AI SOC Solutions Architect - Professional Services

We're looking for an AI SOC Solutions Architect to join our growing Professional Services organization, reporting to the Director of Professional Services. In this role you'll design and deliver AI-driven SOC automation for our enterprise customers — turning their existing security operations into agent-assisted, automated workflows that measurably reduce analyst workload and mean time to respond. You'll balance customer-facing collaboration with deep, hands-on technical work, driving both engagement and execution across a diverse global customer base. This is a builder's role at the leading edge of the AI SOC category. You'll work directly with SOC leaders and analysts, engineer real solutions on the Torq platform, and help customers see tangible results within weeks of deployment.

Responsibilities

Design and implement AI-driven SOC automation — build agentic workflows and AI agents that triage, enrich, investigate, and respond to security alerts, measurably reducing analyst workload and MTTR; Translate SOC processes into automation — map a customer's existing Tier 1/2 triage, investigation, and incident response runbooks into automated and agent-assisted workflows on Torq; Own technical delivery for strategic accounts end to end — architecture, build, validation, and handoff — with customers seeing measurable outcomes within weeks; Engineer integrations across the customer's security stack — SIEM, EDR/XDR, IdP, ticketing, and threat intel — via REST APIs; Design, tune, and evaluate AI agent behavior — prompt engineering, defining guardrails, and setting human-in-the-loop checkpoints so automation is trustworthy in production; Serve as trusted technical advisor to SOC leaders and analysts — run working sessions, resolve blockers, and drive adoption across the account; Shape the offering — feed field learnings back into product and help build new Professional Services offerings as the AI SOC category evolves

Requirements

4–6+ years in a technical security role — SOC analyst, detection/automation engineer, incident response, or a technical Professional Services / Solutions Architect role in cybersecurity; Hands-on SOC operational understanding — alert triage, investigation, escalation, and the incident response lifecycle; Direct experience with core detection tooling — at least one SIEM (Sentinel, Splunk, Chronicle) and one EDR/XDR (CrowdStrike, Defender, SentinelOne); Automation and integration skills — proficiency in at least one of Python, Bash, or Go, plus fluency with REST APIs, JSON, and webhooks; Working knowledge of applied AI — practical experience using LLMs and agentic AI to solve real problems: prompt engineering, designing and evaluating agent behavior, and a clear grasp of failure modes (hallucination, over-automation) and how to guardrail against them; Customer-facing excellence — able to explain complex technical and AI concepts to both analysts and CISOs, and to own an account relationship; Strong organizational skills — comfortable juggling multiple concurrent enterprise engagements under shifting priorities

Nice to have

SOAR platform experience (Torq, XSOAR, Splunk SOAR/Phantom, Chronicle SOAR), especially migrations off legacy platforms; Detection engineering and query languages — KQL, SPL, Sigma, YARA; Familiarity with agentic AI infrastructure — MCP, tool/function calling, RAG, or vector stores; MSSP / multi-tenant deployment experience; Cloud security fundamentals — AWS/Azure/GCP IAM, logging, and API models; Relevant certifications — security and IR certs (CISSP, GCIH, GCIA, GCFA) or an AI/cloud certification