Global SOC Enterprise Architect and Consultant
Kyndryl
**Who We Are**
At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.
**The Role**
Your Role
At Kyndryl, our Security Consultants are game changers, pushing boundaries to protect organizations from evolving threats. As a Global SOC Enterprise Architect, you will play a pivotal role in designing, securing, and optimizing Security Operations Centers (SOCs) and cybersecurity frameworks.
Your expertise will drive enterprise security architecture, risk management, and security operations, ensuring robust SOC infrastructure, threat detection, and incident response capabilities. You will collaborate with global teams to integrate security tools, automate processes, and implement best-in-class security solutions.
Key Responsibilities
SOC Architecture & Strategy
• Lead the design and evolution of a global Security Operations Center (SOC) architecture, ensuring alignment with business objectives, risk appetite, and compliance requirements.
• Define and enforce a SOC reference architecture (tools, data flows, integrations, operating models).
• Establish and guide regional and virtual SOCs, ensuring consistent visibility, playbooks, and KPIs globally.
• Design the operating model (24/7, follow-the-sun, hybrid staffing, managed services vs. in-house).
• Create blueprints for integrating SIEM, SOAR, EDR/XDR, TIP, UEBA, NDR, and other key technologies.
Security Consulting & Advisory
• Serve as a trusted advisor to security leadership, IT, and business units on SOC best practices, incident response, threat detection, and governance.
• Conduct current-state assessments and gap analyses for security operations programs.
• Define roadmaps for SOC maturity, aligned with MITRE ATT&CK, NIST CSF, ISO 27001, etc.
• Support M&A due diligence and SOC integration strategies for acquired entities.
• Advise on SOC compliance requirements, including GDPR, PCI DSS, SOX, HIPAA, etc.
Security Technology Architecture
• Define and validate architecture for global SIEM (e.g., Splunk, Sentinel, QRadar), SOAR, EDR/XDR, Threat Intelligence Platforms, and log ingestion pipelines.
• Ensure integration with cloud platforms (AWS, Azure, GCP), DevSecOps pipelines, identity platforms, and third-party security services.
• Design logging architecture and telemetry sources across endpoints, servers, cloud, and OT environments.
• Lead the evaluation, PoC, and implementation of new SOC technologies and analytics platforms.
Governance, Metrics & Optimization
• Define SOC governance model, roles, and responsibilities (e.g., Tier 1–3, threat hunting, IR, engineering).
• Establish KPIs and SLAs for threat detection, triage, response time (MTTD/MTTR), and coverage.
• Drive SOC automation and playbook development to improve operational efficiency and response speed.
• Lead continuous improvement efforts through Red Team/Blue Team exercises, simulations, and post-mortems.
• Benchmark performance using industry frameworks and threat intelligence.
**Who You Are**
**Required:**
+ 10+ years in cybersecurity, with **5+ years in SOC architecture or consulting roles** .
+ Deep understanding of **SOC operating models** , **incident response processes** , and **threat detection technologies** .
+ Experience architecting **enterprise SOC environments** across **on-premises, hybrid, and cloud ecosystems** .
+ Strong knowledge of security tools: **SIEM, SOAR, EDR/XDR, NDR, UEBA, TIP** , etc.
+ Familiarity with **regulatory frameworks and compliance standards** (e.g., NIST, ISO 27001, MITRE ATT&CK, CIS, PCI DSS).
+ Hands-on experience with **cloud security logging and monitoring** (Azure Sentinel, AWS GuardDuty, GCP SCC, etc.).
+ Experience working in or advising **global organizations** with complex security requirements.
**Preferred:**
+ Certifications: **CISSP, CISM, GCIA, GCIH, SABSA, TOGAF, AWS/Azure/GCP security certs** .
+ Familiarity with **Security Fusion Centers** , **Cyber Threat Intelligence** , and **Managed SOC models (MSSP/MDR)** .
+ Experience deploying **AI/ML or GenAI** for alert triage, playbook generation, or threat analysis is a plus.
+ Working knowledge of **DevSecOps practices** and integration of security into CI/CD pipelines.
**Soft Skills:**
+ Strategic thinker with the ability to **translate security needs into business-aligned solutions** .
+ Effective communication and leadership skills — able to communicate with both **technical and executive audiences** .
+ Adept at navigating **global organizations, multicultural teams** , and **cross-functional environments** .
+ Proven ability to lead **complex projects and change initiatives** in large enterprises.
**Being You**
Diversity is a whole lot more than what we look like or where we come from, it’s how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we’re not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you – and everyone next to you – the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That’s the Kyndryl Way.
**What You Can Expect**
With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter – wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations. At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.
**Get Referred!**
If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.
Kyndryl is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics. Kyndryl is also committed to compliance with all fair employment practices regarding citizenship and immigration status.
Por favor confirme su dirección de correo electrónico: Send Email