Security Researcher / SOC Architect

Role overview Help shape how automated security systems investigate threats by capturing the methods experienced SOC analysts use. You will translate hands-on security expertise into investigation workflows, test scenarios, and guidance for engineers building AI-assisted tools.

Responsibilities - Document SOC investigation methods and operational workflows. - Assess the quality of investigations performed by autonomous agents. - Create realistic attack scenarios to test investigation capabilities. - Advise on integrating security tools into investigation workflows. - Explain security practices clearly to engineers without a security background.

Requirements - At least five years of experience in SOC operations or security analysis. - Strong understanding of attack techniques and security investigations. - Practical experience with SIEM, EDR, and related security tools. - Clear communication skills and an interest in AI supporting analysts.

Nice to have - SANS or GIAC certifications, such as GCIH or GCFA. - Experience creating SOC playbooks and procedures. - Scripting or automation skills, including Python or PowerShell. - Red team or penetration testing experience.

Benefits and work setup - Remote position; Singapore time zone is preferred. - Full-time or contract arrangement.