Senior Cybersecurity Solutions Architect

Bloomberg’s Cyber Security Operations Center (CSOC) is hiring a PTO (Process & Technology Optimization) staff member to design, build, and integrate scalable process and technology solutions that improve cyber security operations.

Responsibilities

• Own one or more CSOC technology and process areas (examples: Network Security, EDR, Cloud, AI, Telemetry) and manage/integrate associated vendor products
• Represent CSOC to external stakeholders and ensure solutions align with CSOC vision through ongoing oversight
• Identify systemic cybersecurity operations issues, document resolution methods, and coordinate with management to prioritize enterprise remediation
• Formalize and disseminate security operations best practices to make operations more repeatable
• Pilot and evaluate emerging technologies to determine practical adoption
• Mentor PTO and broader CSOC staff earlier in their careers, supporting growth toward greater ownership over time
• Work closely with CSOC functions including Event Analysis, Threat Hunting, Incident Response, Detection Engineering, and Threat Intelligence to understand blockers and mission challenges
• Transform CSOC operations to improve analyst speed, capabilities, and coverage using automation and new controls, technologies, or processes
• Identify, collect, and surface measurable metrics from PTO-managed products to enable data-driven process improvement across CSOC
• Design and prioritize scalable, robust, and innovative process and technology solutions
• Validate, reframe, and adapt user-originated solutions to ensure alignment with overall vision and an ideal execution and maintenance path (self-initiated, engineering-managed, or vendor-designed)
• When appropriate, design, execute, and maintain internally built products using code or Low Code/No Code options (including SOAR)
• Build tooling and processes that surface the right information when needed; default to direct product access only when it is not practical
• Oversee development and implementation of technical solutions, ensuring quality standards and delivery timelines are met

Requirements

• 5+ years of experience in engineering, systems design, or a cybersecurity operations center role (analyst, detection engineer, security engineer, or incident responder)
• Experience with data storage and retrieval systems (examples: SIEM, databases, data lakes)
• Ability to analyze complex processes and identify optimization opportunities
• Ability to quickly learn new technologies and products in a frequently evolving security landscape
• Experience with or exposure to automation and Low Code/No Code platforms such as SOAR
• Experience managing vendor relationships or driving delivery through external engineering or product teams
• Proven ability to break down complex technical and operational problems into components
• Creative, strategic mindset focused on ambitious improvements
• Inquisitive, attentive listening style
• Clear and concise written and verbal communication
• Expert knowledge sharing by acquiring key context and communicating it effectively to other team members
• Experience providing feedback, coaching, or mentorship

Technologies

• SIEM
• Databases
• Data lakes
• SOAR
• EDR
• Python
• Low Code/No Code
• GenAI
• Threat Intelligence Platforms
• Email Analysis
• Malware Sandboxing
• Network Intrusions Detection
• Data Loss Prevention
• IaaS
• PaaS
• SaaS

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Short and long term disability benefits
• 401(k) + match
• Life insurance
• Paid holidays
• Paid time off
• Various wellness programs
• Merit increases
• Incentive compensation (exempt roles only)

We’d love to see

• 7+ years of experience working in or with a cybersecurity operations center (analyst, detection engineer, security engineer, or incident responder)
• 7+ years of experience as a security engineer supporting or designing security operations systems, including capabilities such as EDR, Threat Intelligence Platforms, Email Analysis, Malware Sandboxing, Network Intrusions Detection, and Data Loss Prevention
• Python or scripting skills sufficient to design and build custom integrations, or extend automation platforms beyond built-in capabilities
• Experience protecting cloud infrastructure (IaaS, PaaS, SaaS), operating security tooling running in the cloud, or applying GenAI capabilities to security use cases

Location: New York, NY (onsite)
Salary: USD 190,000 - 260,000 per year