Solution Architect – Agentic SOC

Skillfield

. Design agentic SOC architectures where AI agents handle triage, enrichment, investigation and response under clear human oversight .

Posted 11/4/2026full-timeMelbourne • AustraliaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing SOC architectures with AI integration, focusing on SIEM, SOAR, and XDR platforms. Proficient in vulnerability management and exposure reduction, with strong client engagement and communication skills.

Highest-signal resume keywords

Solutions Architect ExperienceSIEM And SOAR ImplementationVulnerability Management ToolsMicrosoft Azure InfrastructureClient-Facing Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security OperationsDetection EngineeringAutomation PlaybooksScripting SkillsInfrastructure As Code

Soft Skills

Client EngagementWorkshop FacilitationCommunication Skills

Tools & Technologies

Microsoft SentinelSplunkGoogle Security OperationsCortex XSOARAzure AI Foundry

Industry Keywords

MITRE ATT&CKGartner CTEM ModelVulnerability ManagementCloud Security PostureBreach And Attack Simulation

Tech Stack

Tools & technologies

AzureCloudPythonSplunk

About the role

Key responsibilities & impact

Design agentic SOC architectures where AI agents handle triage, enrichment, investigation and response under clear human oversight
Architect SIEM, SOAR and XDR platforms such as Microsoft Sentinel, Splunk, Google Security Operations or Cortex XSOAR, and integrate AI agents into them
Design CTEM programs combining vulnerability management, attack surface management, cloud security posture and breach and attack simulation
Define guardrails for autonomous response, including approval requirements, logging and auditability
Lead discovery and solution workshops with client SOC leaders, security architects and executives
Shape proposals, estimates and statements of work with the sales team, and present solutions
Build hands-on proofs of concept, including detection content, automation playbooks and agent workflows
Act as design authority during delivery, guiding engineers and resolving trade-offs
Define value metrics such as mean time to detect and respond, analyst workload and exposure reduction
Track the SOC, CTEM and AI vendor landscape and provide recommendations to clients and Skillfield's offering
Work with clients from initial conversation through delivery and collaborate with engineers to implement designs

Requirements

What you’ll need

Substantial experience as a solutions or security architect, with a strong grounding in security operations
Hands-on experience designing and implementing SIEM and SOAR platforms, including detection engineering and automation playbooks
Experience with vulnerability and exposure management tools such as Tenable, Qualys, Rapid7, Wiz or XM Cyber
Experience with Microsoft Azure infrastructure, including Microsoft Sentinel, Microsoft Defender XDR and Azure Logic Apps
Practical experience building or integrating large language model (LLM) or agent-based automation on Azure AI Foundry, including Azure OpenAI, and a clear view of its risks in an operational setting
Familiarity with frameworks such as MITRE ATT&CK and the Gartner CTEM model
Scripting or programming skills (Python, KQL, SPL or similar) and experience with infrastructure as code
Strong client-facing skills: you can run a workshop, write a design and explain it to an executive
Full Australian working rights

Benefits

Comp & perks

Flexibility
Strong support
Performance-based recognition
Inclusive workplace
Recruitment process adjustments available upon request