworks, and transformation roadmaps tailored to their industry, maturity, and risk appetite. - Facilitate discovery workshops, current-state assessments, and future-state visioning sessions to establish a shared transformation agenda. - Define AI-enabled target operating models, including process redesign, workforce impact analysis, and governance structures. Solution Architecture & Delivery Leadership - Design end-to-end solution architectures spanning Now Assist, AI Agents, Agentic workflows, AI Control Tower, RAG, knowledge graphs, and enterprise integrations (A2A, MCP). - Lead scoping and solutioning for complex, multi-workload AI engagements - ensuring architectural integrity, scalability, and alignment to customer outcomes. - Provide hands-on architecture leadership during pilot and early-phase delivery, establishing patterns and standards for broader team execution. - Develop reusable practice IP: reference architectures, deployment patterns, transformation playbooks, and verticalized use-case catalogs. - Architect enterprise data catalog strategies using platforms defining target-state designs that align metadata management, data lineage, and governance structures to broader AI and business objectives. - Define integration patterns and architectural standards for connecting data catalog solutions across heterogeneous enterprise environments - cloud platforms, data warehouses, BI layers, and ServiceNow workflows. Data Architecture & Catalog Strategy - Lead the architectural design of enterprise data catalog programs - defining scope, platform selection criteria, governance operating models, and phased adoption roadmaps. - Advise on the strategic application of knowledge graph concepts, semantic technologies, and ontological frameworks (RDF, SPARQL) to enterprise data and AI use cases. - Shape data architecture principles and standards that underpin AI readiness - including data lineage, metadata quality, classification taxonomies, and access governance. - Translate complex data architecture requirements into clear, actionable designs that can be executed by delivery and technical teams. - Define success metrics and maturity benchmarks for data catalog programs, enabling customers to track progress and demonstrate value to executive stakeholders. AI Governance, Risk & Responsible AI - Define and embed AI governance frameworks covering data stewardship, model risk, bias controls, audit trails, and compliance postures. - Support customers in operationalize responsible AI practices aligned to regulatory requirements and internal policies. - Establish data governance frameworks that position metadata management, data stewardship, and knowledge graph capabilities as foundational trust layers for enterprise AI programs. - Guide customers in regulated industries on aligning data catalog and governance architectures to compliance and regulatory obligations, embedding controls into the design rather than as an afterthought. - Partner with AI Control Tower to establish monitoring, observability, and continuous optimization capabilities post-deployment. Adoption, Enablement & Change Management - Lead AI adoption strategies including readiness assessments, stakeholder engagement plans, AI literacy programmers, and change communications. - Define adoption KPIs and value realization metrics; track and report outcomes; provide consultative guidance for continuous optimization and expansion. - Coach customer teams to build internal AI capability, reducing dependency and accelerating long-term self-sufficiency. - Monitor adoption, usage, and value realization metrics post-deployment; provide recommendations for risk mitigation and growth. Practice Development & Thought Leadership - Collaborate cross-functionally with Sales, Solution Consulting, Customer Success, Platform, and Product teams to embed AI advisory across the customer lifecycle. - Build and maintain industry-specific AI advisory playbooks and frameworks - verticalized use-case catalogs, value models, governance templates, and deployment patterns - to support scalable, repeatable delivery. - Act as a thought-leader internally and externally: contribute to white papers, points-of-view, reference architectures, best-practice guides, and represent the organization at AI forums and customer briefings. - Support pre-sales by qualifying opportunities, shaping proposals, and presenting transformation vision to executive buyers. Qualifications To be successful in this role, you will have - Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI's potential impact on the function or industry. - 10+ years of experience in management consulting, enterprise architecture, or a senior technology advisory role, with a demonstrated focus on Artificial Intelligence, Machine Learning, or digital transformation at enterprise scale. - Experience facilitating executive AI strategy engagements - including visioning workshops, maturity assessments, and transformation roadmap sessions - where the output is a customer-owned AI narrative, not just a delivery plan. - Proven track record designing and managing complex, multi-stakeholder AI or digital-transformation engagements - including use-case definition, business case development, integration, data strategy, governance, and operational adoption. - Strong understanding of enterprise data architecture, data quality, knowledge management, integrations, and compliance and regulatory frameworks. - Demonstrated ability to architect enterprise data catalog and metadata management strategies, with knowledge of platforms. - Excellent communication and interpersonal skills - ability to articulate technical and business value to C-level executives, align stakeholders, and influence strategic decision-making. - AI domain knowledge required, including: Generative AI Skills, AI Agents and Agentic workflows, Retrieval-Augmented Generation (RAG), Knowledge Graphs, Agent-to-Agent (A2A), and Model Context Protocol (MCP). - Experience working in fast-paced, dynamic environments with capability to manage ambiguity and tailor consulting deliverables to different customer maturity levels, from early adopters to AI-ready enterprises. - Working knowledge of knowledge graph principles, semantic technologies, and standards (RDF, SPARQL) as applied to enterprise data architecture. - Broad familiarity with the ServiceNow platform and modules (ITSM, CSM, FSM, HRSD, App Engine), ideally including implementation or architecture experience. ServiceNow certifications (Certified System Administrator, Certified Implementation Specialist, Certified Technical Architect) are desirable. - AI/ML certifications (e.g. AWS Machine Learning Specialty, Google Professional Machine Learning Engineer, or equivalent) are desirable. - Background in one or more target industries - Financial Services, Healthcare, Public Sector, Manufacturing, or Retail - is highly desirable. Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here . To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact globaltalentss@servicenow.com for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2025 Fortune Media IP Limited. All rights reserved. Used under license.

Georgia
Job Closed