Job SummaryThe Presales Solutions Architect - Security Operations at SHI International is responsible for being SHI's Subject Matter Expert on all aspects of Security Operations Center design and optimization, including SIEM/SOAR architecture, EDR/XDR strategy, incident response frameworks, and security automation and orchestration.
In this role, you will split your time between presales client engagements and internal practice development. On the presales side, you'll take a consultative approach, leading technical discovery sessions with clients to assess their security operations maturity, designing target-state SOC architectures, and delivering compelling demos, POCs, and technical presentations. On the internal side, you'll build reusable collateral such as reference architectures, battle cards, and enablement content; evaluate and qualify new vendor partnerships; and conduct training sessions that keep our engineering and sales teams current on emerging threats, platform capabilities, and best practices.
Your credibility and technical depth will make you a trusted advisor to both SHI's most strategic customers and our internal stakeholders, driving meaningful security outcomes and revenue growth across the SecOps practice.
This position is a remote position with Home Office setup as determined by SHI management.
Role Description- Design and deliver product demonstrations, proof-of-concepts (POCs), and technical presentations focused on enterprise SOC solutions including SIEM, SOAR, EDR/XDR, and threat intelligence platforms
- Lead technical discovery sessions to assess clients' security operations maturity across detection, response, threat hunting, and security automation capabilities
- Translate complex SecOps concepts - such as alert triage optimization, MITRE ATT&CK mapping, and automated response playbooks - into business-relevant value propositions for both technical and executive audiences
- Design and present target-state SOC architectures covering log ingestion, correlation rules, threat detection logic, incident response workflows, and integration with broader security stacks (CNAPP, IAM, zero trust)
- Develop and maintain internal practice collateral including reference architectures, battle cards, competitive analyses, technical briefs, and vendor evaluation frameworks
- Evaluate and qualify new vendor technologies and product capabilities; make recommendations on partner adoption, platform consolidation, and legacy solution retirement
- Conduct internal enablement sessions for engineering and sales teams on emerging threats, product updates, use cases, and SOC best practices
- Drive revenue growth within the presales team by identifying new security operations opportunities and optimizing service offerings
- Collaborate with SHI stakeholder partner teams to create synergistic security operations service solutions that integrate across SHI's broader portfolio
- Build and maintain strong relationships with key clients and partners, ensuring high levels of satisfaction and retention through product briefings, demonstrations, and knowledge transfer
- Stay current with new SecOps technologies, frameworks, and regulatory developments; track adversary TTPs and evolving threat landscape to inform architectural recommendations
- Contribute to practice development by identifying areas for growth, leading innovation initiatives, and creating and maintaining practice standards to ensure high-quality service delivery
Behaviors and Competencies- Problem-Solving: Can proactively identify and take ownership of complex problem-solving initiatives, initiate preventative measures, collaborate with others to find solutions, and drive successful outcomes.
- Communication: Can effectively communicate complex ideas and information to diverse audiences, facilitate effective communication between others, and mentor others in effective communication.
- Adaptability: Can lead others through change, help teams adapt to new directions, and create a culture open to change.
- Leadership: Can take ownership of complex team initiatives, collaborate with others in decision-making processes, and drive team performance.
- Teamwork: Can build and lead multiple teams, fostering a cooperative environment and ensuring effective communication between team members.
- Self-Motivation: Can take ownership of complex personal or professional initiatives, collaborate with others when necessary, and drive results through self-motivation.
Skill Level Requirements- Proficiency in overseeing and directing projects to completion, ensuring goals are met, resources are utilized efficiently, and stakeholders are satisfied - Intermediate
- Ability to systematically identify, document, and manage the technical needs and specifications of a project by engaging with stakeholders and analyzing business objectives to ensure successful project outcomes - Intermediate
- Ability to define, design, build, and maintain robust security operations architectures and SOC solutions by leveraging enterprise security platforms and infrastructure effectively - Intermediate
- Ability to write, debug, and maintain code in various scripting languages (Python, PowerShell, KQL, SPL) and their application to detection rules, response playbooks, and integration workflows is a plus - Intermediate
- Ability to understand and manage various infrastructure components (firewalls, load balancers, hypervisors, storage, monitoring, security) and use orchestration tools to develop comprehensive technical solutions - Intermediate
- Ability to develop detailed opportunity engagement scoping documents that accurately define deliverables and requirements - Intermediate
- Deep understanding of SOC operational workflows including triage processes, incident response runbooks, threat hunting methodologies, and continuous improvement frameworks - Intermediate
Other Requirements- Completed Bachelor's Degree in Computer Science, Cybersecurity, Information Technology, or equivalent work experience
- 5+ years of experience in security operations, SOC architecture, or security engineering roles with hands-on SIEM/SOAR/EDR/XDR design and implementation
- Demonstrated experience in presales, solutions architecture, or technical consulting within the cybersecurity domain
- Willingness to travel occasionally up to 20%
Preferred Certifications
One or more of the following certifications preferred but not required:
- CISSP, CCSP, or CISM
- CompTIA Security+, CySA+, SANS GIAC (GCIA, GCIH, GSOM), or CEH
- SIEM platform certification (vendor-specific)
- ITIL Foundation or ITIL Specialist (for service operations alignment)
- Cloud Security Specialty Certification
- Certified SOC Analyst (CSA) or equivalent
The estimated annual pay range for this position is $180,000 - $250,000 which includes a base salary and bonus. The compensation for this position is dependent on job-related knowledge, skills, experience, and market location and, therefore, will vary from individual to individual. Benefits may include, but are not limited to, medical, vision, dental, 401K, and flexible spending.
