← All Positions
AI-SOC-ARC-01AI Security & SOC

AI SOC Architect

Remote or hybrid: Ho Chi Minh City, Hanoi, or Ecopark, Hung Yen, Vietnam
Full-time · Hybrid work
5+ years experience
Apply Now →

About Us

Alexa Cybersecurity designs, integrates, and validates enterprise cybersecurity and AI security architectures. We help organizations protect applications, APIs, AI, data, cloud, and critical infrastructure with practical controls that work in production.

Position Overview

We are seeking an AI SOC Architect to define the security architecture behind modern, AI-enabled Security Operations Centers. You will work with customer security leaders and technical teams to turn operational requirements into an actionable architecture across telemetry, detection engineering, automation, AI-assisted investigation, and governed response. This is a consulting and delivery leadership role for someone who can engage both executives and hands-on security teams.

Key Responsibilities

  • Lead AI SOC discovery workshops, assess current-state SOC capabilities, and define target operating models and deployment roadmaps.
  • Design security architectures that connect SIEM, SOAR, EDR, NDR, identity, cloud, threat intelligence, and case-management workflows.
  • Define safe AI-assisted workflows for alert triage, investigation, knowledge retrieval, reporting, and analyst productivity, including approval gates and auditability.
  • Translate business risk, compliance, and operational requirements into security controls, data flows, integration patterns, and measurable delivery plans.
  • Guide proof-of-concept and production deployment work with implementation engineers, technology partners, and customer teams.
  • Validate proposed architectures through use-case testing, tabletop exercises, adversarial scenarios, and operational readiness reviews.
  • Present architecture decisions, risks, and recommendations clearly to CISO, SOC leadership, and technical stakeholders.
  • Create reusable reference architectures, deployment standards, runbooks, and knowledge-transfer materials.

Qualifications

  • Bachelor's degree in Information Security, Computer Science, Engineering, or a related field.
  • At least 5 years of experience in security architecture, security engineering, SOC modernization, detection engineering, or incident response.
  • Strong understanding of SIEM, SOAR, endpoint and network telemetry, threat intelligence, identity, cloud security, and incident response processes.
  • Experience designing or deploying security integrations and operational workflows for enterprise environments.
  • Working knowledge of AI security, LLM or agentic workflow risks, and the controls needed to operate AI-assisted security use cases safely.
  • Strong consulting, workshop facilitation, documentation, and stakeholder-management skills.
  • Fluent English, written and spoken, is required for customer workshops, technical documentation, and international collaboration.

Preferred Experience

SOC operating model designSIEM or SOAR architectureDetection engineering and threat huntingCloud and identity securityAI security and agentic workflow controlsSecurity architecture certifications such as CISSP, CISM, CCSP, or equivalent

What We Offer

  • Competitive salary and performance-based incentives.
  • Hybrid work with the option to work remotely, subject to project needs.
  • Opportunity to architect AI-enabled security operations for enterprise customers.
  • Professional training, certification support, and international exposure.
  • A collaborative environment with security architects, engineers, and global technology partners.

How To Apply

To apply, please send your CV and a short introduction describing the SOC or security architecture programs you have designed or delivered.

Apply Now →
Office

Escalation Holding LLC
5900 Balcones Dr, Ste 100
Austin, TX, USA