We are looking for a hands-on Solutions Architect – Presales to lead technical customer engagements for an AI-driven security operations platform. This role involves designing customer-specific architectures, leading technical evaluations and proof-of-value (POV) engagements, and helping security teams operationalise AI-powered SOC capabilities. You will work closely with detection engineers, threat hunters, SOC leaders and CISOs, translating complex security requirements into practical architectures and measurable outcomes. This is an individual contributor role suited to someone with strong technical depth, customer-facing experience and a high sense of ownership.

Key Responsibilities
- Lead technical discovery to assess customer telemetry, data retention, existing detection coverage and security gaps.
- Design environment-specific detection and analytics strategies, distinguishing real-time detection from hypothesis-driven threat hunting.
- Own technical evaluations and proof-of-value engagements end to end, including success criteria, environment setup, scenario execution and results presentation.
- Conduct detection coverage and telemetry-gap assessments mapped to MITRE ATT&ck; translate customer use cases and incident reviews into actionable detection and hunting strategies.
- Configure customer-specific context, including privileged accounts, critical assets, approved regions, service principals and authorised tools.
- Build SOAR and security automation integrations, connecting platform findings to customer response tools.
- Support onboarding across connectors, data pipelines, authentication and multi-tenant architecture.




- Conduct technical workshops, deep dives and demonstrations; maintain reference architectures and scenario walkthroughs.
- Collaborate with Product and Engineering teams, sharing field insights to improve detection capabilities and product direction. Required Skills and Experience
- 7+ years of experience in security operations, detection engineering, threat hunting, incident response or security architecture, including customer-facing or consulting engagements.
- Hands-on experience developing, tuning and measuring detection rules in production environments.
- Strong understanding of MITRE ATT&CK;, including technique mapping, coverage analysis and gap identification. Familiarity with MITRE ATLAS is an advantage.
- Ability to determine when to use deterministic detection logic versus baseline, rarity-based or behavioural analytics.
- Practical experience building and maintaining SOAR integrations, automation workflows and playbooks using platforms such as Cortex XSOAR, Splunk SOAR, Tines or Torq.
- Hands-on experience with several of the following:
- SIEM platforms: Microsoft Sentinel, Splunk, Google SecOps/Chronicle or Elastic.
- EDR/XDR solutions, identity providers and identity audit telemetry.
- CSPM/CNAPP,



firewall and proxy technologies.
- Cloud security across AWS, Azure or GCP.
- Ability to write and analyse detection queries using KQL, SPL, Lucene or SQL; familiarity with Sigma or similar portable detection formats.
- Proficiency in Python for scripting, enrichment and API integrations.
- Strong networking and Windows/Linux endpoint fundamentals.
- Excellent communication skills, with the ability to engage technical teams and senior security stakeholders.
- Comfortable working in a fast-paced startup environment with significant individual ownership. Good to Have
- Experience in an MSSP or multi-tenant, content-centric security platform.
- Exposure to agentic AI, LLM-powered security investigations or AI security.
- Detection-as-code experience, including Git-based workflows, CI/CD, versioning and automated testing.
- Relevant certifications such as GCIA, GCTI, GCFA, CISSP or cloud security certifications. What Makes This Role Engaging?
- Work on AI-driven security operations and next-generation SOC capabilities.
- Engage directly with enterprise security leaders and technical teams.
- Combine detection engineering, threat hunting, security automation and solution architecture.
- Influence product capabilities through real-world customer feedback. If you enjoy solving complex security challenges, building practical detection strategies and working directly with customers, this role offers an opportunity to make a meaningful impact. Please write to [email protected] to get connected

📌 Solutions Architect | Presales | Detection Engineering | Threat hunting | MITRE | SOAR | SIEM (Bangalore Metropolitan Area)
🏢 CareerXperts Consulting
📍 Bangalore Metropolitan Area